Privacy · Law 25
Privacy Policy
Last updated:
ValStratis is a Montréal technology partner for operations, sales, automation, and managed AI systems. This policy explains what we collect through this website, during discovery calls, and when we work with clients.
We host our core operating infrastructure in Montréal where we can. When a function cannot reasonably be hosted there, we choose providers carefully and limit what they receive to the work they need to perform.
Person responsible for personal information
Lev Jampolsky, Founder of ValStratis, is responsible for the protection of personal information handled by ValStratis.
For privacy requests, corrections, access requests, deletion requests, or questions about this policy, write to contact [at] valstratis [dot] com.
What we collect
- Discovery and contact details: name, email address, phone number, company, preferred language, booking time, and the message or context you choose to provide.
- Client work context: operational notes, CRM records, call or meeting notes, invoices, payment records, accounting context, and support messages when those are needed to deliver a service.
- AI workflow context: prompts, instructions, files, transcripts, and business context sent to model providers when managed AI work requires it.
- Messaging data: mobile phone numbers, SMS consent records, opt-out records, message content, delivery status, and support context when you text us or agree to receive SMS.
- Technical request data: IP address, approximate country, browser and device metadata, requested URL, referrer, timestamps, security events, and performance data handled by Cloudflare.
- Site preferences: your language choice and cookie-consent choice.
Why we use it
- To respond to inquiries and book discovery calls.
- To prepare, deliver, support, and improve client work.
- To keep CRM, accounting, payment, communication, and project records accurate.
- To reply to SMS you send, send operational messages you request or consent to receive, log STOP/HELP requests, and respect opt-outs.
- To protect the website and services from abuse, bots, spam, and security incidents.
- To understand which website pages are useful, but only when you accept analytics and the Cloudflare Web Analytics beacon loads.
- To meet legal, tax, accounting, and contractual obligations.
SMS and mobile information
If you text ValStratis first or explicitly agree to receive SMS, we may reply by SMS and continue the conversation for the purpose you started or approved. Message frequency varies by matter. Message and data rates may apply.
You can opt out of SMS by replying STOP. You can request help by replying HELP or emailing contact [at] valstratis [dot] com.
We do not sell mobile information. We do not share mobile phone numbers, SMS consent, or SMS opt-in data with third parties, affiliates, lead generators, or partners for marketing or promotional purposes.
Where data is processed and who helps us
Core workflow infrastructure, including n8n and Twenty CRM, is hosted with LeaseWeb in Montréal, Canada.
Some functions require specialized providers that may process information outside Québec. Before using them, we consider the nature of the data, the provider's role, and whether the transfer is appropriate for the service. We do not sell personal information.
| Provider | Role |
|---|---|
| LeaseWeb | Montréal hosting for n8n and Twenty CRM. |
| Cloudflare | Website hosting, CDN, security, server-side analytics, and consent-gated Web Analytics. |
| Cal.com | Discovery-call booking. |
| Google Workspace | Email and business documents. |
| Stripe | Payments. |
| Xero | Accounting. |
| Granola | Meeting transcription. |
| Quo | Call transcripts and VoIP. |
| Slack | Customer messaging when a client chooses that channel. |
| Anthropic | AI model services for drafting, analysis, automation, and managed AI workflows. |
| OpenAI | AI model services for drafting, analysis, automation, and managed AI workflows. |
| Workspace services and AI model services when a workflow calls for them. | |
| Z.ai | AI model services when a workflow calls for them. |
Retention
We keep lead, client, accounting, and service records for as long as they may be needed to respond to you, provide services, keep business records, meet legal obligations, or preserve operational context.
We do not currently apply an automatic deletion schedule to those records. You can ask us to delete personal information, and we will clear it unless we need to keep it for a legal, accounting, security, or contractual reason.
Your rights
Under Québec privacy law, you can ask to access personal information we hold about you, correct it, withdraw consent where consent is the basis for use, request deletion when applicable, and receive portable data where the law requires it.
Email contact [at] valstratis [dot] com. We may need to verify your identity before sending, changing, or deleting records.
Security
We use access controls, provider vetting, Cloudflare security, Montréal-hosted core systems, and operational separation between website, CRM, accounting, payment, and communication tools.
No website or provider stack can promise absolute security. If we learn of an incident that creates a real risk of serious injury, we will handle it under Québec breach-notification requirements.
Complaints and changes
If you are not satisfied with our response, you may contact the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.
We may update this policy as our services, providers, or legal obligations change. The date at the top shows the latest update.