Privacy policy · October 24, 2026
Your information, in plain words.
Lusona Autonomous, an AI engineering studio in Montréal, follows Quebec's Law 25 and Canada's PIPEDA. Here is what matters.
What we collect, and why
- Public professional contact details (name, title and email of an organization, published on its website or in a public register), to offer services related to your role. We record the source and date. An address marked "no solicitation" is never used.
- What you send us (emails, forms, questionnaires, a voice note if you record one), to reply and prepare our proposals.
- Our clients' documents (texts, budgets, program data), only to do the work requested.
- Views of our documents: when we send you a presentation through a personal link, we record that it was opened, the sections viewed, the IP address and browser, to know it was read and to protect it against copying.
Our website uses no advertising cookies and no audience-measurement tool. We sell no information.
Artificial intelligence
Our agents use AI models from Anthropic and OpenAI, American companies: data is processed mostly in the United States. Our providers do not train their models on your data. A person always checks the AI's work; no decision about you is made by AI alone. If your data must stay in Canada, we can build a solution hosted in Canada.
Our providers
Hostinger (website and email), Resend (email delivery), Formspree (website form), HubSpot (meetings), Anthropic and OpenAI (AI). Some are outside Quebec or Canada; we first check that your information will be adequately protected there. We also disclose information when the law requires it.
How long
- Prospecting contact details: 12 months without a reply, then deleted (immediately on request).
- Exchanges and questionnaires: for the relationship, then 24 months at most.
- Document view tracking: 12 months at most.
- Client documents: for the contract, then deleted or returned within 90 days.
Security
Access limited to the people who need it, a separate space for each client, encrypted connections. If an incident creates a risk of serious harm, we notify you and Quebec's Commission d'accès à l'information.
Your rights
You can access, correct or delete your information, withdraw your consent, ask for a copy in a common format, or ask that it no longer be disseminated. We reply within 30 days. To stop receiving our emails, reply "unsubscribe": it's done within 10 business days at most. You can also contact Quebec's Commission d'accès à l'information or the Office of the Privacy Commissioner of Canada.
Person in charge of the protection of personal information
Management, Lusona Autonomous, Montréal · info@lusona.space
We update this page if our practices change; the date at the top shows it.