Privacy Policy

1. Introduction

Artificial Populations ("Artificial Populations", "we", "us", or "our") operates from Quebec, Canada. This Privacy Policy describes how we collect, use, disclose, transfer, and protect personal information in connection with our websites, products, and services (collectively, the "Services").

We process personal information in accordance with applicable laws, including Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25) and applicable Canadian privacy legislation. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the practices it describes, which may be updated from time to time in accordance with Section 16 (Changes to this Policy).

2. Information We Collect

We may collect information that you provide directly and information collected automatically when you use the Services, including:

• Account and Profile Information: Name, email address, authentication details, organization, role, and preferences.
• Content and Inputs: Prompts, research topics, documents, files, messages, and other content you upload or input into the Services.
• Usage Data: Log data, timestamps, clicks, page views, feature usage, diagnostics, and performance data.
• Device and Technical Data: IP address, device identifiers, browser type, operating system, and settings.
• Payment and Transaction Data: Subscription details, purchase history, and limited billing information processed via our payment provider (we do not store full card numbers).
• Support and Communications: Interactions with our team, including requests, feedback, and survey responses.
• Inferences and Derived Data: Analytics, quality signals, and insights derived from the categories above.

We may collect additional categories of information where reasonably necessary to operate, secure, and improve the Services, to conduct research and development, and to comply with legal obligations.

3. How We Use Information

We use personal information for the following purposes:

• Provide, operate, maintain, and secure the Services.
• Process transactions, administer subscriptions, and communicate about your account.
• Respond to requests, provide customer support, and communicate important service information.
• Monitor, prevent, and detect fraud, abuse, security incidents, and unlawful activity.
• Conduct analytics, quality assurance, research, and development to improve the Services and our models.
• Create aggregated, anonymized, or de-identified information for analysis, benchmarking, and product development.
• Comply with legal obligations and enforce our agreements and policies.

Where required by law, we rely on your consent; otherwise we rely on the performance of a contract, legitimate interests (such as securing and improving the Services), or compliance with legal obligations. Consent may be obtained expressly or, where permitted, implied through your use of the Services and available controls.

4. AI Model Improvement, Inputs, and Outputs

You acknowledge and agree that we may use your inputs and usage signals to generate outputs. To improve the Services and our models, we may use aggregated, anonymized, or otherwise de-identified information derived from your inputs, outputs, and usage of the Services for analytics, quality assurance, safety, and product development, in accordance with applicable law.

We do not verify the accuracy of user inputs or outputs. Outputs from Artificial Participants may be probabilistic, experimental, or otherwise non-deterministic and may contain errors. See the Terms & Conditions for additional disclaimers and user responsibilities.

5. Data Sharing and Disclosure

We may disclose personal information to:

• Service Providers and Processors: Hosting, infrastructure, customer support, analytics, payment processing, security, and other providers. We may add or change processors from time to time.
• Affiliates and Professional Advisors: For internal administration, compliance, finance, auditing, and legal advice.
• Legal and Safety: To comply with law, legal process, regulatory requirements, or to protect rights, safety, and security of users and the public.
• Business Transfers: As part of any merger, acquisition, reorganization, sale of assets, financing, or bankruptcy transaction.
• Aggregated/De-identified Data: Information that does not identify you, for analytics, research, and product improvement.

We do not sell personal information.

6. International Transfers

Personal information may be stored and processed in Quebec and other provinces of Canada, the United States, or other jurisdictions where we or our service providers maintain operations. Where personal information is transferred outside of Quebec or Canada, we take appropriate measures (including contractual, technical, and organizational measures) designed to provide a comparable level of protection as required by applicable law.

7. Retention and Deletion

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing the Services, maintaining business and legal records, and complying with our legal obligations.

We may retain certain information after account deletion where required or permitted by law, including for fraud prevention, security, legal claims, audits, resolving disputes, enforcing agreements, logs, or backups (which may persist for a limited time before being overwritten). We may also retain aggregated, anonymized, or de-identified data that does not identify you.

8. Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we do not guarantee absolute security. For details on our infrastructure, encryption, data isolation, and sub-processors, see our Security page.

9. Cookies and Tracking

We and our service providers use cookies and similar technologies for functionality, analytics, and security. You may adjust your browser settings to refuse cookies; however, some features may not function properly.

10. Third-Party Services

The Services may contain links to or integrate with third-party services. We are not responsible for the privacy practices, content, or security of third parties. Your use of third-party services is governed by their terms and policies.

We may add, remove, or change third-party processors and integrations at any time. To the extent permitted by law, we disclaim liability for third-party acts, omissions, outages, and changes to their services.

11. Children and Eligibility

The Services are not directed to or intended for use by individuals under 16 years of age. If you are under 16, do not use the Services. If we learn that we have collected personal information from someone under 16, we will take reasonable steps to delete it.

12. Your Rights Under Quebec Law

Subject to applicable law and certain exceptions, you may have the right to access, rectify, delete, obtain a copy, or withdraw consent regarding your personal information, as well as rights to data portability and de‑indexing.

We may request information to verify your identity and authority, and may refuse requests that are manifestly unfounded, excessive, infringe the rights of others, or are technically infeasible. We will respond within the timeframes required by law.

To exercise these rights, please contact us through our website. You may also lodge a complaint with the Commission d’accès à l’information du Québec (CAI).

13. Person Responsible for Personal Information

In accordance with Law 25, we have designated a person responsible for the protection of personal information. This person oversees our compliance and responds to requests and complaints. To reach the person responsible, please contact us through our website.

14. Changes to this Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide notice as required by law. For non‑material or administrative updates, we may update this policy without separate notice.

Your continued use of the Services after the effective date of any update constitutes your acceptance of the updated policy.