Privacy policy

Who we are

TonBusiness.ai is Mathieu Germain, who also serves as the person responsible for personal information protection. For any question or request, write to him directly at [email protected].

What we collect

The diagnostic form on the homepage collects your name, your business, your email, your phone (optional), and a description of the task you want automated.

We also keep the emails we exchange with you once we’re in touch.

That’s all. We never resell browsing data, and we don’t install advertising trackers on the site.

Where it’s kept

Your information is kept on our own servers, right here in Québec.

The subprocessors we use

A website never runs entirely on its own. As of August 2026, here are the external services we use, with their exact role and the country they operate in:

• Cloudflare (United States) · serving the site, routing inbound email, network protection.
• Google Workspace (Gmail) (United States) · receiving and sending our business emails. Some of your information may therefore be processed on servers located outside Québec by this provider.
• Anthropic (United States) · internal AI-assist functions: content processed by the AI passes through their API, and is never used to train their models.

When we visit you

Automating well starts with observing: your processes, your tools, the way your team works day to day. During those visits, we inevitably see and hear things that belong to you: your numbers, your clients, your way of doing things, the conversations happening around us.

All of it stays strictly confidential. Nothing is ever repeated, to anyone: not to other clients, not to partners, not even to the people closest to us. No photos, no recordings without your explicit consent. This commitment applies to every person from TonBusiness.ai who sets foot on your premises, and it doesn’t end when the contract does.

Already have your own confidentiality agreement? We’ll sign it.

Your rights

Under Québec’s Law 25, you have the right to access your information, have it corrected, withdraw your consent, or ask us to delete it. Write to the person responsible above. We respond within a reasonable time, at most 30 days.

Security

Your data travels encrypted. Access is restricted, and all the infrastructure hosting it stays under our control.

Retention

We keep your information for the length of our business relationship, plus whatever the law requires. A deletion request is always honoured.