Privacy Policy

Réson (“Réson”, “we”, “us”) provides the Réson website at resonai.world and the Réson application (together, the “Service”).

This policy explains what personal information we collect, why, how we use and protect it, and the choices you have. Réson is in beta; we'll update this policy as the Service evolves.

Person in charge of the protection of personal information. In line with Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25), our privacy officer can be reached at privacy@resonai.world.

This policy applies to:

• visitors to our website, including people who use our contact or demo forms;
• people who create a Réson account or are invited to a workspace;
• personal information that our customers add to their workspace about other people, such as their contacts.

For that last category, our customer (the business that uses Réson) decides what to collect and why, and is responsible for having a valid basis — including consent where required — to do so. We process that information on their behalf to provide the Service.

Information you give us

• Account information: your name, email address and password (stored only as a secure hash), or your basic Google profile if you sign in with Google.
• Business information: what you share to set up your workspace — a business name, website address, text you type, files you upload (for example menus, brochures, decks, spreadsheets, images) and AI chat exports you choose to import.
• Content: posts, images, videos, voiceovers, emails, campaigns and other material you create or edit in Réson, and your corrections and approvals.
• Contacts: information you add about your customers and leads, such as names, email addresses, company, notes and consent records.
• Messages to us: when you use our contact or demo forms, your name, email, business name, message and preferred meeting time.

Information we collect automatically

• Technical and usage data: pages and features used, approximate usage of AI generation, error logs, browser and device type.
• Network information: your IP address, used for security and abuse prevention. For our website forms, we keep only a one-way hash of your IP address for rate limiting.

Information from other sources

• Public web information about your business, which Réson looks up and reads at your request when you give it a business name or website.
• Connected services, when you choose to connect one, limited to what you authorise.

Cookies

We use cookies that are necessary to keep you signed in and to remember choices such as your language. We don't use advertising cookies.

We use personal information to:

• provide the Service — build your business profile, generate and revise content, plan campaigns, prepare outreach and run the automations you set up;
• look up public information about your business when you ask us to;
• keep the Service secure, prevent abuse and enforce usage limits;
• respond to your messages and demo requests;
• understand, in aggregate, how the Service is used so we can improve it;
• comply with our legal obligations.

We don't sell personal information. We don't use your workspace content to train AI models.

By default, Réson doesn't publish or send anything on your behalf without your explicit approval.

Réson uses artificial intelligence to analyse the information you provide and to generate content. We rely on the following service providers:

• Google Cloud Vertex AI — to analyse text, files and images, and to generate text, images, video and speech. Information sent for these tasks is limited to what's needed for the task you asked for. Google Cloud's terms for business customers state that customer data isn't used to train Google's models without permission.
• Google Cloud — to host the Service, its database and file storage.
• Google — to sign you in, if you choose “Continue with Google”.
• Services you connect — such as a publishing channel or an email account, only when you connect them and only to do what you approve.

When paid plans are introduced, a payment processor will handle payment details; we'll update this policy before that happens.

Automated processing. Réson generates drafts and suggestions automatically. It doesn't make decisions about you that produce legal or similarly significant effects. Information Réson infers without a source is labelled as a suggestion, and you can review, correct or delete it.

Information is stored on Google Cloud infrastructure. Some processing — in particular by AI services — may take place outside Québec and outside Canada, including in the United States.

When information is processed outside Québec, it may be subject to the laws of the place where it is processed. We use providers that offer contractual, technical and organisational safeguards, and we limit what is sent to what's needed for each task.

If you have questions about where your information is processed, contact privacy@resonai.world.

We keep personal information only as long as needed for the purposes described above:

• Account and workspace data — while your account is active. When you delete content, sources or contacts, they are removed from the Service; copies in backups are overwritten over time.
• AI chat exports — the raw export is kept privately only until you've chosen which conversations Réson may learn from, then deleted.
• Website form submissions — as long as needed to respond and follow up, unless you ask us to delete them sooner.
• Rate-limiting records — a few days.
• Security and audit logs — for a limited period, to protect the Service and investigate incidents.

When information is no longer needed, we delete it or anonymise it.

• Download your content and media from the app at any time.
• Delete individual sources, files, facts, content and contacts from the app.
• Delete your workspace or account, or request a copy of your personal information in a structured, commonly used technological format, by writing to privacy@resonai.world.

We ask for your consent where the law requires it, in clear terms, for specific purposes. You can withdraw your consent at any time, subject to legal or contractual restrictions; withdrawing may mean that parts of the Service no longer work for you.

Your contacts. If you add other people's information to Réson — for example to send them email — you are responsible for having their consent where required, including under Canada's Anti-Spam Legislation (CASL). Réson helps by tracking consent and including identification and an unsubscribe link in outreach messages.

Subject to applicable law, you have the right to:

• know whether we hold personal information about you and access it;
• have inaccurate, incomplete or outdated information corrected;
• have information deleted, or have its dissemination stopped, in the cases provided by law;
• withdraw your consent;
• receive personal information you provided in a structured, commonly used technological format.

To exercise these rights, write to privacy@resonai.world. We'll respond within 30 days. If you're not satisfied with our response, you can contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

We protect information with measures appropriate to its sensitivity, including:

• encryption in transit (HTTPS);
• passwords stored only as secure hashes, and access tokens for connected services stored encrypted;
• strict separation between workspaces — every request is checked against your organisation;
• role-based access within a workspace (owner, admin, editor, viewer);
• records of consequential actions.

No system is perfectly secure. If a confidentiality incident presents a risk of serious injury, we'll notify affected people and the authorities as required by law.

Réson is a business tool and isn't directed to children. We don't knowingly collect personal information from anyone under 14.

We'll update this policy as the Service evolves. We'll post the new version here with a new “last updated” date, and we'll notify account holders of significant changes before they take effect.

Questions, requests or complaints about privacy: privacy@resonai.world.

For anything else, use our contact page.