Delibia

Privacy policy

Version 1.0 — October 6, 2026

This policy applies to the Delibia Québec website: the pages you visit and the demonstration request form. It states which personal information we collect, what we use it for, who processes it, how long we keep it and how to exercise the rights Law 25 gives you.

The Delibia platform, which municipalities use once they subscribe, is a separate service. The section "The website and the Delibia platform" explains the difference.

Controller

The site is published by Solyne SAS, the company that operates Delibia, 57 rue Louis-Philippe, 76600 Le Havre, France.

Delibia's data protection officer, Dipeeo (an independent external provider), acts as the person responsible for the protection of personal information. To reach them: dpo@delibia.fr.

Information collected

When you fill out the demonstration request form, we collect directly from you:

  • your first and last name
  • your work email
  • your job title
  • your phone number, if you provide it
  • the name of your municipality or organization, its type and its administrative region
  • your message, if you write one
  • your answer to the box "I agree to receive other communications from Delibia (Solyne SAS)", which is not checked by default
  • the language of the form

We also record the page the request was sent from, and the date and time it was sent.

To recognize your organization, we compare your email domain and the name you entered with a public list of Québec municipalities. The result of that comparison is stored with your request.

The form includes two protections against automated submissions, a hidden field and a minimum time to fill it in, and we do not keep the result.

As soon as a page that contains the form is displayed, your browser connects to Cloudflare, which receives your IP address and technical information about your browser for the anti-bot check. When you send the form, our server also sends your IP address to Cloudflare to validate that check. We do not record your IP address in our database.

Technical browsing data

Like any host, Vercel receives your IP address and information about your browser on every request. That data appears in the technical logs Vercel keeps.

Vercel Web Analytics measures audience without cookies: the page viewed, the referring page, the country inferred from the IP address and the device type. The tool also records clicks on certain buttons (for example demonstration requests) and a successful form submission. We only look at aggregate statistics. The Cookies page gives the detail.

The presentation video is hosted by Canva (Canva Pty Ltd, an Australian company). Your browser connects to it only if you click to play it. Canva then receives your IP address and may set cookies.

Use

We use the information from the form to:

  • contact you to arrange the demonstration and answer your request
  • identify your organization so we can prepare the demonstration
  • tell you about our news, only if you checked the box provided for that purpose
  • limit repeated submissions of the form

We do not use it for any other purpose and we do not sell it.

Access and security

Only people authorized to handle demonstration requests have access to this information. Each request is stored in our database, and those people receive an email notification. Exchanges between your browser and the site go through an encrypted connection (HTTPS).

Website providers

  • Vercel — Hosting of the site, processing of the form, technical logs, cookieless audience measurement. A U.S. company. The form is processed in the United States.
  • Supabase — Database where requests are stored. Supabase Inc., a U.S. company. Data stored in Montréal (Canada region).
  • Resend — Email notifications to the people who handle requests. A U.S. company. Sent from the United States.
  • Cloudflare (Turnstile) — Anti-bot check on the form. A U.S. company. Processing may take place outside Québec, including in the United States.
  • Google Workspace — Delibia's email, where the notifications arrive. A U.S. company. Processing may take place outside Québec, including in the United States.
  • Canva — Presentation video, only if you play it. Canva Pty Ltd, an Australian company. Processing may take place outside Québec.

Information from the form is therefore disclosed to and processed in the United States by Vercel, which receives and processes the submission, and by Resend, which sends the notifications. It may also be processed outside Québec, including in the United States, by Cloudflare, by Google and by Supabase, a U.S. company, even though Supabase stores the requests in Montréal.

The website and the Delibia platform

The providers listed above serve only the website and its form. The Delibia platform, which municipalities use to search their documents and prepare their files, rests on a separate infrastructure: it is hosted in Québec, at OVHcloud in Beauharnois, and uses Mistral AI models by default. Those commitments are described on the Sovereignty page.

Retention

We keep the information from your request for 24 months after our last exchange with you, then we delete it.

Your rights

You may at any time:

  • consult the information we hold about you
  • have inaccurate, incomplete or ambiguous information corrected
  • obtain a copy of the information you provided, in a structured and commonly used technological format
  • withdraw your consent to the use and disclosure of your information

These rights are recognized by the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1), as amended by Law 25.

You may ask us to delete your information; we will do so, unless we are required to keep it.

To exercise these rights, write to dpo@delibia.fr. We may ask you to confirm your identity. We reply within 30 days.

Recourse

For any question or complaint, write to dpo@delibia.fr. If our reply does not satisfy you, or if you have not received a reply within 30 days, you may contact the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).

Changes

We will update this policy if we change providers or the way we process your information. The version date at the top of the page shows the latest update.