Last updated: May 21, 2026 — Version 2.0
1. Who we are
This Privacy Policy describes how Richer Automation Inc. (“Richer Automation”, “we”, “our”) collects, uses, discloses and protects your personal information when you visit richerautomation.com, use our Discovery Tool, access our proprietary platform Richer Academy (academy.richerautomation.com), or interact with us by email, video call, phone, direct message or in person.
Person responsible for the protection of personal information (Quebec Law 25, s. 3.1): Jean-François Richer, Founder.
Email: [email protected] (please put “PRIVACY” in the subject line for privacy-related requests)
Registered office: Richer Automation Inc., 1087a, chemin de la Côte, Lachute, Quebec, J8H 3W7, Canada.
Because we are incorporated in Quebec, we are subject to the Quebec Act respecting the protection of personal information in the private sector, as modernized by Law 25. When you are located outside Quebec, we apply in parallel the relevant requirements of the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
2. Our five plain commitments
- Open book. We show you exactly what we capture about you, where, and why. This is our Open Book AI commitment.
- Never sold, never rented. Your personal information is never sold, rented or transferred to third parties for marketing purposes.
- Reversible consent. You can withdraw your consent at any time, request access to your data, correction, portability or deletion.
- Profiling disclosed. When our AI analyzes your profile or your conversation, we tell you. You can disable it and you can ask a human to review any automated decision concerning you.
- Incident notified. If your data is compromised, we will notify Quebec’s Commission d’accès à l’information (CAI) and affected individuals within the timelines required by Law 25.
3. Personal information we collect
3.1 Identity and contact
- First name, last name, email, company, position, industry, organization size, country/region.
- Richer Academy login credentials (email and hashed password).
- Language preference (FR/EN/ES).
3.2 Discovery Tool responses (self-serve SAF scorecard)
- Your answers to the diagnostic questions on the five pillars of the Strategic Automation Framework.
- The personalized narrative generated by AI from your answers.
- The automatically calculated SAF tier recommendation (Autonomous, Guided, Strategic).
3.3 Richer Academy learning data
- Your responses to the Exercise Cards in each of the 15 SAF lessons — up to approximately 284 structured fields covering your strategy, your bottlenecks, your operational data and your automation vision.
- Video and exercise progression, access timestamps, session duration, completion rates.
3.4 Recorded meetings (video, phone, in person)
- Before any recorded meeting, you receive an explicit verbal disclosure at the start of the call and we ask for your informed consent. Your acceptance or refusal is captured in the transcript and constitutes our proof of consent.
- If you consent: audio and/or video recording, multilingual text transcript, speaker identification (diarization), duration, date.
- AI-derived analysis from the transcript: summary, detected DISC behavioral profile, Challenger Sale dynamics, buying signals, objections raised, commitments made, next steps.
3.5 CRM observations from our team
- Structured notes taken by members of our human team and by our AI agents (Madeleine, Alfred, Clémence, Warren and others) during their interactions with you, following predefined templates.
- Status of your file in our pipeline (prospect, opportunity, active client), activity history, owner.
3.6 Transactional information
- For any order: email, name, payment method tokenized at Stripe (we never store your full card number), card issuing country, amount, currency, status, promotional code used.
3.7 Navigation information
- IP address, device type, browser, operating system, referring page, pages visited, timestamp.
- Strictly necessary cookies (WordPress session, Polylang language preference), Cloudflare security cookies, CleanTalk anti-spam cookies.
- We do not use Google Analytics, Meta/Facebook Pixel, LinkedIn Insight Tag, Hotjar, Segment, Amplitude or any third-party advertising cookies.
4. Purposes of processing
We use your personal information only for the following purposes, and for no other:
- Deliver our services: create and manage your Richer Academy account, deliver SAF content, process payments, give you access to the resources you subscribed to.
- Personalize your journey: adapt recommendations, difficulty level, examples and communications based on your profile and progression.
- Prepare our exchanges: analyze our previous interactions with you to prepare future ones in a relevant and time-respectful way.
- Communicate: send you operational information, service updates and, if you have separately consented, educational content or commercial announcements.
- Improve our tools: analyze aggregate performance of our platform and effectiveness of our programs to evolve Richer Academy.
- Comply with our obligations: meet the accounting, tax and legal requirements of Quebec and Canada (notably the 7-year retention of transactional records).
5. Sources and means of collection
We collect your personal information:
- Directly from you, when you fill in a form (Discovery Tool, registration, purchase, contact request, Exercise Cards).
- Automatically, through our server logs and the cookies described in section 12.
- During recorded meetings, after your verbal informed consent.
- Through observations from our team following our exchanges.
We do not collect your personal information from data brokers, intelligence agencies, or any public source of commercial profiling.
6. Profiling and automated decisions
This section matters. We write it plainly because it is at the core of what we do.
Yes, we use artificial intelligence to profile you. Specifically:
- Your Discovery Tool produces a SAF score and a tier recommendation through automated calculation.
- Your meeting transcripts, with your consent, are analyzed by the Anthropic (Claude) AI API to extract a summary, a DISC profile, communication signals and next steps.
- Your Academy responses feed a structured knowledge graph of your situation that helps our agents propose the right content at the right time.
Your rights regarding this profiling (Law 25 s. 8.1, 9.1 and right to human review):
- Right to be informed. You are informed by this section and by the consent banners on our tools.
- Right to human review. If an automated decision (for example, your SAF tier recommendation) has a significant effect on you, you can ask that it be reviewed by Jean-François Richer in person. Write to [email protected] (subject: “PRIVACY”) specifying which decision.
- Right to deactivation. You can ask us to disable AI profiling on your profile. You will continue to receive our standard services, without AI personalization.
- Right to provide observations. You can submit observations that we will consider in any automated decision concerning you.
7. Sub-processors and transfers outside Quebec
To deliver our services, we entrust certain operations to carefully selected sub-processors. All are contractually required to protect your information at standards at least equivalent to ours. As required by Law 25 s. 17, we have assessed the privacy factors of each transfer outside Quebec.
| Sub-processor | Function | Location |
|---|---|---|
| Stripe, Inc. | Payment processing | United States — PCI-DSS, SOC 2 |
| Hostinger International Ltd. | WordPress hosting and server | Lithuania (EU) — ISO/IEC 27001 |
| Cloudflare, Inc. | CDN, DNS, security, tunnel | United States and global PoPs — SOC 2, ISO 27001 |
| Fireflies AI Inc. | Meeting transcription | United States — SOC 2 Type II |
| Anthropic, PBC | AI API for analysis and profiling | United States — SOC 2 Type II, no-training-on-API-data |
| HeyGen, Inc. | AI avatar video production (Madeleine, Alfred, etc.) | United States |
| ElevenLabs, Inc. | Voice synthesis and cloning | United States |
| BunnyWay d.o.o. (Bunny.net) | SAF video hosting and delivery | Slovenia (EU) |
| Sendinblue SAS (Brevo) | Transactional email delivery | France (EU) |
| Google LLC (Workspace) | Fallback operational email | United States — Data Privacy Framework |
| CleanTalk Inc. | Anti-spam on forms | United States |
All transfers to the United States rely on Standard Contractual Clauses (SCC) or on Data Privacy Framework certification, as required by Law 25 s. 17.
We do not share your information with other third parties, except: (a) with your explicit consent; (b) when legally required (subpoena, court order); or (c) in the context of a business transfer, in which case the obligations of this policy will transfer to the acquirer.
8. Retention periods
| Type of information | Duration |
|---|---|
| Discovery Tool responses | 24 months after collection, then deletion or anonymization |
| Richer Academy account and data | Duration of client relationship + 24 months |
| Meeting transcripts | 12 months, then deletion |
| Meeting AI analysis reports | 24 months, then deletion |
| CRM observations | Duration of client relationship + 24 months |
| Transactional records (invoices, payments) | 7 years (Canada/Quebec tax obligation) |
| Hostinger server logs | 90 days |
| Session cookies | Browser session or up to 12 months for persistent cookies |
Past these durations, your information is irreversibly deleted or anonymized so that it can no longer identify you.
9. Security measures
- TLS encryption in transit (HTTPS across the entire domain).
- Encryption at rest for databases containing personal information.
- Role-based access control, JWT, and logging of internal access.
- CRM access restricted to Jean-François Richer and a small number of authenticated agents with limited scope.
- Encrypted backups and tested recovery procedures.
- Cloudflare Access and secure tunnel for internal infrastructure.
- Regular review of our sub-processors.
No system is completely impervious. In case of incident, see section 11.
10. Your rights and how to exercise them
Under Law 25 and, where applicable, the GDPR or the CCPA, you have the following rights:
- Right of access — obtain a copy of the information we hold about you, in a readable format.
- Right to rectification — correct any inaccurate data.
- Right to portability — receive your information in a structured, commonly used technical format (JSON), for transmission to another provider.
- Right to withdraw consent — withdraw your consent to any processing based on it, at any time.
- Right to object to profiling and to human review of automated decisions (see section 6).
- Right to delisting and erasure — request that your information be deleted or removed from accessible results.
- Right to lodge a complaint with the Quebec Commission d’accès à l’information (cai.gouv.qc.ca) if you believe your rights are not respected.
To exercise a right: write to [email protected] with “PRIVACY” in the subject line. We acknowledge receipt within 7 days and respond within 30 days, as required by Law 25. Reasonable proof of identity may be requested to prevent a third party from exercising your rights in your place.
11. Confidentiality incidents
In the event of a confidentiality incident presenting a serious risk to your personal information, we will:
- Notify the Quebec Commission d’accès à l’information without delay;
- Notify affected individuals as soon as practicable;
- Maintain an internal incident registry as required by Law 25 s. 3.6;
- Implement corrective measures to prevent recurrence.
12. Cookies
We use a minimal number of cookies, categorized below:
| Cookie | Function | Category |
|---|---|---|
pll_language |
Language preference (Polylang) | Strictly necessary |
wordpress_*, wp_* |
WordPress session | Strictly necessary |
__cf_bm, _cfuvid |
Cloudflare anti-bot security | Strictly necessary |
ct_*, apbct_* |
CleanTalk anti-spam on forms | Strictly necessary |
wpEmojiSettingsSupports |
WordPress emoji support | Preference |
We do not use any advertising or third-party measurement cookies. You can configure your browser to refuse cookies; some site functionality may then be impaired.
13. Minors
Our services are intended for professionals and decision-makers in manufacturing. We do not knowingly solicit or collect information from individuals under 14. If you are under 14, please do not send us personal information. If you are a parent or guardian and discover your child has shared information with us, write to us and we will promptly delete it.
14. Changes
We may modify this Policy to reflect changes in our practices, technology or legal requirements. Any substantial change will be signaled by a banner on the site and, where appropriate, by email. The “Last updated” date at the top of this page indicates the version in force. Prior versions are kept available on request.
15. Contact
Richer Automation Inc.
1087a, chemin de la Côte
Lachute, Quebec, J8H 3W7, Canada
Person responsible for personal information: Jean-François Richer
Email: [email protected] (use “PRIVACY” in the subject line for personal-information requests)
To file a complaint with the supervisory authority:
Quebec Commission d’accès à l’information — cai.gouv.qc.ca