Privacy Policy
Effective Date: March 3, 2026
Last Updated: March 3, 2026
TISKON ("Company", "we", "us", or "our") is committed to protecting the privacy of all users of the TISKON Hub platform ("Platform"). This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you use the Platform.
This Privacy Policy is designed to comply with the Act respecting the protection of personal information in the private sector (Quebec Law 25 / Bill 64), the Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable Canadian and international privacy legislation.
1. Privacy Officer
In accordance with Quebec Law 25, TISKON has designated a Privacy Officer responsible for the protection of personal information:
Name: Ahmad Rayes
Company: TISKON
Location: Montreal, Quebec, Canada
You may contact the Privacy Officer for any questions, concerns, requests, or complaints related to your personal information.
2. Information We Collect
2.1 Account Information
When you are invited to and register on the Platform, we collect:
Full name and email address
Password (stored in encrypted form; we do not have access to your plaintext password)
Profile photo (if provided)
Role and access permissions assigned to your account
Account creation date and first login status
2.2 Business & Project Information
In the course of using the Platform for project collaboration, you or your organization may provide:
Business details: company name, industry, type of business, address, service areas, working hours
Contact information: phone numbers, business email, website URLs, social media profile URLs, Google Business Profile information
Brand assets: logos, color palettes, fonts, brand guidelines, certifications, and founding story
Customer information: target audience descriptions, service areas, customer pain points, differentiators
Design preferences: layout choices, typography, UI element styles, color schemes
Service configurations: selected services, sub-services, pricing, booking settings, quote preferences
Website structure: sitemap, page types, content status, navigation preferences
Competitor information: competitor names and website URLs (provided voluntarily by you)
Contract and financial details: contract type, pricing terms, payment schedules, warranty information
2.3 User-Generated Content
Content you create or upload through the Platform, including:
Documents, images, videos, audio files, PDFs, fonts, and other files
Messages, comments, annotations, and feedback
Social media content: captions, hashtags, scheduled posts
Wiki pages and knowledge base articles
Code snippets and templates
Approval decisions and review feedback
AI chat conversations and prompts
2.4 Market Research Information
The Platform may aggregate publicly available business information from external sources for market research and competitive analysis purposes. This information pertains to businesses and their public commercial activities, not to private individuals. Such information may include:
Publicly posted business content from social media platforms
Publicly available commercial advertisements
Publicly distributed commercial communications (e.g., marketing newsletters sent to a dedicated research mailbox)
Business profiles and publicly posted business information
2.5 Browser Extension Data
If you use the optional browser extension, data collected includes:
Screenshots you actively capture (viewport, area, or full-page)
Images you choose to save from web pages
Links and associated metadata you choose to collect
Page URLs and titles of pages where you use collection features
The extension only collects data when you actively initiate an action. It does not passively monitor or record your browsing activity.
2.6 Automatically Collected Information
When you use the Platform, we may automatically collect:
Device and browser information (type, version, operating system)
IP address
Usage data (pages visited, features used, actions taken, timestamps)
Activity logs (task actions, content changes, login events, approval decisions)
Error logs and performance data
2.7 AI Interaction Data
When you use AI-powered features, we collect:
Prompts and instructions you provide to AI tools
AI-generated responses and content
Chat conversation histories with AI assistants
AI feature usage metrics (generation counts, conversation lengths)
3. How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery: Providing, maintaining, operating, and improving the Platform and our professional services.
Account Management: Managing your account, authenticating your identity, and enforcing access controls.
Project Collaboration: Facilitating communication and collaboration between you, our team, and other authorized project participants.
Content Processing: Processing your uploads, generating thumbnails, extracting metadata (such as image dimensions, colors, and file properties), and enabling search and organization features.
AI Features: Providing project context to AI tools to generate relevant content, analysis, and suggestions.
Market Intelligence: Aggregating and displaying publicly available business information for competitive analysis and market research purposes.
Communications: Sending you notifications about tasks, messages, approvals, project updates, and other Platform events.
Analytics: Understanding how the Platform is used, measuring feature effectiveness, and identifying areas for improvement.
Security: Detecting, preventing, and addressing fraud, abuse, security incidents, and technical issues.
Compliance: Complying with legal obligations, enforcing our Terms of Service, and responding to legal requests.
Audit & Accountability: Maintaining activity logs for project accountability, dispute resolution, and compliance purposes.
4. Legal Basis for Processing
We process your personal information based on one or more of the following legal bases:
Consent: Where you have provided explicit consent for specific processing activities, such as accepting these Terms or enabling optional features.
Contractual Necessity: Where processing is necessary to fulfill our service agreement with you or your organization, or to take steps at your request prior to entering into an agreement.
Legitimate Interest: Where processing is necessary for our legitimate business interests (such as improving the Platform, ensuring security, and providing analytics), provided these interests do not override your rights and freedoms.
Legal Obligation: Where processing is required to comply with applicable laws, regulations, or court orders.
5. Data Sharing & Service Providers
5.1 Third-Party Service Providers
We use trusted third-party service providers to help operate the Platform. These providers may process your data on our behalf for purposes such as:
Cloud hosting and data storage
Authentication and identity management
AI and machine learning services (content generation, image creation, analysis)
Email delivery services
Data aggregation for market research features
Web performance analysis tools
Our service providers are contractually obligated to protect your information, process it only for the purposes we specify, and maintain appropriate security measures.
5.2 Within Your Project Team
Information related to your project is shared with authorized Users within your project scope, including:
TISKON Team Members assigned to your project
Hub Members invited by you or your organization
The Client (for Hub Members: the Client who invited you)
The extent of information shared depends on each User's role and permission level.
5.3 Legal Requirements & Protection
We may disclose your information if required by law, court order, subpoena, or governmental authority, or when we believe in good faith that disclosure is necessary to:
Comply with applicable law or legal process.
Protect the rights, property, or safety of TISKON, our Users, or the public.
Enforce our Terms of Service or other agreements.
Investigate potential violations of our policies or applicable law.
5.4 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of TISKON's assets, your personal information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
5.5 No Sale of Personal Information
We do not sell, rent, lease, or trade your personal information to third parties for their own marketing or commercial purposes.
6. Data Storage & Security
6.1 Storage Infrastructure
Your data is stored on secure cloud infrastructure provided by reputable service providers. We implement industry-standard security measures, including:
Encryption of data in transit (TLS/SSL) and at rest
Role-based access controls and authentication mechanisms
Firestore security rules enforcing per-user, per-project data isolation
Regular security monitoring
Secure backup procedures
6.2 Security Limitations
While we implement reasonable and appropriate safeguards, no method of electronic storage or data transmission is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your account credentials and for any activity that occurs under your account.
7. Data Retention
We retain your personal information for as long as necessary to:
Provide our services and maintain your account.
Fulfill the purposes described in this Privacy Policy.
Comply with legal and regulatory obligations (including tax, accounting, and reporting requirements).
Resolve disputes, enforce our agreements, and establish or defend legal claims.
Specific retention periods:
Account data: Retained for the duration of your account and for a reasonable period after termination.
Project data: Retained for the duration of the project and for a reasonable period thereafter for archival and reference purposes.
Activity logs: May be retained indefinitely for audit and compliance purposes.
Legal acceptance records: Retained indefinitely as proof of your consent.
AI conversation logs: Retained for the duration of the project.
Deleted content: Content placed in "trash" may be recoverable for a limited period before permanent deletion.
When your data is no longer needed, we will securely delete or anonymize it within a reasonable timeframe, unless retention is required by law.
8. Your Rights Under Quebec Law 25
Under Quebec's privacy legislation (Act respecting the protection of personal information in the private sector, as amended by Bill 64), you have the following rights:
Right of Access: You may request access to the personal information we hold about you, including the categories of information collected and the purposes for which it is used.
Right to Rectification: You may request correction of inaccurate, incomplete, or misleading personal information.
Right to Deletion: You may request deletion of your personal information, subject to legal retention requirements and legitimate business needs.
Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format, or request that we transfer it to another organization where technically feasible.
Right to Withdraw Consent: You may withdraw your consent for specific processing activities at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
Right to De-indexing: You may request that your personal information be de-indexed from search or retrieval features, where applicable and technically feasible.
Right Regarding Automated Decision-Making: You have the right to be informed of any automated decision-making processes that produce legal or significant effects concerning you, and to request human review of such decisions.
Right to Information: You have the right to be informed of the existence, nature, and use of any personal information we hold about you.
To exercise any of these rights, please contact our Privacy Officer using the contact information provided in Section 1. We will respond to your request within thirty (30) days as required by law. In certain circumstances, we may need to verify your identity before processing your request.
9. Privacy Impact Assessments
In accordance with Quebec Law 25, TISKON conducts privacy impact assessments for any project involving the acquisition, development, or redesign of information systems that involve the collection, use, communication, retention, or destruction of personal information. These assessments evaluate the risks to privacy and identify measures to mitigate those risks.
10. Data Breach Notification
In accordance with Quebec Law 25, in the event of a confidentiality incident involving your personal information that presents a risk of serious injury, we will:
Notify you promptly of the breach, including: the nature of the personal information involved, a description of the circumstances of the breach, the measures we have taken or plan to take, and recommendations for measures you can take to mitigate risks.
Notify the Commission d'accès à l'information du Québec (CAI) as required by law.
Take reasonable steps to reduce the risk of harm and to prevent future incidents.
Maintain a record of all confidentiality incidents as required by law.
11. Cookies & Tracking Technologies
The Platform uses cookies and similar technologies as follows:
Essential Cookies: Required for core functionality such as authentication, session management, and security. These cannot be disabled.
Functional Cookies: Used to remember your preferences, settings, and interface customizations.
We do not use third-party advertising cookies or cross-site tracking technologies. We do not serve targeted advertisements. You may configure your browser to refuse non-essential cookies, but this may affect the functionality of the Platform.
12. Cross-Border Data Transfers
Your data may be processed and stored on servers located outside of Quebec or Canada, including in the United States, where our cloud service providers operate data centers. When your data is transferred outside of Quebec, we ensure that adequate safeguards are in place to protect your personal information in accordance with applicable law, including:
Contractual protections with our service providers requiring them to protect your data to standards equivalent to those required by Quebec law.
Selecting service providers who maintain recognized security certifications and standards.
By using the Platform, you acknowledge and consent to the transfer and processing of your data outside of Quebec and Canada as described in this section.
13. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a person under 18, we will promptly take steps to delete it. If you believe we have collected information from a minor, please contact our Privacy Officer immediately.
14. Third-Party Links & Services
The Platform may contain links to third-party websites, services, or resources. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access. TISKON is not responsible for the privacy practices or content of third-party websites or services.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Update the "Last Updated" date at the top of this policy.
Notify you through the Platform.
Require your acceptance of the updated policy before you may continue using the Platform.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
16. Contact Information & Complaints
For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:
Privacy Officer: Ahmad Rayes
Company: TISKON
Location: Montreal, Quebec, Canada
If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI):
Website: www.cai.gouv.qc.ca
Phone: 1-888-528-7741
You may also file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca if you believe your rights under federal privacy law have been violated.