Privacy policy
Your personal information, handled the way we handle our own
Last updated: July 16, 2026
Who we are and how to reach us
Cogio inc. (“Cogio”) is a Quebec consulting firm in sovereign artificial intelligence, established in Quebec, Canada. This policy describes how we collect, use, keep and protect personal information, in accordance with the Act respecting the protection of personal information in the private sector (CQLR c. P-39.1), as amended by Law 25, and with the federal PIPEDA.
The person responsible for the protection of personal information at Cogio can be reached at support@cogio.ai. Any question, or any request for access, correction or withdrawal of consent, can be addressed to them. If an answer does not satisfy you, you keep the right to take the matter to the Commission d’accès à l’information du Québec; we would ask you to write to us first, since most questions are settled in a single exchange.
The information we collect
We collect the strict minimum, and only what you choose to send us. This site sets no advertising cookies and uses no third-party tracking tools.
- Identity and contact details: your name, your email address, your company name and the content of your message when you write to us.
- Exchanges tied to an engagement: the documents and information you entrust to us as part of a service. They are covered by the services agreement and treated as confidential.
- Questions put to the site’s AI assistant: the text of the question, with no identification required (see the section on the assistant).
How we collect it
Directly from you, and from no other source. The contact form sends us the information you type into it (name, company, email, message), delivered through our email provider, which is bound by confidentiality undertakings. The AI assistant receives only the text you type into the question box. We do not buy lists and we do not cross-reference your information against outside databases.
Why we use it
Every use is tied to a serious and legitimate purpose, determined before collection, as Law 25 requires.
- To answer your request and follow up on the business relationship (consent).
- To prepare, carry out and document a services engagement (performance of the contract).
- To meet our legal, tax and professional obligations (legal obligation).
- To improve how relevant the site assistant’s answers are, without ever seeking to identify you (legitimate interest).
The AI assistant on this site
The assistant that answers your questions on this site runs on infrastructure we control, hosted in Canada. Your questions are not passed to third-party artificial intelligence providers and are never used to train a model, ours or anyone else’s.
You do not have to identify yourself to use it, and we ask you not to type personal information into it (yours or anyone else’s) or any confidential information. Questions are kept temporarily for service quality purposes, then deleted.
Hosting and transfers outside Quebec
True to our principles of sovereignty, we favour infrastructure located in Canada for our own systems. When personal information has to be processed outside Quebec, it is first put through the privacy impact assessment set out in section 17 of the Act, and we make sure the information receives adequate protection there.
Security
Information is protected by measures proportionate to its sensitivity: encrypted communications, access restricted to the people who need it, logging and strong authentication. In the event of a confidentiality incident presenting a risk of serious injury, we promptly notify the Commission d’accès à l’information and the people concerned, and we record the incident in our register, as Law 25 requires.
How long we keep it
Once the purposes have been fulfilled, information is securely destroyed or anonymized. In practice, we apply the following periods.
- Correspondence with no business follow-up: destroyed no later than 24 months after the last exchange.
- Engagement files: kept according to the services agreement and our professional and tax obligations (accounting records are kept for 7 years).
- Questions put to the site assistant: kept temporarily for quality purposes, then deleted.
Your rights
At any time you may ask to access the personal information we hold about you, ask for it to be corrected or destroyed, and withdraw your consent, within the limits set by law. Since September 22, 2024, you may also ask for the computerized information you provided to us to be released in a structured, commonly used technological format (portability).
Just write to support@cogio.ai. We answer within 30 days, free of charge.
Information about minors
Our services are aimed at businesses. We do not knowingly collect personal information from minors under 14 without the consent of the person having parental authority, in accordance with Law 25.
Changes to this policy
When we change this policy, we update the date shown at the top of the page. A significant change is flagged prominently on the site. Earlier versions can be obtained on request at support@cogio.ai.
Complaints and recourse
If you believe your rights have not been respected, you may complain to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) or, on federal matters, to the Office of the Privacy Commissioner of Canada (priv.gc.ca). We would ask you to write to us first at support@cogio.ai: we would rather fix a problem than defend it.