Aller au contenu

Privacy Policy

Last updated: June 10, 2026

Overview

T6AI Canada Inc. ("we", "us", "our"), a Canadian federal business corporation, operates Sellovo, a SaaS platform that coaches and experts use to sell online courses, an AI Mentor, coaching sessions, and webinars to their students. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the platform. We are committed to protecting your privacy in compliance with applicable laws, including Québec's Act respecting the protection of personal information in the private sector (Law 25), the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).

Roles: Controller and Processor

The coach whose services you use (the platform "tenant") is the data controller of their students' personal information. T6AI Canada Inc. acts as a data processor on the coach's behalf, under the data processing agreement (DPA) entered into with each coach. T6AI Canada Inc. acts as an independent controller only for: platform billing to the coach (via Paddle), platform security and fraud prevention, non-personal product telemetry, and the audit log required by Law 25 (s. 3.5). For any privacy inquiries: contact@sellovo.co.

Information We Collect

We collect the following categories of personal information:

  • Account and identity: name, email address, preferred language, and timezone; hashed password; multi-factor authentication (MFA) settings if enabled
  • Learning and AI data: course progression, lesson comments, AI Mentor conversations (text or voice), and session bookings (handled by Sellovo’s built-in scheduler)
  • Payments: processed by Stripe and Paddle — we never store card numbers or banking details; we only see the amount, date, and product
  • Technical data: immediately hashed IP address (never stored in plain text), hashed user agent, cookies strictly necessary for session management, and sanitized error logs (personal information redacted)

How We Use Your Information

We use your personal information for the following purposes:

  • Providing the services you purchased: courses, AI Mentor, sessions, and webinars
  • Processing payments and billing (Stripe for student purchases, Paddle for platform billing to the coach)
  • Sending transactional communications (booking confirmations, receipts, account notices) and, only with your explicit opt-in consent, marketing communications (CASL)
  • Maintaining security, preventing fraud, and keeping the audit log required by Law 25 (s. 3.5)

Legal Basis for Processing

We process your personal data on the following legal bases: (a) contract performance, to provide the courses, AI Mentor, and sessions you purchased and to handle billing; (b) your explicit consent, notably for the use of the AI Mentor and for marketing communications; (c) legitimate interests, for security, fraud prevention, and product improvement based on non-personal data; (d) legal obligations, including tax record-keeping and the Law 25 audit log.

Information Sharing

We do not sell your personal information. We share your data only in the following limited circumstances:

  • With your coach — the controller of your data — to the extent necessary to deliver the services (courses, sessions, AI Mentor)
  • With payment processors: Stripe (student purchases) and Paddle (platform billing to the coach)
  • With our technical sub-processors: Amazon Web Services (hosting, database, authentication, transactional email and video — data hosted in Canada, ca-central-1 region; video delivery travels over a global distribution network), xAI (AI Mentor inference, United States). The current list is published on the platform's sub-processors page

Use of Google APIs

Sellovo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

In practice: if you connect your Google Calendar, Sellovo reads only its busy/free blocks — never the title, location or attendees of your events — and writes only the sessions booked through Sellovo. This data is used solely to compute your availability and manage those sessions. It is never sold, never used for advertising, and never read by a human except with your explicit consent for support purposes.

Transfers Outside Québec and Canada

Your data is primarily stored in Canada (Montréal, ca-central-1 region). Some sub-processors process data outside Canada: Stripe and xAI (United States), as well as Paddle (European Union). In accordance with Law 25 (s. 17), we disclose these transfers and govern them with appropriate contractual safeguards (protection clauses equivalent to standard contractual clauses), including a Zero Data Retention policy for xAI. You may object to these transfers by ceasing to use the platform and deleting your account.

Data Storage and Security

Your data is hosted on encrypted servers located in Canada (Montréal, ca-central-1), in line with Law 25 data residency principles. Measures in place include: AES-256 encryption at rest, TLS 1.3 encryption in transit, per-tenant data isolation enforced at the database level (Row-Level Security), mandatory multi-factor authentication for administrators, an immutable audit log, and daily backups with point-in-time recovery (30 days).

Data Retention

We retain your personal data for as long as your account is active. AI Mentor conversations: 90 days. After you delete your account, a 30-day grace period applies so you can export your data, after which personal data is permanently deleted. Financial records (orders, invoices) are retained for 10 years to meet the strictest applicable tax and accounting obligations internationally (up to 10 years in parts of the EU; 6-7 years in Canada), with personal information redacted. The audit log is retained for 7 years (Law 25, s. 3.5). Backups are retained for 30 days. Aggregated, anonymized data may be retained for analytics.

Cookies

We use essential cookies (login session, language preference, cookie consent), which are always active. Functional cookies (interface preferences) and analytics cookies (audience measurement without personal information) are optional and enabled only with your consent. We use no advertising or retargeting cookies. You can manage your preferences at any time via the cookie banner or your account settings.

Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data. We respond to any request within a maximum of 30 days (Law 25, s. 27; GDPR, art. 12.3). You are also entitled to an explanation of decisions based on automated processing (Law 25, s. 12.1):

  • Right of access: obtain a copy of the personal data we hold about you
  • Right of rectification: have inaccurate or incomplete data corrected
  • Right of erasure (right to be forgotten): have your personal data deleted, subject to legal retention obligations
  • Right of portability: export your data in a structured, machine-readable format (JSON/CSV) from your account
  • Right to withdraw consent: withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

Applicable Privacy Laws

This Privacy Policy is designed to comply with the following laws and regulations:

  • Law 25 (Québec): T6AI Canada Inc. complies with the Act respecting the protection of personal information in the private sector. We have designated a privacy officer, we obtain explicit consent before collection, we host data in Canada, and we provide mechanisms for access, rectification, and deletion requests. Any confidentiality incident presenting a risk of serious injury is reported to the Commission d'accès à l'information du Québec and to affected individuals within 72 hours.
  • PIPEDA (Canada): we collect information only for identified purposes, we obtain meaningful consent, and we protect data with appropriate security safeguards. You may challenge our compliance with the Office of the Privacy Commissioner of Canada.
  • GDPR (European Union): for individuals in the EU/EEA, we process data on lawful grounds (consent, contractual necessity, or legitimate interest), we respect your rights of access, rectification, erasure, restriction, portability, and objection, and we cover international transfers with appropriate safeguards.
  • CCPA/CPRA (California): if you are a California resident, you have the right to know what personal information is collected and how it is used, to request its deletion, to opt out of the sale of personal information (we do not sell personal information), and not to be discriminated against for exercising your rights.

Children's Privacy

The platform is designed for adults (18 and over). The age of digital consent varies by jurisdiction (14 in Québec, 13 to 16 in the EU, 13 in the United States); below the applicable age, parental consent is required. We do not knowingly collect personal information from children under 13. If we discover such collection, we delete the data immediately.

Changes to This Policy

Any material change to this policy (new sub-processor, new data category, new purpose) will be communicated to you by email at your registered address and through an in-app banner for 30 days, with the date at the top of this page updated. Material changes are subject to a renewed consent request. We encourage you to review this policy periodically.

Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint with: the Commission d'accès à l'information du Québec (Québec residents), the Office of the Privacy Commissioner of Canada (Canadian residents), your national data protection authority (EU/EEA residents), or the California Privacy Protection Agency (California residents).

Privacy Officer

In accordance with Law 25 (s. 3.1), T6AI Canada Inc. has designated a person in charge of the protection of personal information: Francis Lévesque. He can be reached at contact@sellovo.co.

Contact Us

For any questions or requests regarding this Privacy Policy or your personal data: contact@sellovo.co. To report a security vulnerability: contact@sellovo.co. T6AI Canada Inc., Québec, Canada. You may also contact the coach whose services you use directly.