Privacy

Who is responsible

Sum is operated by Mikhaël Aubut, a sole proprietorship in Québec.

The person in charge of the protection of personal information (under Québec's Law 25) is Mikhaël Aubut, founder. For any question about your information, write to him directly.

[email protected]

What we collect on usesum.ca

When you join the launch list with the “Notify me” form, we collect:

• your email address;
• your trade or type of business, if you give it (it's optional);
• the language of the page, so we write to you in the right one.

It is stored on Sum's server, in Canada, and Mikhaël gets a notification email for each sign-up. We use it for one thing only: to write to you once, at launch.

What we collect on app.usesum.ca

On the platform, where you create and manage your sites:

• your account: your email address. You log in with a link sent by email; there is no password;
• your sites' content: the text and photos you put in them;
• your conversations with the Sum agent.

All of it is stored on the same server, in Canada. We use it to run the service: log you in, build and publish your sites, and have the agent answer.

Who else sees your data

To run Sum, three providers located outside Québec receive part of your data:

• Anthropic (United States): the messages of your conversation with the Sum agent are sent to Anthropic's API, which generates the answers. According to its commercial terms, data sent through its API is not used to train its models.
• Resend (United States): sends the emails, such as login links and notifications.
• Cloudflare: sits in front of the sites (HTTPS, cache, protection against attacks). It sees the technical data of a visit, such as the IP address.

We don't sell, rent or use your personal information for advertising. No one else receives it.

Statistics and cookies

To count visits, we use Umami, installed on our own server in Canada. It sets no cookies, doesn't follow you from site to site and only gives totals: pages viewed, country, device type. It can't tell who you are.

As for cookies, only what's needed:

• sum_langue remembers your language, French or English;
• on app.usesum.ca, compo_session keeps you logged in. Two other cookies of the same kind are used while you work: compo_visiteur keeps the draft of a site started without an account, and sum_edit opens your site's editor.

No advertising or tracking cookies.

How long we keep it

• Launch list: until launch, or until you ask to be removed.
• Account, sites and conversations: as long as your account exists, or until you ask us to delete them.
• Backups: one copy a day, kept 14 days on the same server, in Canada. So what you have deleted also leaves the backups within 14 days.

Your rights

At any time, you can ask to access, correct or delete your information, and withdraw your consent. Write to [email protected]: we answer within 30 days.

If you're not satisfied with the answer, you can file a complaint with the Commission d'accès à l'information du Québec.

[email protected]cai.gouv.qc.ca

Changes

If this policy changes, the date at the top of the page changes too. If the change is significant, we announce it by email to account holders.