Privacy Policy

1. Introduction

Panda Projet (“Panda Projet,” “we,” “our,” or “us”) is committed to protecting the privacy and personal information of our users. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platforms, including BizSimHub, BizSimLive, MarketSimLive, NegotiateSim, and ProjectManagerTool.com.

This Policy is designed to comply with Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (“Loi 25”), Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), and other applicable Canadian privacy legislation.

2. Person Responsible for the Protection of Personal Information

In accordance with Loi 25, we have designated a person responsible for the protection of personal information:

Name: Sylvain Gauthier

Title: Founder & CEO — e.g., President & CEO]

Email: sgauthier@executiveproducer.ca

Address: 345 Lagauchetière W., Montreal, QC, Canada

This person is responsible for ensuring compliance with privacy legislation and handling all privacy-related inquiries and complaints.

3. Information We Collect

3.1 Information You Provide Directly

3.2 Information Collected Automatically

3.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture
• Educational institutions: Enrollment data and course information if provided by your institution
• Payment processor (Stripe): Transaction confirmation and billing status

4. How We Use Your Information

We use personal information for the following purposes, each with a lawful basis under Loi 25 and PIPEDA:

5. Artificial Intelligence and Your Data

Our Platforms use AI systems to provide coaching, analysis, and feedback within simulations. It is important for you to understand:

• AI coaching outputs are generated in real-time based on your simulation inputs and are not stored permanently unless you choose to save them
• We may use anonymized and aggregated simulation data to improve our AI models; no individual performance can be identified from this data
• We do not sell your simulation data or personal information to third parties for AI training or any other purpose
• You have the right to request information about how automated decisions affecting you are made (as provided under Loi 25)

6. Sharing and Disclosure of Information

We do not sell your personal information. We may share your information only in the following circumstances:

7. Data Storage and International Transfers

Your personal information is primarily stored on servers located in Canada and the United States (via Vercel and Neon PostgreSQL cloud services).

Where personal information is transferred outside of Quebec or Canada, we ensure appropriate safeguards are in place, including:

• Written data processing agreements with service providers
• Assessment that the receiving jurisdiction provides substantially similar privacy protections
• Implementation of technical and organizational security measures

In accordance with Loi 25, before transferring personal information outside Quebec, we conduct a Privacy Impact Assessment to ensure adequate protection.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Platforms. Before placing non-essential cookies, we obtain your consent through our cookie banner.

You can manage your cookie preferences through your browser settings or our cookie management tool.

9. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy:

• Active accounts: Data retained for the duration of your account plus 2 years after deletion
• Payment records: Retained for 7 years as required by Canadian tax law
• Simulation data: Retained for the duration of your account; anonymized data may be retained indefinitely
• Support communications: Retained for 3 years
• Analytics data: Aggregated and anonymized within 24 months

When personal information is no longer required, it is securely destroyed or anonymized.

10. Your Rights

Under Loi 25 and PIPEDA, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you
• Right of Rectification: Correct inaccurate or incomplete personal information
• Right of Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to Withdraw Consent: Withdraw your consent for non-essential data processing at any time
• Right to Data Portability: Receive your personal information in a structured, commonly used format (as provided under Loi 25)
• Right to Information about Automated Decisions: Request information about how AI or automated systems use your personal information to make decisions
• Right to De-index: Request that personal information be de-indexed from search results (where applicable)

To exercise any of these rights, contact our Person Responsible for Privacy (see Section 2). We will respond within 30 days as required by law.

11. Security Measures

We implement technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with hashed passwords and optional multi-factor authentication
• Access controls limiting data access to authorized personnel only
• Regular security reviews and vulnerability assessments
• Secure payment processing through PCI-compliant Stripe integration

No security system is impenetrable. In the event of a data breach, we will notify affected individuals and the Commission d’accès à l’information du Québec (CAI) as required by Loi 25.

12. Children’s Privacy

Our Platforms are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

For educational deployments involving minors aged 16–18, parental or institutional consent is required as specified in the applicable institutional agreement.

13. Privacy Impact Assessments

In accordance with Loi 25, we conduct Privacy Impact Assessments (PIAs) before implementing new projects or systems that involve the collection, use, or disclosure of personal information. This includes assessments for:

• New simulation products or features involving personal data
• New third-party service provider integrations
• International data transfers
• Changes to AI systems that process personal information

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will provide notice of material changes by:

• Posting the updated Policy on our Platforms with a revised effective date
• Sending email notification to registered users (for material changes)
• Obtaining renewed consent where required by law

We encourage you to review this Policy periodically.

15. Complaints and Recourse

If you believe your privacy rights have been violated, you may:

• Contact our Person Responsible for Privacy (Section 2) to file a complaint
• File a complaint with the Commission d’accès à l’information du Québec (CAI) at www.cai.gouv.qc.ca
• File a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca

We will investigate all complaints and respond within 30 days.

16. Contact Us

For privacy-related questions, requests, or complaints:

Panda Projet

Attention: Person Responsible for the Protection of Personal Information

Email: sgauthier@executiveproducer.ca

Website: pandaprojet.com

Address: 345 Lagauchetière W., Montreal, QC, Canada