Privacy policy*

01 · Who is responsible, and in what capacity

Le Studio 7 Services Numériques Inc., with its head office at 164 rue Cowie, Suite 303, Granby, Quebec J2G 3V3, is responsible for the personal information collected on this site and in client accounts.

We play two distinct roles. For the public site and your own account, we are responsible for your information. For the tools we run on a client's behalf (in particular the CRM), it is the client who decides what information is processed: we then act as a processor, on their behalf and under their instructions, governed by a separate agreement. Section 04 covers this second role.

For any question about this policy, or to exercise your rights, write to info@lestudio7.ca.

02 · What we collect

We only collect what you give us and what our services need to run.

• Contact form and quote requests: your name, your email and the content of your message.
• Booking a call: your name, your email, your phone and company if you provide them, your message, the slot you pick, and the technical data of the request (IP address, browser).
• AI Audit: your industry, your company size, the tasks and tools you select, and your email so we can send the report.
• Client area and portal: your name, your email, your password (encrypted, never readable by us), your phone and photo if you provide them, and the data tied to your engagements (projects, content, invoices, messages exchanged with the studio).
• Collaboration and notifications: your real-time presence in the portal (which page, when), your notification preferences, and the contact details of the people you designate to receive alerts.
• Contractor billing: for freelancers and editors, business identity, address, tax numbers, payment details, time worked and amounts.
• Information processed for our clients: our clients' contacts and prospects in the CRM. See section 04.
• Third-party accounts you connect: when you link a Google, Meta or Frame.io account to your portal, we keep the necessary access tokens encrypted, and we access the data you authorise us to read (statistics, calendar, video uploads).
• Technical data: IP address, browser type and pages viewed, through our hosting logs and, if you consent, through analytics. On the sites we manage for a client, we may measure traffic and interaction (including a click map) on that client's behalf.

03 · Why we use it

Every piece of information serves a stated purpose. We do not repurpose your data without asking you first.

• Answering your enquiries and preparing a proposal.
• Scheduling and confirming meetings, and syncing calendars.
• Generating and sending your AI Audit report.
• Giving access to the portal, authenticating sign-ins and securing accounts.
• Delivering and administering your engagements: production, content, sites, systems, invoicing.
• Running the portal tools you use, including the CRM, the audience measurement of your sites and collaboration.
• Understanding which pages get read, so we can improve our services. Audience measurement on the public site rests on your consent alone.

04 · Information we process for our clients

Some of our clients use our CRM to manage their own prospects and contacts. The information of those people (name, email, phone, company, exchanges, notes, source) belongs to the client and is processed on their behalf. The client is responsible for it; we are the processor.

On the client's behalf, these tools can: automatically assign an interest score to a contact using AI, draft and send outreach messages (by email or through messaging such as Messenger), and, when the client enables it, send advertising platforms (including Meta) contact identifiers in hashed form to measure their campaigns. These actions happen under the client's responsibility and settings.

Each client account is walled off: no other client sees this information. At the studio, only the people assigned to the account can access it, for support.

If you are one of these contacts and wish to access, correct or delete your information, or stop being contacted, reach out to the company that contacted you; we assist them in handling your request.

05 · Artificial intelligence and automated decisions

We use artificial intelligence models for several functions. The providers are Google (Gemini) as the primary service and Anthropic (Claude) as a fallback. The information needed is sent to them to produce the result, and is not used to train their models.

• AI Audit: the report is generated from your answers. It is general information, not a decision about you within the meaning of the law, and it does not replace professional advice.
• CRM: scoring prospects, drafting outreach messages and replies, and helping analyse campaigns, on the client's behalf.
• Content: help writing captions and copy.
• Studio inbox: an automated triage may read emails the studio receives to suggest follow-up tasks.
• None of these functions alone makes a decision producing a legal effect on a person. A person at the studio, or at the client, reviews before any proposal or significant send goes out.

06 · Cookies and measurement

Necessary cookies carry your session, your portal sign-in and your cookie preferences. They cannot be switched off without breaking the site.

Analytics cookies (Google Analytics) are only set on the public site after your explicit consent. Until you accept, no Google script is loaded at all. The portal and the admin are never measured: no analytics cookie is set there, and no banner appears there.

On the sites we design and manage for a client, we may set traffic and interaction measurement (including a click map) on that client's behalf; visitor consent there is handled on the site concerned.

You can change or withdraw your choice at any time through the "Cookie preferences" button at the bottom of every page. Withdrawing also clears the cookies Google Analytics already set.

07 · Who we share it with

We never sell your personal information and we do not trade it for advertising on our own account. We do rely on providers who process it on our behalf, strictly for the purposes above.

• Supabase (Canada): database and authentication.
• Vercel (United States): hosting of the site and portal, file storage, technical logs.
• Resend (United States): transactional emails, audit report delivery and alerts.
• Google (United States): Gemini for AI, Google Analytics if you consent, Google Calendar for bookings, and, for the accounts you connect, Google Analytics 4, Search Console and Gmail (read-only).
• Anthropic (United States): Claude, as a fallback AI service.
• Meta / Facebook (United States): for clients who use it, messaging with prospects, receiving form leads, advertising statistics and hashed conversion events.
• Mux (United States): hosting and streaming of videos.
• Frame.io / Adobe (United States): delivery and review of video edits.
• ScreenshotOne (United States): screenshots of the pages of the sites we manage.

08 · Transfers outside Quebec

Most of the providers listed above process data outside Quebec, mainly in the United States; Supabase, where our databases live, hosts in Canada. Before entrusting them with information, we assess the protection they offer and rely on their contractual confidentiality and security commitments.

By sending us your information, you accept that it may be processed in those countries, whose laws may differ from Quebec's.

09 · How long we keep it

We keep your information for as long as the purpose it was collected for requires, then we destroy it.

• Enquiries that went nowhere: 24 months.
• AI Audit results: 24 months, so we can resend them on request.
• Portal accounts: for the length of the business relationship, then 12 months.
• CRM information processed for a client: for the length of the engagement, then returned or destroyed on the client's instructions.
• Conversation content and activity logs: as long as useful for follow-up, then archived or destroyed.
• Technical logs, measurement and click map: up to 24 months.
• Accounting and invoicing records: 7 years, as tax law requires.

10 · Your rights

Law 25 gives you rights you can exercise free of charge, by writing to info@lestudio7.ca. We answer within 30 days. If your information sits in a client's CRM, address your request to that client, whom we assist.

• Access the information we hold about you.
• Have it corrected if it is inaccurate, incomplete or ambiguous.
• Withdraw your consent, in particular for analytics cookies.
• Ask for deletion when keeping the information is no longer justified.
• Receive your information in a structured, commonly used technological format (portability).
• Complain to the Commission d'accès à l'information du Québec if our answer does not satisfy you.

11 · Security

The site is served over HTTPS. Passwords are stored encrypted and portal access can be protected by email two-factor authentication. The access tokens for the third-party accounts you connect are stored encrypted. Access to production data is limited to the people who need it.

No system is infallible. Should a confidentiality incident carry a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information, as the law requires.

12 · Changes

We may amend this policy. The update date at the top of the page always reflects the version in force. If a change is significant, we will let you know by reasonable means.

Get in touch

Questions about your personal information: info@lestudio7.ca. Technical questions about a site or system we delivered: support@lestudio7.ca. By post: Le Studio 7 Services Numériques Inc., 164 rue Cowie, Suite 303, Granby, Quebec J2G 3V3.