Privacy Policy

1. Introduction

Neurixis Solutions Inc. (“ConsultIA”, “we”, “us”, “our”) is committed to protecting the privacy of its users. This Privacy Policy describes how we collect, use, disclose and protect your personal information, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25 (An Act to modernize legislative provisions as regards the protection of personal information).

By using our platform, you consent to the practices described in this policy.

2. Person in Charge of Personal Information Protection (PCPIP)

Pursuant to section 3.1 of the Act Respecting the Protection of Personal Information in the Private Sector (CQLR, c. P-39.1), as amended by Law 25, the person responsible for personal information protection at Neurixis Solutions Inc. is:

Name: Narjes Rebai
Title: Chief Executive Officer (CEO)
Address: 43 Rue des Colibris, Val-des-Monts, Quebec, J8N 7C7
Email: privacy@neurixis.ca

Any request concerning the protection of your personal information may be sent to the PCPIP at the contact details above.

3. Information Collected

3.1 Information you provide directly

• Identification details: full name, email address, phone number.
• Professional information: title, company, industry, experience, portfolio, diplomas and certifications.
• User-generated content: mission descriptions, proposals, messages, reviews and ratings.
• Payment information: processed exclusively through Stripe. We do not store your credit card data.

3.2 Information collected automatically

• Browsing data: IP address, browser type, pages visited, session duration.
• Usage data: actions performed on the platform, features used.
• Essential cookies only: see our Cookie Policy (section 14).

4. Purposes of Use

We use your personal information exclusively for the following purposes:

• To provide, operate and improve our matchmaking services.
• To facilitate the matching of SMEs with consultants.
• To process payments and manage financial transactions through our escrow mechanism.
• To send you transactional communications (confirmations, alerts, notifications).
• To send you marketing communications (only with your explicit and separate consent).
• To comply with our legal and regulatory obligations.
• To prevent fraud and ensure the security of the platform.

5. Use of Artificial Intelligence and Automated Decisions

ConsultIA uses artificial intelligence algorithms to analyze briefs submitted by SMEs and help select relevant consultants. Pursuant to section 12.1 of the Act Respecting the Protection of Personal Information in the Private Sector, we inform you that:

• AI is used as a decision-support tool. The final selection of the three proposed consultants is validated by our human team.
• You have the right to be informed when a decision based exclusively on automated processing is made about you.
• You have the right to submit observations and to request a human review of any automated decision concerning you.

Your data is not used to train or improve AI models without your specific and separate consent.

6. Disclosure of Information

We may share your information in the following cases:

• With other users: Consultant profiles are public. Missions posted by SMEs are visible to registered consultants.
• Service providers: Stripe (payments), OVHcloud (hosting), transactional email services — all bound by confidentiality agreements.
• Legal requirements: when required by law, court order or a competent government authority.
• Business transfer: in the event of a merger, acquisition or sale of assets, with 30 days' notice to affected users.

We never sell your personal information to third parties.

7. Hosting and International Transfers

Consultia platform data is hosted on secure virtual private servers provided by OVHcloud, with preferred hosting in Canada. No personal data is stored on servers located in the United States.

Should data need to be transferred outside Quebec, Neurixis commits to: (a) carry out a prior Privacy Impact Assessment (PIA) pursuant to section 17 of Law 25; (b) obtain your specific and informed consent; (c) enter into a written agreement with the recipient ensuring an equivalent level of protection; (d) obtain the PCPIP's approval.

8. Data Retention

We retain your personal information for the following periods:

• Active account data: as long as your account is active.
• After account closure: deletion within 30 days, subject to legal exceptions.
• Financial data: retained for 7 years (federal and provincial tax requirements).
• Communications: anonymized after account closure.

9. Your Rights

In accordance with Law 25 and PIPEDA, you have the following rights:

• Access: request a copy of the personal information we hold about you.
• Rectification: correct inaccurate or incomplete information.
• Erasure: request the deletion of your account and data.
• Portability: receive your data in a structured and commonly used format.
• Withdrawal of consent: withdraw your consent to marketing communications at any time.
• De-indexation: request the cessation of dissemination or the de-indexation of a hyperlink giving access to your personal information, pursuant to section 28.1.
• Objection to automated decisions: request a human review of any decision made exclusively by automated processing concerning you.
• Complaint: file a complaint with the Quebec Commission d'accès à l'information (CAI) or the Office of the Privacy Commissioner of Canada (OPC).

To exercise these rights, contact the PCPIP at privacy@neurixis.ca. We will respond within 30 days.

10. Security

We implement technical and organizational measures to protect your data: TLS encryption in transit, encryption at rest, restricted access to personal data, regular security audits and staff training.

11. Privacy Incident Management

In the event of a privacy incident presenting a serious risk of harm, Neurixis commits to:

• Promptly notify the Quebec Commission d'accès à l'information (CAI).
• Promptly notify the individuals concerned.
• Record the incident in a privacy incident register, pursuant to section 3.5 of Law 25.
• Take the necessary corrective measures to reduce the risk of harm.

12. Changes to this Policy

We may amend this policy. We will inform you of material changes by email or through a notification on the platform, with a minimum of 30 days' notice before the changes take effect.

13. Contact Us

For any question concerning this policy or to exercise your rights:

Company: Neurixis Solutions Inc.
Address: 43 Rue des Colibris, Val-des-Monts, Quebec, J8N 7C7
Email: privacy@neurixis.ca
PCPIP: Narjes Rebai, CEO

14. Cookie Policy

14.1 What is a cookie?

A cookie is a small text file placed on your device when you visit a website. It allows the site to recognize your device and remember certain information.

14.2 Cookies used by ConsultIA

We only use cookies that are strictly necessary for the technical operation of the platform:

• Session cookie (JWT): authentication and maintenance of your logged-in session. Duration: session.
• Language preference: memorization of your language choice (FR/EN). Duration: 1 year.
• Stripe cookies: securing of payment transactions through our partner Stripe (stripe.com). These cookies are necessary for secure payment processing.

14.3 What we do NOT use

We do not use any advertising tracking cookies, third-party analytics (Google Analytics, Meta Pixel, etc.) or behavioural targeting cookies. No browsing data is shared with advertising networks.

14.4 Consent

Pursuant to section 8.1 of Law 25, strictly necessary cookies do not require explicit consent. Since we only use this category of cookies, no consent banner is required. Should we add non-essential cookies in the future, we will implement a granular consent mechanism before their activation.

14.5 Managing cookies

You can configure your browser to refuse all cookies. However, disabling essential cookies will prevent certain features of the platform from working (login, payment).

14.6 Contact

For any question about our use of cookies, contact the PCPIP at privacy@neurixis.ca.