Pulsoq and avivoq.com, by Avivoq (Québec, Canada). In force from 18 October 2026. Devoq and Ondoq have their own policies: Devoq, Ondoq.
The short version. We collect what Pulsoq needs to sign you in, run your workspace and bill you, and nothing else. We do not sell personal information and we run no advertising. The information firms put into Pulsoq about their engagements is theirs; we process it for them, in Quebec, with people's names replaced by codes before any AI reads it.
Dmitri Dneprovski, doing business as Avivoq, Québec, Canada. The person in charge of the protection of personal information is Dmitri Dneprovski, reachable at privacy@avivoq.com.
For the people who use Pulsoq and visit avivoq.com, we decide what we collect and why: this policy describes it. For the information consulting firms and companies put into Pulsoq about their engagements (interview transcripts, notes, documents, photos and survey answers), the firm or company is responsible, and we process it on its behalf, as its service provider, only to provide Pulsoq.
| What | Why we need it |
|---|---|
| Your name, e-mail address and the identifier of your Google account | To sign you in. |
| Your workspace and role | To show you what you may see. |
| Your second factor's secret, stored encrypted | For the roles that open confidential information. |
| Activity records: who opened, changed, generated or downloaded what, and when | Kept in your workspace's log, for security and accountability. Downloaded documents carry an invisible mark naming the workspace, the engagement and the download. |
| Usage counts: engagements, reports and AI usage | To bill and to know our costs. |
| Payments: the transaction's identifier and status | To open the work once it is paid. Paddle collects your payment details; we never see your card number. |
| Refund requests and messages you send us | To answer them. |
avivoq.com itself keeps no visitor profile: no advertising, no analytics tracker, and no cookies outside Pulsoq.
As described on the security and compliance page: names replaced by codes before any AI reads a text; identifying information and original files encrypted, with a key per engagement held in Quebec; every opening of a key logged; a second factor for the roles that open it.
| Provider | What it does | Where |
|---|---|---|
| OVHcloud | Our server and its backups; the encryption keys | Beauharnois, Quebec |
| Supabase | Pulsoq's database and its backups | Montreal, Quebec (Canada Central region) |
| Ollama | AI processing of texts with names replaced by codes, documents and images, by default. Its policy says it processes them only for the request and keeps or trains on nothing. | May be the United States |
| Anthropic | The same AI processing, when Claude is chosen | United States |
| The AI provider a workspace chooses | The same, under the workspace's own agreement with it, when a workspace uses its own account | As that provider states |
| Paddle | Payment, invoicing, sales taxes and refunds, as Merchant of Record | United Kingdom and United States |
| Signing in | As Google states |
When information leaves Quebec, we first assess whether it will be adequately protected, as Quebec law requires, and our agreements with these providers bind them to protect it. Our professional advisers, and authorities where the law requires it, may also receive information.
Pulsoq uses only the cookies it needs to work: one that keeps you signed in and one that protects your forms. No advertising or tracking cookies.
You may ask to see the personal information we hold about you, to correct it, to withdraw a consent, to have it deleted, or to receive it in a structured, commonly used format. Write to the person in charge of the protection of personal information; we answer within 30 days. If information about you is in an engagement, we pass your request to the firm or company responsible for it. You may also complain to the Commission d'accès à l'information du Québec or to the Office of the Privacy Commissioner of Canada.
If a confidentiality incident presents a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information, and we keep a register of incidents.
Pulsoq is a business service, not meant for children, and we do not knowingly collect information about them.
We publish any change here with its date, and tell users by e-mail when it matters to them.