Privacy Policy

This privacy policy describes how Astérion Solutions inc. collects, uses and protects your personal information in accordance with applicable Quebec and Canadian laws, notably Law 25 and PIPEDA (federal).

1. Data Controller

Astérion Solutions inc. (NEQ 1181705543, Quebec Enterprise Register) is responsible for processing your personal information. Under Law 25, the person responsible for the protection of personal information is Pierre Séré (contact@solutions-asterion.com).

Astérion Solutions inc. — NEQ 1181705543
254 Montée Sainte-Victoire, Sainte-Victoire-de-Sorel (Québec) J0G 1T0, Canada
Pierre Séré — Privacy Officer (person responsible for the protection of personal information)
contact@solutions-asterion.com

2. Data Collected

We collect the following data as part of our services:

• Identification information: first and last name, email address
• Professional information: company, position, phone number
• Connection data: IP address, browser type, pages visited
• Usage data: features used, preferences

3. Purpose of Processing

Your data is used to:

• Provide and improve our services
• Manage your account and subscriptions
• Communicate with you regarding our services
• Ensure security and prevent fraud
• Comply with our legal obligations

4. Automated Processing and Data Minimization

Certain features of our applications use proprietary automated processing technologies. These processes comply with the data minimization principle:

• Only areas explicitly selected by the user are processed
• The feature is designed to exclude personal information and client identifiers: only the cropped dimension zones are sent — never the full drawing, title block, client name or part number. The user must select only the necessary zones and include no personal information in them
• AI processing is performed in Canada, in the Montreal region (Google Vertex AI)
• Each zone is processed by an independent AI call, with no correlation between requests
• Data is not retained beyond immediate processing
• No business data is used to improve or train external systems
• The user has full control over what is submitted for processing

Astérion Solutions inc. undertakes that no data submitted by users is used to train or improve third-party algorithmic models. The Services do not, on their own, make any decision producing a legal or significant effect on a person (s. 12.1, Law 25): any automated output must be reviewed and validated by an authorized person before being used.

Since August 2026, automated extraction is performed exclusively in Canada (Google Vertex AI, Montreal region): no extraction data leaves Canada. Should a failover to a service outside Canada ever be reintroduced for service continuity, it would be limited to dimension zones stripped of any identifying information, announced in this policy before going live, and preceded by the assessment required by Law 25.

Why Google Vertex AI: we chose it as our primary service for its performance and for the trust inspired by its enterprise-grade service model — processing in the Canadian region (Montreal), a contractual no-training commitment on customer data, and independent certifications (SOC 2, ISO 27001/27017/27018).

Concrete examples of what is sent for processing

Call #1

Call #2

Call #3

5. Business Data Entrusted by Your Company

Beyond personal information, our applications host your business data: technical drawings, dimensions, inspection reports, quality documents and metrology data — often covered by your own confidentiality agreements with your customers. Four commitments govern them:

• They remain the exclusive property of your company — Astérion Solutions inc. acts solely as their technical guardian and acquires no rights over them
• They are not personal information: they are governed by your service contract and, on request, by a data processing agreement
• Retention: for the duration of the contract, then deletion no later than 90 days after it ends (except legal obligations), with written confirmation on request
• Export: you can export your data from the application at any time, including during the 90 days following the end of the contract

6. Data Retention

Your information is retained as long as necessary for the described purposes, or as required by law. Account data is kept for the duration of the subscription and up to 5 years afterwards (accounting and legal reasons). Business data follows the 90-day rule described in section 5. Our service data is hosted in Canada, in the Montreal region.

7. Data Sharing and Sub-processors

We never sell your information. We use the following technical sub-processors, bound by the same confidentiality obligations:

In accordance with section 17 of Quebec's Law 25, a privacy impact assessment was carried out for each of these communications outside Quebec. Its summary, the full sub-processor register and a data processing agreement are available on request.

We inform our customers at least 30 days before adding or replacing a sub-processor that handles personal information (except urgent replacement for service continuity, notified without delay).

In case of a confidentiality incident posing a serious risk, we notify Quebec's Commission d'accès à l'information and the affected individuals.

Data submitted to automated processing functions is never shared with third parties for commercial purposes or for improving external services.

8. Your Rights and Your Consent

In accordance with Quebec's Law 25, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to require the destruction of your information once the purposes of its collection are fulfilled
• Right to data portability
• Right to withdraw your consent

Your consent is collected when your account is created (acceptance of the terms of use) and, for any optional use, at the time of that use. To withdraw it, write to the person responsible for the protection of personal information (contact@solutions-asterion.com); withdrawal does not affect processing necessary for the performance of the contract. We respond to any access, rectification or withdrawal request within a maximum of 30 days.

9. Cookies

Our site uses cookies essential to the operation of the application (authentication, preferences). No advertising or third-party tracking cookies are used. Public forms (signup, login, resources) are protected by an anti-bot check (Cloudflare Turnstile) that processes the IP address and technical browser characteristics, with no profiling.

Audience measurement: we count pageviews on the public sections of this site with GoatCounter, which stores no cookie on your device and keeps no identifier able to follow you from one visit to the next. No consent is therefore required. Connected areas (dashboard, administration) are never counted. GoatCounter is hosted in Europe and does not retain IP addresses.

10. Changes, Version History and Business Transfer

We may modify this policy at any time. Significant changes will be communicated by email or via the application. The last update date is indicated at the top of this page.

In the event of a sale or merger of Astérion Solutions inc., data would be transferred to the successor under the same confidentiality obligations, and our customers would be informed beforehand.

Version history

• August 14, 2026 — sub-processors detailed by country, section 17 assessment, business data section, Canadian email transport (Amazon SES Montreal)
• August 13, 2026 — audience measurement replaced by cookie-less GoatCounter (Google Analytics removed)
• June 18, 2026 — initial version

11. Contact

To exercise your rights or for any question, contact Pierre Séré, person responsible for the protection of personal information (contact@solutions-asterion.com) — response within 30 days at most. You may also file a complaint with Quebec's Commission d'accès à l'information (CAI).

Pierre Séré — Privacy Officer (person responsible for the protection of personal information)
contact@solutions-asterion.com

12. Language of this policy

This policy is written in French and translated into English for the reader's convenience. In case of discrepancy between the French and English versions, the French version shall prevail.