Privacy Policy
Effective date: May 21, 2026 · Last updated: May 21, 2026
Who we are
YOUNIQC (“we,” “us,” “our”) is a sole proprietorship based in Quebec, Canada. We operate the YOUNIQC platform accessible at youniqc.studio (the “Service”).
For privacy matters, contact us at: hello@youniqc.com · Mailing address: Quebec, Canada
As a Quebec-based business, this Privacy Policy is governed by the Act respecting the protection of personal information in the private sector (Quebec Law 25 / Bill 64) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
What information we collect
Information you provide directly
- Account information: Your email address, collected when you sign up or log in via magic link.
- Profile and brand information: Any content you enter into Brand Brain, including tone preferences, vocabulary, archetypes, and brand constitution text.
- Content you create: Drafts, prompts, journal entries, and creative assets you generate or save within the Service.
- Voice recordings: If you use Voice with U or Scribe, voice recordings are processed to generate transcripts. Raw audio is not retained after transcription.
- Billing information: Your name and payment details collected at checkout. Payment card data is handled exclusively by Stripe and never stored on our servers.
Information collected automatically
- Usage data: Pages visited, features used, actions taken within the Service, timestamps.
- Device and browser information: Browser type, operating system, IP address, and general location (country/province level).
- Session data: Authentication tokens, session identifiers.
- AI interaction logs: Records of prompts and responses for the purpose of service delivery and abuse prevention. These logs are retained for 90 days then deleted.
Information we do not collect
- We do not collect social insurance numbers, government-issued ID numbers, or financial account numbers beyond what Stripe requires for billing.
- We do not collect biometric data.
- We do not collect data from minors. The Service is intended for users 18 years of age or older.
Why we collect your information
We collect and use your personal information for the following purposes:
| Purpose | Legal basis |
|---|---|
| Providing and operating the Service | Performance of contract |
| Authenticating your identity via magic link | Performance of contract |
| Processing subscription payments via Stripe | Performance of contract |
| Personalising AI outputs to your brand voice | Performance of contract / Legitimate interest |
| Sending transactional emails (login links, billing receipts) | Performance of contract |
| Detecting and preventing abuse, fraud, and policy violations | Legitimate interest |
| Improving the Service | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We do not use your personal information for advertising, and we do not sell your data to third parties.
Who we share your information with
We share your personal information only with the following service providers (“sub-processors”) as necessary to operate the Service. Each is bound by their own privacy policies and data processing agreements.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase | Database hosting, authentication | United States |
| Anthropic | AI language model processing | United States |
| OpenAI | AI language model processing | United States |
| ElevenLabs | Voice synthesis | United States |
| FAL | Image generation | United States |
| Replicate | Image and media generation | United States |
| Stripe | Payment processing | United States |
| Vercel | Web hosting and deployment | United States |
| Render | Backend hosting | United States |
We do not share your information with any other third parties except as required by law.
Cross-border transfers
Your personal information is transferred to and processed in the United States by the sub-processors listed above. The United States does not have a privacy law deemed equivalent to Quebec Law 25.
Before transferring your information, we have conducted privacy impact assessments and confirmed that each sub-processor applies contractual safeguards, technical security measures, and organisational controls that provide a level of protection comparable to what Quebec law requires.
By using the Service, you acknowledge that your personal information will be transferred to the United States for processing. If you have questions about the safeguards in place, contact us at hello@youniqc.com.
Data retention
| Data type | Retention period |
|---|---|
| Account and profile data | For the duration of your account, plus 30 days after deletion |
| AI interaction logs | 90 days |
| Billing records | 7 years (legal obligation under Quebec tax law) |
| Voice transcripts | 90 days unless you save them to your Vault |
| Content you save to Vault | Until you delete it or close your account |
| Backup copies | Up to 30 days after deletion from primary storage |
When your account is deleted, we remove your personal data from active systems within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely.
Your rights under Quebec Law 25 and PIPEDA
You have the following rights regarding your personal information:
- Right to access: Request a copy of the personal information we hold about you.
- Right to correction: Request that inaccurate or incomplete information be corrected.
- Right to deletion: Request that your personal information be deleted. You can initiate account deletion directly from the Settings page within the Service.
- Right to portability: Request your personal information in a structured, commonly used format.
- Right to withdraw consent: Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
- Right to complain: You have the right to file a complaint with the Commission d’accès à l’information du Québec (CAI) at www.cai.gouv.qc.ca.
To exercise any of these rights, contact us at hello@youniqc.com. We will respond within 30 days.
Security
We implement technical and organisational measures to protect your personal information, including:
- Encryption in transit (TLS) and at rest (AES-256)
- Row-level security on all database tables
- Authentication via time-limited magic links (no passwords stored)
- Access controls limiting data access to systems that require it
No method of transmission over the internet is 100% secure. In the event of a breach that presents a risk of serious harm, we will notify the Commission d’accès à l’information du Québec and affected users within 72 hours of becoming aware of the breach, as required by Quebec Law 25.
Cookies and tracking
We use only functional cookies necessary to operate the Service (session tokens, authentication state). We do not use advertising cookies, tracking pixels, or third-party analytics beyond what is embedded in our hosting infrastructure (Vercel).
Children’s privacy
The Service is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us at hello@youniqc.com and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify you by email or by a notice within the Service. Continued use of the Service after the effective date of the update constitutes acceptance of the revised policy.