Privacy Policy

1. Who we are

CMS-AI-DC Technologies Canada Inc. (“MASH Compute”, “MASH”, “we”, “us”) is a corporation incorporated under the Canada Business Corporations Act (CBCA) and registered in Québec (NEQ 1182612474). Our office is at 7875 rue Jarry Est, Montréal (Québec) H1J 2C3, Canada.

This policy explains, in clear and simple terms, how we collect, use, share, keep and protect personal information through our website www.mashcompute.ca and the related email exchanges. It is designed to comply with Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25 (the “Québec Act”), and with the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Scope

This policy applies to:

• visitors to our website;
• people who submit our “Request a briefing” form or our contact form;
• people who write to us at an email address shown on our website.

It does not apply to data that our customers process on infrastructure they operate. That data is managed by the customer and governed by the customer’s own agreements and policies. It also does not apply to third-party websites that our site may link to.

3. Person in charge of the protection of personal information (Privacy Officer)

Under the Québec Act, the person with the highest authority in our company is responsible for protecting the personal information we hold. That person may delegate this role, in writing, to another person. At MASH Compute, our President and Chief Executive Officer holds this role.

The Privacy Officer makes sure we comply with this policy and the law, answers requests to exercise your rights, handles complaints, and keeps our register of confidentiality incidents.

4. Personal information we collect

4.1 “Request a briefing” form

• Required: full name, work email, organization, role, the option that best describes you, and how you would like to engage.
• Optional: estimated capacity, target timeline, and any message you choose to add.
• Your consent choices (the required consent and, if you select it, the optional consent to receive news), with the date and time, the page language and the version of this policy.

4.2 Contact form

• Full name, email address and your message.
• Your consent choice, with the date and time, the page language and the policy version.

4.3 Emails you send us

The information you include in your email, such as your name, email address, signature details and the content of your message.

4.4 Technical information

When you visit the website, our hosting provider automatically processes technical information needed to deliver pages and protect the site: IP address, browser and device type, pages requested, referring page, and date and time. We do not use this information to identify you, except to investigate a security incident or abuse.

4.5 Anti-spam field

Our forms contain a hidden field that people do not see or fill in. We use it only to filter out automated (spam) submissions.

We do not ask for sensitive information. Please do not include health, financial or government-identification information in your messages. Our website is intended for business audiences and is not directed at people under 14. We do not knowingly collect their personal information.

5. Why we use your information

We use personal information only for the following purposes:

• to respond to your request or message and, if you wish, to organize a briefing;
• to understand your project (for example, the site and timeline) so we can prepare the discussion;
• to follow up on the business relationship you started with us;
• to send you occasional news, only if you checked the optional box;
• to operate and secure the website, including preventing spam and abuse;
• to meet our legal obligations and protect our rights.

We collect only the information we need for these purposes. We do not sell personal information. We do not make decisions about you based exclusively on automated processing, and we do not build profiles of website visitors. If we want to use your information for a new purpose, we will ask for your consent first, unless the law allows otherwise.

6. Consent

When you submit a form, you give your express consent by checking the required box. That box is never pre-checked. The box for receiving news is separate, optional and not pre-checked; leaving it unchecked does not affect your request.

You can withdraw your consent at any time by writing to the Privacy Officer, or by using the unsubscribe link in any news email. Withdrawing consent does not affect anything we lawfully did before. If you withdraw your consent for us to use your information to respond to you, we may no longer be able to respond to your request.

7. Cookies and analytics

Our website currently uses a single cookie:

We do not currently use analytics, advertising or social-media cookies, or any similar tracking technology. If we ever introduce a technology that can identify, locate or profile you, it will be turned off by default. We will tell you about it and ask for your consent before it is activated, and we will update this policy first.

You can delete or block cookies in your browser settings. If you do, the site may not remember your language choice.

8. Who we share information with

• Service providers who act on our behalf, only to the extent needed for their services and under written agreements that require confidentiality and security: website hosting, delivery and processing of our website forms (Vercel Inc.), and email and productivity service providers.
• Our professional advisers (for example, legal and accounting), who are bound by confidentiality.
• Parties to a possible business transaction (such as a financing, merger or sale), as permitted by the Québec Act and under an agreement protecting the information.
• Authorities or other persons, when the law requires or permits it (for example, a court order).

We do not sell or rent personal information.

9. Disclosure outside Québec

Some of our service providers may store or process personal information outside Québec, including in the United States. Our website is hosted by Vercel Inc., and the servers that process website requests and form submissions are located in Washington, D.C., United States (Vercel).

Before we communicate personal information outside Québec, we assess whether it will be adequately protected (a privacy impact assessment), taking into account its sensitivity, the purpose, the safeguards in place and the legal framework where it will be held. We put a written agreement in place with the recipient. Information held outside Québec or Canada is subject to the laws of that place and may be accessed by its courts and authorities under those laws.

10. How long we keep information

When the purposes are achieved, we destroy the information or anonymize it in line with the law and generally accepted best practices.

11. How we protect information

We use reasonable security measures that fit the sensitivity of the information: access limited to people who need it, encryption in transit (HTTPS/TLS), security measures of our service providers, and confidentiality obligations. No method of transmission or storage is completely secure.

We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we will promptly notify the Commission d’accès à l’information du Québec and the people concerned, and, where PIPEDA applies, the Office of the Privacy Commissioner of Canada.

12. Your rights

Subject to the exceptions provided by law, you have the right to:

• Access: know whether we hold personal information about you and get a copy of it.
• Rectification: have inaccurate, incomplete or equivocal information corrected, and have information deleted if its collection, communication or retention is not authorized by law.
• Withdraw your consent to the use or communication of your information.
• Portability: receive the computerized personal information you gave us in a structured, commonly used technological format, or have it sent to a person or organization you choose.
• Ask us to stop disseminating your information or to de-index a link, in the situations provided by law.
• Be informed of the purposes for which we use your information, the categories of people who have access to it within our company, how long we keep it, and how to reach the Privacy Officer.

To exercise a right, write to the Privacy Officer by email or by mail (see section 3). We may ask you to confirm your identity. We will reply in writing within 30 days of receiving your request. Exercising your rights is free of charge; a reasonable fee may apply to the transcription, reproduction or transmission of information, and we will tell you about it in advance. If we refuse a request, we will explain why and tell you about your recourses.

13. Questions and complaints

Please contact the Privacy Officer first (section 3). We will acknowledge your complaint and reply within 30 days.

If you are not satisfied with our answer, you can contact:

• Commission d’accès à l’information du Québec (CAI): www.cai.gouv.qc.ca · toll-free 1 888 528-7741 · 2045, rue Stanley, bureau 900, Montréal (Québec) H3A 2V4.
• Office of the Privacy Commissioner of Canada (OPC), for matters under PIPEDA: www.priv.gc.ca · toll-free 1-800-282-1376.

14. Changes to this policy

We may update this policy. We will publish the new version on this page with a new effective date. If a change is significant, we will say so clearly on our website and, where the law requires it, ask for your consent.

15. Language

This policy is available in French and in English. Both versions have the same value.

16. Contact

Privacy Officer: Jacques Deng, President and Chief Executive Officer · privacy@mashcompute.ca · 7875 rue Jarry Est, Montréal (Québec) H1J 2C3, Canada · General enquiries: hello@mashcompute.ca