Privacy policy
This page explains, in plain terms, what we collect about you, why, where it’s kept, and who has access to it.
Who we are
TonBusiness.ai is Mathieu Germain, who also serves as the person responsible for personal information protection. For any question or request, write to him directly at mathieu@tonbusiness.ai.
What we collect
The site’s diagnostic forms collect your name, your business, your email, your phone (optional), and a description of the task you want automated.
We also keep the emails we exchange with you once we’re in touch.
That’s all. We never resell browsing data, and we don’t install advertising trackers on the site.
Where it’s kept
Your information is kept on our servers, hosted in Québec, and in Google’s cloud (see the subprocessors below).
The subprocessors we use
A website never runs entirely on its own. As of October 6, 2026, here are the external services we use, with their exact role and the country they operate in:
- Cloudflare (United States) · serving the site, DNS and network protection.
- Google Workspace (Gmail) (United States) · our business emails and the follow-up of requests received through the site’s forms (Google Chat and Google Sheets). Some of your information may therefore be processed on servers located outside Québec by this provider.
When we visit you
Automating well starts with observing: your processes, your tools, the way your team works day to day. During those visits, we inevitably see and hear things that belong to you: your numbers, your clients, your way of doing things, the conversations happening around us.
All of it stays strictly confidential. Nothing is ever repeated, to anyone: not to other clients, not to partners, not even to the people closest to us. No photos, no recordings without your explicit consent. This commitment applies to every person from TonBusiness.ai who sets foot on your premises, and it doesn’t end when the contract does.
Already have your own confidentiality agreement? We’ll sign it.
Your rights
Under Québec’s Law 25, you have the right to access your information, have it corrected, withdraw your consent, or ask us to delete it. Write to the person responsible above. We respond within a reasonable time, at most 30 days.
Security
Your data travels encrypted. Access is restricted, and the servers we operate ourselves stay under our control.
Retention
We keep your information for the length of our business relationship, plus whatever the law requires. A deletion request is always honoured.
Last updated: October 6, 2026