Privacy Policy

Compliant with Québec's Law 25. Last updated: October 25, 2026

1. Responsible Party

Archipel, a company registered in Lévis, Québec. The person in charge of the protection of personal information is Simon Cantin, owner of Archipel, reachable at [email protected] for any question or request regarding your personal information.

2. Information Collected

• Account username and email address (at sign-up).
• Content of your conversations with the agent (prompts and generated responses).
• Files you drop into your workspace (drag-and-drop in the chat, Bureau, Documents) and their search index: for online accounts, they are stored on our servers in Québec; on a SouverainBox, they stay on the box. Your Archipel Memory database always stays with you.
• Agents and routines you create (name, instructions, schedule).
• Usage data (number of missions, tokens, compute capacity) for service management.
• When buying a SouverainBox: contact name, shipping address, phone number, delivery notes and number of employees, collected by Stripe at checkout and kept with the order for configuration and delivery.
• Payment data — processed by Stripe, never by us.

3. Purposes

To provide the service, manage accounts and billing, provide support, and comply with our legal obligations.

4. AI Processing — Hosted Locally in Québec

AI model inference (smart routing among several models depending on the task: devstral for code, ministral for fast replies, and, for attached images, a Gemma 3 vision model by Google) is performed locally, on our own infrastructure located in Québec. Your prompts and the generated responses are not transmitted to any inference subprocessor and do not leave Canada for processing.

Web search — Tavily. One exception, and only when the agent chooses the web search tool to answer your request: the search query (the words to look up, never your documents, never your conversations) is sent to Tavily, a US company, which returns excerpts of public pages. Tavily acts as a technical subprocessor and these queries are processed outside Québec. This tool is not available on a SouverainBox without Internet access.

Your prompts and responses are never used to train a model, never shared with third parties, and never sold. Your conversations remain accessible only from your own account and are deletable at any time (see sections 7 and 8).

Full sovereignty — on-premises option (SouverainBox): for organizations that require it, the AI can be installed entirely within your walls, on a dedicated machine you own. In that case, processing, storage and the models all stay with you — no data leaves your network.

Remote support for a SouverainBox — Tailscale. Support access is closed by default. Only an administrator of the box can open it, from Settings, after explicit consent, for 1, 4 or 24 hours; it closes on its own when the time is up and at every reboot. During that window, Archipel's support can see the box configuration and could see the documents and conversations on it; it commits to accessing them only to fix the reported problem. The connection goes through Tailscale, a US company, which does not see the content exchanged; the log of every opening, closing and connection stays on the box.

We do not sell your personal information.

5. Payment — Stripe

Payments are processed by Stripe (see Stripe's policy). We do not store your banking data.

5bis. Network Infrastructure — Cloudflare

All traffic to the service passes through Cloudflare, which handles connection encryption and network-level protection against malicious automated traffic (bots). Cloudflare acts as a technical subprocessor and does not receive your account credentials.

Cloudflare also provides us with audience measurement (Cloudflare Web Analytics): pages viewed, referring page, browser type, country derived from the IP address, and page load times. This data is aggregated: no cookies or local storage are used, IP addresses are not retained, and no individual profile is built. This measurement cannot identify you or follow you from one site to another. As Cloudflare is an American company, this data is processed outside Quebec.

5ter. Email — Google

Service emails (address confirmation, password reset, account deletion notice) are sent from a Gmail mailbox through Google (Gmail, sent by SMTP), which receives for that purpose your email address, the subject and the content of the message — never your conversations with the agent. Google acts as a technical subprocessor; being a US company, these messages are processed outside Quebec. The service may alternatively use an Outlook mailbox from Microsoft (Microsoft Graph, also a US company); only one of these two providers is active at a time. No newsletter and no advertising is ever sent to you.

Video previews — YouTube. If you paste a YouTube link into the Dev chat, your browser loads the video preview from youtube-nocookie.com (YouTube, Google, United States), as any page embedding a video would; no data from your account is sent to it, and nothing is loaded until you paste such a link.

6. Cookies

A single session cookie is used to keep you logged in. No advertising or tracking cookies; audience measurement (section 5bis) uses none.

We also run our own audience measurement, on our server in Québec: pages viewed and the referring site (its name only, for example google.com). No cookies, and the IP address is never recorded: a visitor is recognized for one day only, through a fingerprint deleted the next day. Browsers that ask not to be tracked (Global Privacy Control, Do Not Track) are not counted.

7. Your Rights (Law 25)

You may request access to, correction of, or deletion of your personal information, and withdraw your consent, by writing to [email protected]. You can also delete your account yourself, with everything it contains, from Settings → Account → “Delete my account” (labelled “Réglages → Compte → Supprimer mon compte” in the application, which is in French): deletion is immediate and permanent.

8. Retention

Your information is retained as long as your account is active, then deleted upon request or when the account is closed. At the end of the Discovery trial, nothing is erased: conversations, workspace, agents and routines stay in place until you delete the account. A backup of our service data is made every night and kept for 14 days: a deleted account therefore also disappears from backups at most 14 days after its deletion. Technical server logs (IP address, requested page, time) are used for security and kept for at most 30 days.

9. Minors

The service is intended for adults.

10. Privacy Incidents

If a privacy incident (unauthorized access, use, disclosure or loss) affects your information and presents a risk of serious injury, we notify the Commission d'accès à l'information du Québec and the persons concerned, and we take measures to limit its effects. We keep a register of all incidents, as required by Law 25.

11. Privacy Impact Assessment

We carry out a privacy impact assessment before any project involving your personal information, and in particular before communicating it outside Québec (Cloudflare, Google, Microsoft, Tavily, Tailscale: see sections 4 to 5ter). These communications are limited to what is strictly necessary and governed by those providers' commitments.

12. Changes

This policy may be updated; the update date appears at the top of the page.