Privacy policy

How Plaida protects and uses your data.

Plaida (hereinafter "we", "us", "our") web platform managed by Kapreon Inc. is committed to protecting the personal information of its users (hereinafter "you", "your"). This privacy policy explains how we collect, use, disclose, retain, and protect your personal information when you use our platform, in accordance with Quebec's Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1) (hereinafter "Private Sector Act").

By using the Plaida platform and providing us with your personal information through technological means, you consent to the collection, use, and disclosure of this information for the purposes described in this policy.

1. What is personal information?

Personal information is any information that relates to a natural person and allows, directly or indirectly, to identify them. This may include items such as your name, email address, as well as technical and digital information.

2. Personal information we collect

We collect the following types of personal information:

Information you provide:

  • Photos
  • Gender
  • Email address

Information you choose to provide when you contact us for support or information.

Information collected automatically through technological means:

  • Your IP address
  • Date and time of connection
  • Pages visited on the platform
  • Your web browser

We use technological means to collect some of this information. For example, IP addresses and Browse data are collected automatically when you use the platform.

Regarding payments, we use Stripe to process transactions. We do not directly collect or store your payment information (such as credit card numbers); this information is processed by Stripe according to their security policy.

3. Purposes of collecting and using your personal information

We collect and use your personal information for the following specific purposes:

  • To provide the Plaida service: Use your photos and, if applicable, your gender to generate photos with your head via our image generation service.
  • For authentication: Use your email address to allow you to log in to the Plaida platform via the magic link system, without a password.
  • For customer support: Use your email address and any additional information you provide to Plaida to respond to your requests for help or information.
  • To improve the platform: Analyze technical and digital data (IP address, pages visited, date and time of connection) to understand how the platform is used, identify problems, and improve the user experience. This use may involve profiling to assess your behavior on the platform.

We are committed to collecting only the personal information necessary to achieve these purposes.

4. Disclosure of your personal information to third parties

We may disclose your personal information to third parties or allow them to access it in the following cases:

Service providers: We use third parties to help us operate our platform and provide our services. These third parties include:

  • Our image generation service: Receives photos and potentially gender to perform image generation.
  • Stripe: Processes payments. We do not share your financial information with Stripe; you provide it directly during the payment process.
  • Other technical service providers (for hosting, sending emails, etc.). These providers may only use your personal information within the strict scope of their mandate and are contractually obligated to ensure its protection.

When required by law: We may be required to disclose your personal information to comply with a legal obligation, a court order, or if we believe that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.

Your personal information may be disclosed outside of Quebec if our service providers or their servers are located outside the province. In this case, we will conduct a privacy impact assessment to ensure that your information will receive adequate protection, particularly with regard to generally recognized personal information protection principles.

5. Consent

Your consent to the collection, use, and disclosure of your personal information is essential.

  • Collection by technological means: By using our platform and providing your information, you consent to the practices described in this privacy policy.
  • Express consent for sensitive information and secondary purposes: For sensitive personal information, we will ask for your express consent. This means you will need to take a positive action to clearly indicate your agreement. This express consent will be requested separately for each specific purpose.
  • Validity criteria for consent: Any consent we obtain is manifest, free, informed, and given for specific purposes. We strive to provide you with all necessary information in simple and clear terms so that your consent is fully informed.
  • Withdrawal of consent: You have the right to withdraw your consent to the use and disclosure of your personal information at any time. Withdrawing your consent may, in some cases, affect our ability to provide you with certain services.

6. Security measures

We take appropriate and reasonable security measures to protect the personal information we collect, use, disclose, retain, or destroy. These measures take into account the sensitivity of the information, the purpose of its use, its quantity, its distribution, and its medium. For example, the absence of stored passwords for magic link authentication reduces certain security risks.

7. Retention and destruction of personal information

We retain your personal information only for the time necessary to achieve the purposes for which it was collected or used. When these purposes are fulfilled, we undertake to destroy this information or to anonymize it for use for serious and legitimate purposes, subject to a retention period provided by law. Anonymization is carried out irreversibly, so that it is no longer possible to directly or indirectly identify the person concerned.

8. Your rights

As a data subject, you have several rights regarding your personal information.

To exercise your rights, please contact our Privacy Officer whose contact details are provided below. Your request must be made in writing.

9. Privacy Officer

The person with the highest authority within Kapreon Inc. is responsible for ensuring compliance with and implementation of the Private Sector Act and acts as the Privacy Officer. This function may be delegated in writing.

The title and contact information of the Privacy Officer are published on our website.

For any questions regarding this privacy policy or your personal information, please contact:

Kapreon Inc.
100, 50 rue Saint-Charles Ouest,
Longueuil, J4H 1C6,
Quebec, Canada

10. Changes to the Privacy Policy

This privacy policy may be amended from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on our website. We encourage you to regularly review this policy to stay informed about how we protect your personal information.