Privacy policy
Last updated: November 14, 2026
This policy covers the STS app (app.sts42.com) and this website. We keep it short and plain. If anything is unclear, write to privacy [at] sts42.com.
Who we are
Strategic Thinking Systems, Inc., 304-1111 boul. René-Lévesque Est, Montréal (Québec) H2L 0E1, Canada.
Person in charge of the protection of personal information: Francis Dion, Founder, privacy [at] sts42.com.
The short version
- We collect what we need to run STS, and nothing more.
- We never sell your personal information.
- Your boards are yours. We don’t use them to train AI models, and neither do the AI providers we send them to: we use their business services, whose terms exclude training on your content.
- STS is hosted in Canada. When you use AI features, the content you send to the AI goes to the provider you choose, most of them in the United States.
- You can see, correct, export or delete your information by writing to us.
What we collect, and why
| What | Why |
|---|---|
| Account: name, email, password (stored encrypted), language, plan | To give you an account and sign you in |
| Your content: spaces, folders, boards, cards, files, AI conversations | That’s the service: storing and working on your content |
| Usage: which AI models you use and how much (tokens), board history, technical logs (IP address, browser) | To run, secure and improve STS, and to show you your AI usage |
| Payments: handled by Stripe. We see your plan and payment history, never your card number | To bill your subscription |
| Messages: emails you send us, calls you book with us | To answer you |
Legal bases (GDPR): the contract with you (running your account and the service), our legitimate interest (security, improving STS, answering you), your consent where we ask for it, and legal obligations (accounting).
Who we share it with
Only with the providers that help us run STS, under contracts that limit them to doing that work for us.
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, files, email | Canada (Montréal) |
| OpenAI, Anthropic (Claude), Google (Gemini), Perplexity | Answering AI requests: only the content you or your list send to the AI | United States |
| Cohere | Ranking search results | United States / Canada |
| Tavily | Web searches made by the assistant | United States |
| Stripe | Payments | United States / Canada |
| Cloudflare (Turnstile) | Telling people from bots at sign-up | Worldwide |
| Calendly | Booking calls with us | United States |
When information leaves Quebec, Canada or the European Union, we check that it stays properly protected, and rely on safeguards such as the providers’ standard contractual clauses. Some content you send to an AI provider may be kept by them for a limited time to prevent abuse, under their own policies.
We may also disclose information when the law requires it, or to a buyer of the business, who would remain bound by this policy.
Cookies
This website sets no cookies and doesn’t track you.
The app keeps you signed in and remembers your preferences (language, panel sizes) in your browser’s storage. It uses no advertising or tracking cookies.
How long we keep it
While your account is open. When you ask us to close it, we delete your account and content within 30 days, except what the law requires us to keep (invoices, for example). Backups expire on their own schedule after that.
Your rights
You can ask us to:
- see the information we have about you, and get a copy in a usable format;
- correct it;
- delete it, or stop using it for a purpose;
- withdraw your consent at any time.
Write to privacy [at] sts42.com. We answer within 30 days. If you’re not satisfied, you can complain to the Commission d’accès à l’information du Québec, or, in Europe, to your data protection authority.
Security
Encryption in transit and at rest, access limited to the people who need it, and regular updates. If a breach puts you at risk of serious harm, we’ll tell you and the authorities promptly.
Children
STS is not meant for children under 16, and we don’t knowingly collect their information.
Changes
We’ll post any change here and update the date at the top. If a change is significant, we’ll tell you by email or in the app before it applies.