Privacy policy

Mesuria, Québec, Canada, is responsible for the personal information collected through its site and platform (dashboard, questionnaire, training space), except when it processes it on behalf of an organization that invited you (see section 4).

For any question, write to the person in charge of the protection of personal information: privacy@mesuria.ai.

Depending on how you use the services:

• your contact details: name, email, organization, team, role;
• your diagnostic answers and the resulting scores, along with technical session data (response time, tab changes, pastes);
• your training progress: video watch time, quiz answers and results, attestations;
• messages sent through the contact form;
• technical data needed for sign-in and security.

For a payment, our provider Stripe receives your name, email, billing address and card details. Mesuria itself stores no payment card data.

We use your information to:

• create and secure your account;
• run diagnostics and compute results;
• give access to training, track your progress and issue your attestations;
• bill subscriptions and purchases;
• send you service emails (invitation, activation, sign-in, billing);
• answer your messages;
• compute averages by industry for industry benchmarking (coming soon), from the results of several organizations (see section 4);
• measure site audience, only if you accept it.

We do not use it for any other purpose without your consent. We do not sell it and do not use it to train artificial intelligence models.

When an organization invites you to a diagnostic or a training, it determines the purposes of that processing, and Mesuria processes the information on its behalf.

The organization's managers can see its members' training progress and attestations.

Our terms of use prohibit the organization from using your results, progress and attestations to assess your performance; it remains responsible for its uses.

Diagnostics are anonymous by default: responses are then irreversibly detached from your identity. The organization may choose named mode; your individual results are then visible to its managers. The campaign's mode is shown to you before the first question. Aggregate results are never shown for a group of fewer than five respondents.

Industry benchmarking (coming soon): your organization's diagnostic results may be combined with those of other organizations in the same industry to compute averages by competency. Only these averages are shown, never the results of an organization or a person, and only when at least five (5) organizations in the industry contribute. The industry is the one the organization declares in its settings.

To exercise your rights over this information, you may contact the organization or us; we may refer you to it.

We rely on providers that process information on our behalf: Supabase (database and authentication), Google (hosting of the site and applications, and audience measurement if you accept it), Mux (training video delivery), Mailgun (email delivery), Cloudflare (bot protection for the contact form) and Stripe (payment).

The database is hosted in Canada (Montréal). Some of these providers process information outside Québec, notably in the United States. These transfers are limited to the information needed and governed by contractual agreements aimed at ensuring adequate protection.

Information tied to an organization (membership, diagnostic responses, training completions, attestations) is kept for as long as it supports that organization's compliance record, then destroyed or anonymized in accordance with our legal obligations.

Deleting your personal account erases the data specific to it. The data of a Discovery plan account inactive for more than six (6) months is permanently deleted, after a notice emailed to its administrators thirty (30) days in advance. Both rules are described in Section 6 of the terms of use.

Essential cookies make the site and platform work: an authentication cookie, set only when you sign in and recognized across all Mesuria applications, and a cookie that remembers your language.

Audience measurement (Google Analytics, with IP anonymization) is only enabled if you consent to it. On your first visit, a banner lets you accept or decline. Your choice is stored in your browser. You can change it at any time, in one click, with the “Manage cookies” link at the bottom of every page: withdrawing your consent is as easy as giving it, and audience-measurement cookies are then deleted.

Access to data is limited according to each person's role in their organization, and two-factor authentication is mandatory for administrators.

You may:

• request access to your personal information;
• have it corrected;
• receive it in a structured technological format;
• withdraw your consent;
• delete your personal account, from your settings or by writing to us.

Write to privacy@mesuria.ai with "Privacy" in the subject line. We respond within thirty (30) days. If your information was provided by an organization, we may refer you to it.

You may also file a complaint with the Commission d'accès à l'information du Québec.

The version in force is the one published on this page; its last-updated date appears at the top.