01 Introduction

This Privacy Policy describes how ROLLAD MEDIA INC ("Rollad Media", "we", "our") collects, uses, retains, and protects personal information from users of the Weelo AI chatbot service, deployed on our partner clients' websites. It complements our Terms of Use governing the use of the service.

Rollad Media is committed to protecting your privacy and fully complying with the Act modernizing legislative provisions as regards the protection of personal information (Law 25), as well as the Act respecting the protection of personal information in the private sector, CQLR c P-39.1.

For any questions regarding this policy, contact our Privacy Officer: info@rolladmedia.com.

02 Information We Collect

2.1 Information You Voluntarily Provide

When interacting with the Weelo AI agent, you may provide:

• First and last name
• Email address
• Phone number
• Content of your messages and questions submitted to the chatbot
• Any other information you choose to share in the conversation

2.2 Information Collected Automatically

When you use Weelo (AI agent), certain technical data is collected automatically:

• IP address
• Web browser type and version
• Device operating system
• Pages visited on the partner site during the interaction
• Date, time, and duration of the interaction
• Conversation history to ensure service continuity

2.3 Information Not Collected

Weelo does not collect sensitive information as defined by Law 25 (health, ethnic origin, political opinions, religious beliefs, biometric data), unless voluntarily provided by you within a conversation.

03 Purposes of Collection and Use

Personal information collected is used exclusively for the following purposes:

• Provide the Weelo (AI agent) chat service and answer your questions
• Forward your requests to the partner client whose website integrates Weelo
• Improve the quality and relevance of the assistant's responses
• Ensure the security, stability, and proper operation of the service
• Detect and prevent abuse, fraud, and malicious activity
• Comply with applicable legal obligations

04 Third-Party Providers and Transfers Outside Quebec

4.1 Anthropic, Inc. — Artificial Intelligence (Claude)

Weelo (AI agent) uses Claude, a language model developed by Anthropic, Inc. (United States), to generate assistant responses. The content of your messages is transmitted to Anthropic's servers for real-time processing. Anthropic acts as a service provider and does not retain your conversations to train its models without explicit consent.

Anthropic Privacy Policy →

4.2 Supabase — Database (AWS us-west-2, Oregon)

Weelo (AI agent) data is stored in a database hosted by Supabase, whose infrastructure relies on Amazon Web Services (AWS) in the us-west-2 (Oregon, USA) region. Supabase maintains a Data Processing Agreement compliant with North American data protection laws.

Supabase Privacy Policy →

4.3 Vercel, Inc. — Hosting (Walnut, California, USA)

The Weelo SaaS application is hosted on Vercel, Inc. infrastructure, with servers located in Walnut, California, USA. Vercel ensures service availability and processes data in transit during each interaction.

Vercel Privacy Policy →

05 Sharing with Partner Clients

Weelo (AI agent) is deployed on our partner clients' websites. When you interact with Weelo, the information you provide may be transmitted to the relevant partner client to fulfill your request (phone callback, email response, etc.).

ROLLAD MEDIA INC acts as a service provider (data processor) on behalf of its partner clients. Each partner is responsible for its own privacy practices and must comply with Law 25 for data received via Weelo.

We enter into an agreement with each partner client governing personal information processing, in accordance with Law 25 requirements.

06 Cookies and Tracking Technologies

Weelo may use cookies and similar technologies to ensure proper service functionality:

• Session Cookies: to maintain conversation continuity
• Technical Cookies: to ensure service stability and security

Weelo does not use advertising or behavioral tracking cookies for commercial purposes. You can configure your browser to reject cookies, though this may impact assistant performance.

07 Data Retention and Destruction

We apply the data minimization principle: your personal information is kept only as long as necessary for the purposes for which it was collected.

• Conversation Logs: retained based on timeframe defined by the partner client, typically between 30 and 365 days
• Technical Data (logs, IP addresses): retained for a maximum of 90 days for security purposes
• Information Sent to Partner Clients: subject to each partner's respective retention policy

Upon expiration of the applicable period, personal information is securely destroyed or irreversibly anonymized.

08 Data Security

We implement appropriate technical and organizational security measures:

• Data encryption in transit (TLS/HTTPS)
• Data encryption at rest within the Supabase database
• Strict access controls: access limited to authorized Rollad Media team members
• Two-factor authentication for administrative access
• Continuous monitoring of system access and security anomalies
• Regular infrastructure security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, absolute security cannot be guaranteed.

09 Privacy Incidents

In the event of a privacy incident involving a risk of serious injury, ROLLAD MEDIA INC commits to:

• Notify the Commission d'accès à l'information du Québec (CAI) within timeframes prescribed by Law 25
• Notify affected individuals whose information was compromised
• Record the incident in our privacy incident log
• Take appropriate corrective actions to remedy the situation

10 Your Personal Information Rights

In accordance with Law 25, you hold the following rights:

If you feel your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec (CAI): cai.gouv.qc.ca.

11 Protection of Minors

Weelo is not intended for individuals under 14 years of age. We do not knowingly collect personal information from children under 14. If you are a parent or guardian and discover your child provided us with personal information without consent, contact us immediately at info@rolladmedia.com so we can proceed with deletion.

12 Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. The updated date is indicated at the top of this document.

For material changes impacting your rights or processing purposes, we will inform you via the relevant partner client's website or through other appropriate channels. We encourage you to review this policy periodically, along with our Terms of Use.