Privacy Policy

This Privacy Policy covers personal information processed when organizations and authorized users access or use Corelo services, including website interactions, customer onboarding, account administration, event management workflows, support operations, and security monitoring.

In this policy, "personal information" means information about an identifiable individual, directly or indirectly, as defined by applicable law.

Depending on context, Corelo may act as controller for its own business operations and as service provider processing data on behalf of customer organizations.

Corelo has assigned responsibility for personal information governance to Marc-Antoine Paquet, Co-Founder. This role oversees policy implementation, request handling, incident governance, and compliance monitoring.

Corelo maintains internal procedures, role-based obligations, and operational safeguards to ensure information is collected and used only for defined and legitimate purposes.

Corelo collects and processes information relevant to providing and improving its services.

• Business identity and contact information, such as name, business email, company, team, and title.
• Account and authentication data, such as user IDs, organizational roles, access logs, and session security metadata.
• Event operations data, such as registrations, participation status, attendance, invitation tracking, and communication history.
• Engagement and feedback data, such as survey responses and post-event feedback submitted through customer workflows.
• Technical and telemetry data, such as browser details, device information, IP-derived diagnostics, timestamps, and system logs.
• Support and commercial interaction data, such as contact form submissions, early access requests, support tickets, and sales communication records.

Corelo services are not designed to require highly sensitive personal information for ordinary operation. Customers should avoid submitting sensitive information unless clearly required for a valid business purpose and legally authorized.

If sensitive information is submitted, Corelo applies heightened handling controls appropriate to legal requirements and contractual commitments.

Corelo may receive personal information directly from individuals, from customer administrators acting on behalf of their organizations, from authorized product integrations, and from operational systems used to provide and secure services.

Customer organizations remain responsible for ensuring they have legal authority to provide personal information to Corelo and for delivering required notices to their personnel.

Corelo uses personal information only for specified and legitimate purposes linked to service delivery, operational integrity, and legal compliance.

• Provide, configure, and maintain platform functionality for customer organizations.
• Support event lifecycle workflows, including invitations, attendance tracking, and reporting.
• Operate secure authentication, authorization, and account administration controls.
• Deliver customer support, troubleshooting, and service-related communications.
• Generate analytics to measure product quality, adoption, and platform performance.
• Protect systems against abuse, fraud, unauthorized access, and other security threats.
• Meet legal, regulatory, accounting, tax, and contractual obligations.
• Deliver promotional communications only where permitted and with unsubscribe controls.

Where required by law, Corelo relies on valid legal grounds such as consent, contractual necessity, legitimate business purposes, and compliance with legal obligations.

When Corelo processes data on behalf of customers, the customer is responsible for defining lawful processing instructions and ensuring an appropriate legal basis for data collection and disclosure.

When consent is the applicable legal basis, Corelo seeks consent in clear and meaningful terms. Individuals may withdraw consent at any time, subject to legal and contractual restrictions.

Withdrawal of consent does not affect processing already carried out lawfully before withdrawal and may affect Corelo's ability to provide specific features.

Corelo uses necessary cookies required for core website and session operation. Corelo also uses analytics cookies to understand website usage and improve service quality.

Analytics cookies are opt-in. Users can accept, reject, or revise analytics choices through the cookie preference interface.

• Necessary cookies: essential to load pages, preserve technical preferences, and maintain secure service behavior.
• Analytics cookies: used to understand aggregate traffic and interaction trends to improve product and content quality.

Corelo discloses personal information only where necessary for approved purposes and under contractual, confidentiality, and security controls.

Corelo does not sell personal information.

• Infrastructure, hosting, and storage providers.
• Authentication and identity management providers.
• Email and communication delivery providers.
• Analytics and monitoring providers.
• Payment and billing support providers where applicable.
• Professional advisors and public authorities where disclosure is legally required.

Personal information may be processed outside Quebec or Canada when operationally required. Before such transfers, Corelo applies proportionate safeguards, which may include transfer risk assessment and contractual protections designed to preserve an equivalent level of confidentiality and security.

Where data is processed in another jurisdiction, it may become subject to lawful access requests from competent authorities in that jurisdiction.

Corelo implements administrative, technical, and physical controls proportionate to information sensitivity and risk. These controls include access management, authentication controls, secure system design, network protections, logging, and operational monitoring.

No method of transmission or storage is absolutely secure. Corelo continuously improves safeguards in response to risk, technology, and regulatory expectations.

Corelo keeps personal information only for as long as needed to meet documented purposes, legal duties, dispute management, and contractual enforcement.

For marketing and business contact records, Corelo applies a baseline retention window of 24 months after the last meaningful interaction unless longer retention is legally required or contractually justified.

When retention ends, information is deleted, anonymized, or securely destroyed according to internal procedures.

Subject to legal limits, individuals may request access to their personal information, correction of inaccurate data, deletion where legally applicable, and withdrawal of consent where consent is the basis for processing.

Depending on the context and applicable law, individuals may also request data portability or request cessation of dissemination where legal requirements are met.

Requests can be submitted to marc@corelo.io. Corelo targets responses within 30 days, subject to lawful extensions when needed for complex requests or legal review.

To protect personal information, Corelo may verify identity and authority before responding to access, correction, deletion, or portability requests.

Where Corelo acts as a service provider for a customer organization, requests may be redirected to the relevant customer administrator when that organization controls the data relationship.

Corelo uses analytics and automation to support reporting and operational decision support. Corelo does not perform solely automated decision-making that produces legal or similarly significant effects on individuals within the scope of this policy.

Corelo maintains procedures to detect, assess, document, and address privacy incidents. Where required by law, Corelo notifies affected organizations and competent authorities and provides notifications to affected individuals without undue delay where legally required.

Corelo maintains incident records as required by applicable legal obligations.

If you have concerns about how Corelo handles personal information, contact marc@corelo.io first so we can investigate and respond.

If you remain unsatisfied, you may file a complaint with the Commission d'acces a l'information du Quebec or another competent privacy authority.

If Corelo is involved in a merger, acquisition, financing, restructuring, or asset transfer, personal information may be disclosed to relevant parties under confidentiality and security safeguards, and only as reasonably necessary for the transaction.

Corelo may update this Privacy Policy to reflect legal, security, operational, or product changes. Corelo will update the effective date and provide notice of material changes through appropriate channels.

Person in charge of personal information: Marc-Antoine Paquet, Co-Founder.

Email for privacy rights, legal notices, and complaints: marc@corelo.io

Entity: Technologies Corelo Inc., Quebec, Canada