Privacy Policy

Presaga — presaga.ca
Last updated: September 7, 2026

This Privacy Policy explains how Presaga ("we", "us", "our") collects, uses, and protects your information when you use our AI simulation platform at presaga.ca ("the Service").

1. Information we collect

Information you provide

  • Account information: Email address and name when you create an account
  • Payment information: Processed and stored by Stripe — we do not store credit card numbers, bank account details, or other financial account information on our servers
  • Submitted content: Documents, text, and files you upload for simulation processing
  • Communications: Emails or messages you send to us, including anything you write to our support chat

Information collected automatically

  • Usage data: Briefing history, feature usage, and interaction patterns
  • Technical data: IP address, browser type, device information, and access times
  • Cookies: We use essential cookies for authentication. We do not use advertising or tracking cookies.

2. How we use your information

We use your information to:

  • Provide the simulation service and generate reports
  • Process payments and manage your account
  • Send transactional emails (account verification, briefing completion notifications, receipts) — sent from our own self-hosted mail server, never outsourced to a third-party email provider
  • Improve the Service based on aggregate usage patterns
  • Respond to your inquiries and provide support
  • Comply with legal obligations

We do not:

  • Sell your personal information to third parties
  • Use your submitted content to train AI models
  • Send marketing emails without your explicit consent
  • Share your submitted documents with other users
  • Use advertising or tracking cookies

3. How we process your submitted content

When you submit a document for simulation:

  1. Your document is processed by our PRISM simulation engine to generate a structured simulation report
  2. The document and resulting report are stored in your account for your access
  3. Your document is not shared with other users or third parties
  4. Your document is not used to train or fine-tune AI models
  5. You may delete your submitted content and reports at any time through your account settings

Third-party AI services

Our simulation engine sends portions of your submitted content to Cerebras, our AI-inference provider, over an OpenAI-compatible API. Cerebras's standard API is not contractually pinned to any particular region — the language model runs outside Canada, even though our servers do not. If you use Support Chat, your message and conversation history may separately be sent to Anthropic to generate a reply; this is a distinct, optional feature from the simulation engine itself. We do not send your submitted content to any other AI provider. Both providers process data under terms that prohibit using API inputs to train their models. End-to-end in-country processing is available through a private deployment for customers who require it.

Research and live-material retrieval

Some briefings need facts that are not in what you gave us. In those cases the Service makes a small number of outbound requests on your behalf:

  • Reading links you supply. When you paste a link to a conversation or a page, we fetch that page (a normal web request to that site — never logging in, never reading behind a paywall), record exactly when we read it, and keep a fingerprint of the content so your report can point at the words that were really there. Only the address you supplied is sent; none of your text goes with it.
  • Looking up real public bodies. When a briefing concerns a situation that draws in institutions you did not name (for example the public-health unit for a town, or a regulator for a sector), the Service may send short research terms — a place and a role, such as "public health unit serving Cochrane, Ontario" — to a web-search provider (currently Brave Search, a United States company). Your documents, your conversation with the Service, your drafts, and any names you declined to include are never sent. Queries are limited to research terms and are refused if they resemble your own text.

The queries we send, the sources we consult, and short excerpts of what we read are stored with your briefing (encrypted at rest) so you can see what was looked up. Each of these capabilities can be disabled for a private deployment; when one is disabled, the report says so rather than guessing.

4. Data storage and security

  • Location: Your data is hosted and stored on servers in Canada (Beauharnois, Québec), on hardware provided by OVH. AI analysis is performed by third-party AI infrastructure providers and is processed outside Canada (see Section 3); end-to-end in-country processing is available through a private deployment.
  • Encryption: Your submitted content — documents, conversations, generated reports, report-chat history, and uploaded files — is encrypted at rest, and your two-factor authentication secret is encrypted too. Passwords are hashed, never stored in plain text. Backups are AES-256 encrypted. All traffic runs over TLS. This is encryption at rest, not a zero-knowledge design: Presaga can access your data to operate the Service, troubleshoot, and comply with the law. We hold no third-party security certification.
  • Access: Access to user data is restricted to authorized personnel only.
  • Retention: We retain your account data, briefings and reports for as long as your account is active — we do not automatically age content out. You may delete an individual briefing, a project, or your entire account at any time from your account settings.

5. Data sharing

We share your information only in the following circumstances:

  • Hosting: With OVH, which hosts our servers in Beauharnois, Québec, as infrastructure — not as a processor of your content
  • Payment processing: With Stripe, to process payments
  • AI processing: With Cerebras (our simulation engine's AI provider) and, if you use Support Chat, Anthropic — see Section 3
  • Research and link reading: Short research terms (never your content) with a web-search provider (currently Brave Search), and normal web requests to the sites whose links you supply
  • Legal requirements: When required by law, court order, or governmental authority
  • Business transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)

We do not sell, rent, or trade your personal information.

6. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Delete your personal information and account
  • Export your data in a portable format
  • Withdraw consent for optional data processing
  • Object to certain types of data processing

To exercise these rights, contact us at privacy@presaga.ca. We will respond within 30 days.

Canadian privacy rights

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

7. Children's privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

8. Cookies

We use only essential cookies necessary for the Service to function:

  • Authentication cookies: To keep you logged in across sessions
  • Session cookies: To maintain your session state

We do not use analytics cookies, advertising cookies, or third-party tracking cookies. Our self-hosted analytics (Umami) runs cookieless. If we introduce optional analytics cookies in the future, we will update this policy and provide a clear opt-out mechanism.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 days before they take effect. The "Last updated" date at the top of this page indicates the most recent revision.

10. Contact

For privacy-related questions or to exercise your data rights:

Email: privacy@presaga.ca

Mailing address:
Presaga
Ontario, Canada