Measure visits to this site with Google Analytics? Only with your OK. Privacy
Acteurly

Privacy policy

This policy explains what personal information Acteur Social Marketing collects, why, who it's shared with and how to exercise your rights, under Québec's Act respecting the protection of personal information in the private sector (Law 25). If the two versions differ, the French version prevails.

Last updated: October 21, 2026

Person in charge of personal information

Antonin Laferrière, person in charge of the protection of personal information. To reach him: the contact form, topic "Understand how my data is protected" (acteurly.ai/en/contact). Acteur Social Marketing, North America (remote company).

What we collect

  • Free diagnostic: the website address you enter, that site's public content, and an anonymous identifier stored in your browser, used to apply the one-free-diagnostic limit.
  • Contact form: your name, email, business or website, and your message.
  • Account: your email, name, business profile and the data you enter or import (campaigns, results, documents, notes on your sales meetings: the prospect's name, their public website and what you write about them). If you paste a meeting's notes so the assistant prefills your debrief, that text is sent once to our AI provider to extract the fields, then kept nowhere: only what you save in the debrief stays.
  • Connected tools, only if you connect them: performance data from Google Search Console, Google Analytics, Instagram, Facebook and your Google business listing, read access. If you allow it, Acteurly also publishes on your Facebook Page, Instagram account or LinkedIn profile, only the texts and images you approved, and keeps a record of each post (text, date, address, results) in your workspace. If you connect Mailchimp or Brevo, Acteurly reads only the names of your lists (and your senders) and puts the campaign emails you approved there as drafts; Acteurly never sends an email to your contacts.
  • Payment, once a subscription is offered: handled by Stripe. We never see or store your card number.
  • Technical data: IP address and browser type, used to run the service and prevent abuse.

Why we use it

  • To produce your diagnostic, analyses, recommendations and reports.
  • To reply to you and send notices about your account, including the weekly summary if you turn it on.
  • To apply the free-diagnostic limits, protect the service and prevent fraud.
  • To improve our recommendations using de-identified, aggregated statistics: your ratings (👍 / 👎) and your answers to “Did it work?”, without names or contact details. These statistics cannot identify you, and data received from Google and Meta is not used for them.

We never sell your personal information and never use it for advertising.

Artificial intelligence

Analyses and recommendations are produced by an AI model (currently Mistral AI). They are offered as help; no decision about you is made solely by automated processing. Only the text needed for an analysis is sent to the AI provider.

What Aly remembers about your business: Aly may propose to remember things about your business (positioning, audiences, offers, proof points, words to avoid) and, when you correct a draft, the rule you give it. Nothing is remembered without your approval. Everything remembered is visible on the "Context and voice" page of your workspace, where you can remove each line; these items stay in your workspace, are never shared with another business, and are deleted with your account.

Who we share it with

We use service providers, bound by contract, who process information only on our behalf:

  • Supabase: database and sign-in, with storage in Canada.
  • Vercel: website hosting and running the application.
  • Mistral AI: producing AI analyses (European Union).
  • Resend: sending emails.
  • Google (PageSpeed, Places), web search providers (Tavily) and a page reader (Jina): receive only your website address or your business's public name.
  • Stripe: plan payments and invoicing. You enter your card on Stripe's page; Acteurly never receives its number.
  • Google Analytics: audience measurement of the website's public pages, only if you accept it (may be processed outside Canada).

Data from your connected tools (Google, Meta)

If you connect Google Search Console, Google Analytics, Instagram or Facebook, Acteurly reads your data read-only: searches that show your site, visits and key actions, posts, likes, comments and followers. We change nothing in your accounts, and we only publish if you allowed publishing on that account and approved each post (see "What we collect").

This data is used only to show you your results and to produce your analyses and recommendations. It is never sold, never used for advertising, and never used to train general AI models. Access tokens are encrypted.

Acteurly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To delete this data: disconnect the source in Acteurly (Data sources), or write to us; we delete the data received within 30 days. You can also remove Acteurly's access in your Google or Facebook account settings.

Transfers outside Québec

Some of these providers process information outside Québec, including in the United States and the European Union. Before any such transfer, we assess whether the information will be adequately protected and set it out in a contract, as the law requires.

Canadian and European standards

Acteurly follows Québec's Law 25 and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Our practices also follow the main principles of the European Union's General Data Protection Regulation (GDPR): collect the minimum, for specific purposes; let you access, correct, export and erase your data; bind every provider by contract; report incidents.

Your account data is hosted in Canada, a country recognized by the European Commission as providing adequate protection of personal data for organizations subject to PIPEDA.

Cookies

Cookies needed to run the service: your sign-in session, the free diagnostic's anonymous identifier and your language choice.

Audience measurement, only if you accept it: on the website's public pages (never inside the app), Google Analytics counts pages viewed, where visits come from and the type of device, with its own cookies. It is off by default. You can change your choice anytime with the "Cookies" link at the bottom of the pages; if you decline, its cookies are deleted. Google's advertising signals are turned off.

App usage measurement, done by us only: inside your space, Acteurly notes a few actions (profile completed, action started, done or set aside, dashboard block opened, one visit a day) to learn what is useful and improve the product. This data stays in our database in Canada, with no advertising cookie, no outside service and none of your data's content; it is deleted with your account and after 13 months at most. Technical errors are also recorded, without personal information, so they can be fixed.

Free diagnostic measurement, done by us only: for each free diagnostic, we note how it ended (report, limit reached, failure), how long it took, whether it was run with a website or a name, whether you clicked "Create my account" and whether an account was then created from that browser. The business and the anonymous identifier are erased from these notes after 30 days; the numbers left are deleted after 13 months. If you create an account, the note is tied to your account and deleted with it.

We use no advertising cookies.

How long we keep it

  • Free diagnostic and anonymous identifier: 30 days, then deleted.
  • Free diagnostic measurement: the business and the anonymous identifier 30 days, the numbers 13 months.
  • Messages sent through the contact form: up to 2 years after our last exchange.
  • Account data: while your account is active, then deleted within 30 days of closing it, except what the law requires us to keep (invoices, for example).
  • Technical logs: a short period, at our hosting provider.

Security

Connections are encrypted, access to data is limited to the people who need it, and connected tools are accessed read-only. If a confidentiality incident presents a risk of serious harm, we notify the Commission d'accès à l'information and the people concerned.

Your rights

At any time, you can:

  • access your personal information and get a copy, including in a structured, commonly used technological format;
  • have it corrected if it's inaccurate or incomplete;
  • withdraw your consent or ask us to delete it;
  • disconnect a connected tool, which ends our access.

Contact us or file a complaint

Write to us through the contact form (acteurly.ai/en/contact). We reply within 30 days. If you're not satisfied, you can contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

This service is intended for businesses and adults. We'll notify you of any significant change to this policy.