Privacy policy

01The principle: what stays with you

Junior runs inside the Claude or the ChatGPT you already use. The work you do with it, your canevas answers and the deliverables it produces, is saved in a project space you control: a folder of your own or your own Google Drive. That is not a policy promise, it is how the software is built.

Our servers handle one request at a time: they receive what is needed to answer, synthesize a result, send it back, and do not keep the text. The text of your answers and of your deliverables is never stored on our servers. What we do keep is listed below: progress states, counters, dates and identifiers, never your words.

02Who is responsible

Junior.Coach inc., a company incorporated in Quebec, is responsible for the personal information described here. The person in charge of the protection of personal information, as Quebec law defines it, is Luc Goudreault, co-founder. You can reach him at info@lucgoudreault.com.

This policy is governed by Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25, and by Canada's Personal Information Protection and Electronic Documents Act.

03The website

The junior.coach pages are static files. We measure audience with Umami, a tool we host ourselves at analytics.junior.coach: it records the page viewed, the referrer, the device type and the approximate country, with no cookie, no advertising identifier and no individual profile. We sell nothing to anyone and we do not run targeted advertising.

The pages also load fonts from Google Fonts and two libraries from cdnjs. Those providers see your IP address, as does any server your browser requests a file from.

04The diagnostic

To complete a diagnostic, you give us your name, your title, your company name, your email, your ratings from 1 to 10 and any comments you write. This information serves one purpose: producing your report and sending it to you. If you give them, your company's size and stage (two optional fields) only help us understand which companies take the diagnostic; they travel with the Junior team's copy and are not used to produce the report.

• Your answers go to our server, which computes your scores and has the report written by an Anthropic Claude model.
• The report is emailed to you, and a copy goes to the Junior team: that is how we know a diagnostic was completed and can follow up with you.
• Our server keeps neither your answers, nor your report, nor your address. Your address is passed to the email provider for that one send. The copies that remain are the ones in mailboxes: yours and ours.
• Your draft and your report are kept in your browser's local storage, on your device, so you can resume or reprint. Clearing the site's data erases them.

Completing a diagnostic puts you in our business contacts: we may write to you about your report and about what Junior can do next. An optional box lets you say yes to these emails; your answer travels with the copy for the Junior team, and our server does not keep it. You can ask us to stop at any time, with a single email.

Before the diagnostic opens to the public, you may also leave your email, and if you wish your first name and company, to be notified when it opens. This information is used for that notice only: it goes to the email provider, lands in the Junior team's inbox and is not kept on our server.

05The Junior service

When your company uses Junior, we keep the following, and nothing else.

Your account

• Your company name, the name and email of the people issued an access key, and the modules you are entitled to.
• The access keys themselves, held encrypted in a secret manager.

Your progress

• For each canevas: its status, the number of required and missing fields, the validation level of each answered field, revisit markers, the date it last moved and the person who moved it.
• These are identifiers, states, counters and dates. Never the text of your answers, never the text of your deliverables. This is what lets the portal and your coach see where you stand.

Technical logs

• For each call: the key that made it, the timestamp, the tool called, the duration, success or error, the number of tokens consumed, the names of the fields touched, the word count of an answer, and the approximate city and country derived from the IP address.
• These logs are used to bill model usage, spot outages and improve the product. They do not contain the content of your answers.

The portal

• Portal sign-in uses a magic link: you enter your email, we send you a link valid for 15 minutes, and your browser then holds a session cookie for 30 days.

06Google Drive and Google APIs

If your team chooses to keep its Junior project in Google Drive, Junior asks for Drive access on your own device. Precisely what that means:

• Junior uses the drive.file scope, the narrowest Google offers. It grants access only to files Junior created itself and to those you explicitly hand it. Junior cannot read the rest of your Drive, and cannot even list it.
• You designate the project folder yourself, once, with Google's file picker. That gesture is what grants access; there is no other way for Junior to reach an existing folder.
• The access and refresh tokens are written on your device, inside the Junior kit installed with you. They never pass through our servers and we do not hold them. Our servers know at most the identifier of the folder agreed with you, never its contents.
• Junior reads and writes your project files and your exported reports in that folder. It deletes nothing else.
• You can withdraw this access whenever you want, at myaccount.google.com/permissions. Junior then stops seeing the folder; your files remain yours in Drive.

Junior's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google Workspace data obtained through Google APIs is never used to train artificial intelligence models, never used for advertising, and is neither sold nor transferred to third parties, except to provide the service, at your request, or as required by law.

07Operator pages

The /admin and /coach pages are reserved for our team and for assigned coaches. Access is through Google sign-in: we receive only the account's verified email, so we know who you are and what you may do. We access nothing else in your Google account.

08Why we use this information

• Providing the service: authenticating you, checking your entitlements, answering your requests, showing your progress, delivering your reports.
• Reaching you: sign-in links, diagnostic reports, diagnostic follow-up, important service notices.
• Billing and administration: measuring model usage and keeping our books.
• Maintenance and improvement: spotting outages, understanding where the journey stalls, measuring site audience.
• Complying with the law: keeping what we must keep and answering a valid legal request.

We rely on your consent and on the necessity of performing the contract between us and your company. We make no decision based exclusively on automated processing that produces a legal effect on you.

09Our providers

We do not sell personal information and we do not trade it for advertising purposes. We rely on the following providers, each bound by its own confidentiality commitments.

Umami, our audience measurement, runs on our own infrastructure: that data goes to no one else.

10Disclosure outside Quebec

Our servers and those of our providers are located in the United States. Your information is therefore processed there and may be subject to that country's laws. Before relying on a provider, we assess the protection it offers, as Quebec law requires, and we retain providers that contractually commit to an adequate level of protection.

Junior is not designed for sensitive personal information. Do not put health data, social insurance numbers, banking details or employee records into your canevas: the methodology does not need them.

11Retention periods

• Your canevas answers and deliverables: never kept by us. They live in your project space, for as long as you want.
• Diagnostic: nothing is kept by the server. The email copies remain in mailboxes; we delete ours on request.
• Account and progress: for the duration of the relationship, then up to 12 months, so that resuming stays possible.
• Technical logs and usage metering: up to 24 months, for billing and trend analysis.
• Sign-in links: 15 minutes. Portal sessions: 30 days.
• Site audience measurement: up to 24 months, in aggregate form.

12Your rights

Quebec law gives you, over the personal information we hold, the right:

• to obtain it and to be told how it is used;
• to have it corrected if it is inaccurate, incomplete or equivocal;
• to withdraw your consent, and to request deletion or that we cease disseminating it;
• to receive, in a structured, commonly used technological format, the information you provided to us;
• to ask us for an explanation of the processing concerned.

Write to info@lucgoudreault.com. We answer within 30 days at the latest. If our answer does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec.

13Security

Everything travels over HTTPS. Access keys and secrets are held in a secret manager, never in the code. Access to administration consoles is restricted to a named list, protected by Google sign-in and two-factor authentication. The best security measure remains structural: what we do not keep cannot leak.

In the event of a confidentiality incident presenting a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information, as the law requires, and we maintain the register it prescribes.

14Cookies and local storage

• Portal session cookie: required to keep you signed in. 30 days.
• Browser local storage: your display language, your diagnostic draft, your report and the version of the homepage you see (drawn at random to compare two offers, with no personal information). All of it stays on your device.
• No advertising cookie, no third-party tracker, no social network pixel.

15Minors

Junior is a business service, meant for people who run or represent a company. It is not addressed to minors and we do not knowingly collect their information. Should that happen, write to us and we will delete it.

16Changes

We may change this policy. The effective date at the top of the page always identifies the current version. A significant change to what we collect, or to why we collect it, will be signalled to you by email or in the portal before it takes effect.

17Contact us

Junior.Coach inc.
Person in charge of the protection of personal information: Luc Goudreault
info@lucgoudreault.com

See also our terms of use.