PRIVACY

Privacy Policy

Last updated: July 2026

Our commitment

T24 Labs designs governed AI systems for a living — privacy is not a compliance checkbox for us, it is the product standard. We apply to our own website and operations the same posture we architect for clients: collect the minimum, protect it seriously, and be able to explain every flow.

What we collect

When you contact T24 Labs — through the contact form, by email, or by telephone — we may receive your name, organization, email address, telephone number, and the context you choose to share. We do not buy, sell, or trade personal information, and we do not build advertising profiles.

Law 25 and PIPEDA

T24 Labs operates with an architecture posture aligned with Quebec's Law 25 (Act to modernize legislative provisions respecting the protection of personal information) and Canada's PIPEDA: purpose-limited collection, consent for use, retention limits, and safeguards proportional to sensitivity. This policy describes our practices in plain language; it is informational and does not constitute legal advice.

Person responsible for personal information

Bertrand Gonthier acts as the person responsible for the protection of personal information at T24 Labs. Requests to access, correct, or delete your personal information — or any privacy question — can be sent to hello@t24labs.com. We respond within 30 days.

Data residency and sovereignty

We favour Canadian or contractually safeguarded hosting for the information we control, and we document where data lives. When information is processed outside Québec or Canada by our infrastructure providers, we assess the transfer and rely on contractual protections — the same privacy-impact reflex we bring to client architectures.

Client engagement data

Material shared during an engagement is treated as confidential engagement context, used only for the agreed work, and governed by the engagement's own terms. Sensitive data should only be shared when necessary for the work, through the channels agreed at the start of the engagement.

Retention and security

We keep personal information only as long as needed for the purpose it was collected, then delete or anonymize it. Access is restricted, protected by strong authentication, and limited to the one principal who runs T24 Labs. If a confidentiality incident involving personal information ever presented a risk of serious injury, we would notify the persons concerned and the Commission d'accès à l'information as required.

Your rights

You may ask what personal information we hold about you, ask us to correct it, withdraw consent, or ask us to delete it. Write to hello@t24labs.com — no form, no friction.