Data Processing Agreement

Purpose

This Data Processing Agreement ("Agreement") governs the processing by Cible (Solutions Zasenami Inc.) of information on behalf of the customer, in accordance with Law 25 and PIPEDA. It supplements our Terms of Service.

Roles

The customer determines the purposes of processing its account and usage data; Cible acts as a service provider (processor) that processes such data on the customer’s instructions and per this Agreement.

Nature of processing

• Hosting and operating the service.
• Measuring AI consumption.
• Technical support at the customer’s request.
• The shared company corpus comes from public sources and is not provided by the customer.

Subprocessors

Cible uses approved subprocessors (see the Subprocessors page). Each is bound by protection obligations at least equivalent to those of this Agreement. We inform you of any material change.

Security

Cible implements appropriate technical and organizational measures: encryption in transit, row-level access control (RLS), per-user isolation, logging, and least privilege.

Transfers outside Quebec

Where data is processed outside Quebec, a privacy impact assessment is performed and equivalent contractual protection is required.

Assistance and data subject rights

Cible reasonably assists the customer in responding to access, rectification, and deletion requests, and in meeting its obligations in the event of a privacy incident.

Privacy incident

Cible notifies the customer without undue delay after becoming aware of an incident affecting its data, and provides the information needed for legally required notifications.

Return and deletion

At the end of the service, Cible deletes or returns the customer’s account data, subject to legal retention obligations.