Privacy policy

This policy explains what personal information Linuen inc. collects when you use the Linuen service, why, who it is shared with, where it is processed, how long it is kept, and how to exercise your rights. It is written to meet the requirements of Quebec's Act respecting the protection of personal information in the private sector and of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Our Data processing page complements this policy by describing the product as it currently runs, including which AI providers are actually in use.

1. Person in charge of personal information

Linuen inc. is responsible for the personal information it holds. The person in charge of protecting it is named at the top of this page, together with the company's address. You can contact that person with any question, request or complaint about your personal information, through the Contact page or at the address shown at the top of this page.

2. What your files contain

Linuen is for assessing digital projects. A file describes a project; it may nevertheless contain personal information, including about other people, if your project needs it. Our terms of use place no restriction on it, but warn you of what this implies, and you remain responsible for what you submit. This policy is mainly about information concerning you, as an account holder.

When personal information is in a file, the software detects it and offers to mask it before anything is sent to the AI (section 6). This is a safeguard, not a guarantee.

3. Information we collect

Your account.

• Your name, email address and preferred language.
• Your password, stored only as a hash: no one at Linuen can read it. If you sign in with Google or Apple, where that option is offered, we receive an identifier, your email address and, where provided, your name from that provider; we never receive your password.
• Your second factor: the secret for your authenticator app, encrypted in our database, and your backup codes, stored only as hashes.
• If you ask for a device to be remembered for thirty days: a hash of that device's token and a label based on the browser type. No IP address is attached to it.
• The date you accepted the terms of use.

Your sign-ins. For the security of your account, each sign-in session records the IP address and browser type used, along with when it was opened, last active and closed. Failed sign-in counters, which slow down intrusion attempts, are erased after one day.

Your province and language. When you sign up, a province is suggested based on your IP address, using a database installed on Linuen's own server: your address is not sent to anyone, and this lookup does not record it. The province is only kept if you confirm it, and you can change it. Your language is suggested from your browser's language, and you make the choice.

Your purchases. Payments are processed by Stripe. Linuen never receives or stores your card number. For each purchase we keep the plan bought, the amounts, taxes, currency and dates, the identifiers Stripe assigns to the customer, payment and subscription, and the billing country and province, which determine the taxes. Notifications from Stripe are kept to track payments, without the buyer's name, address or phone number.

Your requests. When you write to us through the contact form or ask for support, we keep your name, email address, your organization's name if you give it, the subject and your message.

The content of your files. What you write and the documents you import are stored in your workspace. They may contain personal information if your project needs it (section 2). When the software detects some, it keeps the detected value, encrypted, together with your decision to mask it or let it through.

Logs. The server keeps a technical log of incoming requests, including IP addresses, to operate and secure the service. The platform also keeps a log of sensitive actions — for example Linuen opening your workspace, credits being granted, or a payment incident — which names the account concerned but not the content of your files.

What we don't collect. The site contains no audience measurement, no advertising, no third-party trackers and no pixels. Fonts and icons are served from our own server.

4. Why we use it

We use your personal information only to:

• create and secure your account, authenticate you, and protect your workspace from unauthorized access;
• provide the service: prepare your files, run the operations you request, keep your versions;
• issue quotes, process payments, grant credits and calculate taxes for your province;
• write to you about your account: invitations, password resets, credits given to you, important notices about the service;
• answer your requests and support you when you ask us to;
• meet our legal obligations, including tax obligations, and establish or defend our rights.

We do not sell or rent your personal information, and we do not use it for advertising. The content of your files is not used to build the references Linuen publishes, to showcase the service, or to train any AI model.

The service makes no decision based exclusively on automated processing of your personal information. The AI produces proposals about your project, not about you.

5. Who it is shared with, and where

Within Linuen, your personal information is available only to those who need it to provide the service to you. The platform owner can open your workspace to work in it or to help you; every opening and closing is recorded in the platform log, a banner shows it for the whole time, and access expires on its own after eight hours.

We rely on the following service providers, which act only on our behalf:

Provider	What it does	Where
OVHcloud	Hosting of the application, database, imported documents and backups	Beauharnois, Quebec, Canada
Anthropic	AI processing of the file excerpts sent when you run an operation	United States
Stripe	Payments, invoicing, tax calculation, subscription management portal	Under Stripe's terms; outside Quebec
Google (Google Workspace)	Sending the service's emails	Under Google's terms; outside Quebec

What is sent to the AI provider. Nothing is sent until you launch an operation. When you do, excerpts of your file — the description, questionnaire answers, selected sources and documents, architecture references and the current proposal — are sent to it. Your name, email address and account details are not. Under Anthropic's commercial terms as reviewed on October 7, 2026, data sent through its API is not used to train its models and is retained for no more than seven days, for safety purposes. Linuen has no control over that processing beyond those terms.

We may also disclose personal information where the law requires or permits it — for example, to comply with a court order. If Linuen were sold or merged, your information could be disclosed to the buyer under the conditions set by law.

6. Disclosure outside Quebec

Some processing takes place outside Quebec: AI processing in the United States, and payments and email under their providers' terms. Before personal information is disclosed outside Quebec, Quebec law requires an assessment of whether it will be adequately protected there, taking into account its sensitivity, the purposes for which it will be used, the protection measures — including contractual ones — and the legal framework that applies. When you submit personal information about other people in a file, it is your organization, which holds it, that is responsible for this assessment and for the right to disclose it in this way.

Here is what the service provides:

• Send only what is necessary. We recommend that you submit only the personal information your project requires (section 2); your account details are never sent to the AI provider.
• Masking before sending. Before each operation, the software scans locally, without AI, for the most common kinds of personal information — email addresses, phone numbers, social insurance numbers, card numbers, dates of birth and postal codes in context, and people's names — and shows them to you. You decide whether to mask them, which is the default, or let them through; no operation is sent while a decision is pending. Masked values travel as tokens; the mapping between tokens and values stays in our database, in Canada. A final safety net masks email addresses, phone numbers, social insurance numbers and card numbers again at the moment of sending.
• What masking does not do. It does not catch everything, and it cannot recognize confidential information that is not personal. It reduces accidents; it does not replace your own judgment about what you send.
• The provider's terms. No training on your data and limited retention, as described in section 5.

Information processed outside Quebec may be subject to the laws of the country where it is located, including the power of that country's authorities to access it.

7. Retention and deletion

• Account and workspace. Your account information and workspace content are kept for as long as your account exists. You can ask for them to be deleted through the Contact page; we do so within thirty days of confirming your identity, and we confirm it to you.
• Sign-in sessions. Sessions, with their IP address and browser type, are kept with your account so you can spot suspicious access, and are deleted with it.
• Purchases. Billing records are kept for as long as tax laws require, even after your account is deleted.
• Platform log. Entries in the log of sensitive actions are never rewritten; they are kept as a record of what happened, including Linuen opening your workspace.
• Backups. The database is backed up daily in Canada, and each backup is kept for fourteen days. Deleted information therefore disappears from backups no later than fourteen days after deletion.

Once the purpose for which information was collected has been fulfilled, we destroy or anonymize it, subject to any retention period required by law.

8. Security

We protect your information with measures suited to its sensitivity, including: encrypted connections (HTTPS); a mandatory second factor; passwords and backup codes stored as hashes; authentication secrets encrypted at rest; sessions limited to eight hours and closed after thirty minutes of inactivity; limits on sign-in attempts; and separation of each workspace, readable only by its holder and by Linuen under the conditions in section 5. No measure is foolproof, which is why section 11 explains what we do if an incident occurs.

9. Your rights

Subject to the exceptions provided by law, you may:

• access the personal information we hold about you and receive a copy;
• have it corrected if it is inaccurate, incomplete or ambiguous — most of it you can correct yourself from your account;
• withdraw your consent to processing, which may prevent us from providing the service;
• ask for the information you gave us to be provided to you, or to a person you designate, in a structured, commonly used technological format — your file versions can already be downloaded as Markdown, and the standalone package includes PDF, CSV and JSON files;
• ask for your account to be deleted (section 7);
• be told, on request, what information is used to suggest a province or language to you, and how to decline the suggestion: simply choose another value.

To exercise a right, write to the person in charge of personal information (section 1). We may ask you to confirm your identity. We reply in writing within thirty days of receiving your request, free of charge, except for reasonable transcription or reproduction costs that we would tell you about in advance.

Complaints. If you are not satisfied with our answer, you can contact Quebec's Commission d'accès à l'information or, depending on your situation, the Office of the Privacy Commissioner of Canada. The law and regulator that apply in your province are shown at the top of this page.

10. Cookies

The site only uses cookies that are needed for it to work or to remember a preference you have set. None is used for advertising or audience measurement, and no third party places cookies on our pages.

Cookie	Purpose	Duration
session_id	Keeps you signed in	Up to eight hours
auth_challenge	Links the two sign-in steps (password, then second factor)	Five minutes
oidc_txn	Secures sign-in with Google or Apple	A few minutes
linuen_appareil	Remembers a device, if you asked for it	Thirty days
linuen_langue	Remembers the language chosen by a visitor who is not signed in	Until you clear it
Application session cookie	Remembers where you are in a form (sign-up, return after sign-in)	Until you close your browser

Stripe's checkout pages, to which you are directed to pay, set their own cookies under Stripe's terms.

11. Privacy incidents

If a privacy incident affects your personal information — unauthorized access, use or disclosure, or loss — we promptly take reasonable steps to reduce the harm and prevent it from happening again. We keep a register of incidents, as the law requires. Where an incident poses a risk of serious injury to you, we notify Quebec's Commission d'accès à l'information and you without delay, as well as the Office of the Privacy Commissioner of Canada where PIPEDA requires it.

12. Minors

The service is intended for people assessing a digital project for themselves or their organization. It is not intended for anyone under 14, and we do not knowingly collect information about them.

13. Changes

We may change this policy — for example, if we change a service provider or a processing location. The current version is published on this page with its date. We will announce any significant change before it takes effect, by email or in your workspace.

14. Contact us

For any question, request or complaint, contact the person in charge of personal information named at the top of this page, or use the Contact page.

---

This text was drafted by Claude, an artificial intelligence model, at the request and with the explicit authorization of Linuen inc.

Version of October 15, 2026