Privacy Policy

1. Scope and applicability

This Privacy Policy describes how Wouessi Inc. (Toronto, Canada with United States operations from Arlington, Virginia) · together Wouessi, we, us · collect, use, store, disclose, and protect personal information.

It applies to information we collect through wouessi.com, our customer engagements, our recruiting and supplier processes, and any product or service we operate (including the upcoming Stanza-46 platform). We comply with PIPEDA (Canada), CCPA/CPRA (California), Quebec's Law 25, the GDPR where applicable, and HIPAA when we are a Business Associate.

2. Information we collect

• Information you provide: name, email, phone, company, role, message content (forms), application materials (careers).
• Automatically collected: IP address, browser type, pages visited, referring URL, timestamps. We do not use third-party advertising cookies.
• Service data: when we operate a system on your behalf, only the data your engagement contract authorizes.

3. How we use information

• To respond to your inquiry, send the written 48-hour recommendation, and operate the engagement.
• To recruit, screen, and onboard candidates.
• To meet legal, accounting, regulatory, and procurement obligations.
• To improve site security and prevent abuse.

We never sell personal information. We never use customer engagement data to train third-party AI models.

4. Lawful basis (GDPR / Law 25)

• Consent · newsletter sign-up, optional form fields.
• Contract · pre-contract discovery and live engagements.
• Legitimate interest · site security, fraud prevention.
• Legal obligation · tax, anti-money-laundering, supplier diligence.

5. Disclosure to third parties

We share only with: (i) named subprocessors listed at security.html#subprocessors; (ii) regulators or law enforcement when legally required; (iii) acquirers in a merger or sale, with notice. We never sell or rent data.

6. Data residency and transfers

Customer data defaults to in-country hosting (Canadian customers in Canada, US customers in the US, EU customers in the EU). When transfers are required, we use Standard Contractual Clauses (SCCs) and equivalent transfer mechanisms.

7. Your rights

You can request access, correction, deletion, portability, and (where applicable) objection or restriction. California residents have additional CCPA/CPRA rights to know, delete, correct, opt out of sale (we do not sell), and limit use of sensitive personal information. Quebec residents have Law 25 rights including data portability and de-indexing. EU/UK residents have GDPR rights. Contact privacy@wouessi.com · we respond within 30 days.

8. Retention

We keep personal information only as long as necessary for the purpose collected, plus statutory minimums: 7 years for tax records, 2 years for unsuccessful applicants, 6 months for site analytics.

9. Security

Encryption in transit (TLS 1.3) and at rest (AES-256). Role-based access. Audit logs on every customer system. Annual penetration test. SOC 2 Type I in flight. See our Security page.

10. Children

Our services are not directed to children under 13 (USA) / 14 (Quebec) / 16 (EU). We do not knowingly collect their information.

11. Changes

Material changes are announced 30 days in advance via the address on file and at wouessi.com/privacy. The version and date are stamped above.

12. Contact

Privacy Officer · Toronto, Canada · privacy@wouessi.com · 1-844-WOUESSI

Canadian residents who are not satisfied with our response may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). California residents may file with the California Privacy Protection Agency.