Privacy Policy

MASTA and your business data

MASTA is a modular assistance and automation platform. Business documents and data remain on the company’s local node; they do not form a central MASTA knowledge base. Central services manage identities, permissions and necessary technical information. The external email relay processes sent messages and information entered in the contact form. This email transmission does not mean that the relay hosts the company’s business documents or databases.

1. Scope

This policy applies to DJoe.ca, its forms and portals, the MASTA application, and artificial intelligence automation services operated by DJOE. It explains practices for personal information collected through technological means.

It does not replace a DJOE customer’s own policy where that customer determines the purpose and means of processing in its private workspace. In that situation, DJOE may act as a service provider and the customer remains responsible for its obligations.

2. Privacy Officer

DJOE management performs the role of Privacy Officer. Requests for access, correction, consent withdrawal, portability, complaints, or information may be sent to:

3. Information that may be collected

Website and service requests: name, email address, organization, requested service, message, voluntarily supplied documents, and correspondence history.

MASTA: Account, workspace, or role identifiers; display name; commands; content explicitly directed to MASTA; selected attachments; timestamps; permissions; workspace settings; and results required to respond.

Technical information: IP address, browser, device, language, requested pages, error logs, security events, and connection information needed to operate the service. DJOE does not ask for a password or authentication token in a message.

4. Sources

Information generally comes from you when you submit a form, contact DJOE, use a command, or upload a file. Some identifiers and contextual information come from an integration your organization chose to authorize.

DJOE limits collection to information necessary for a serious, legitimate, stated purpose. A customer workspace must not connect a data source without proper authorization.

5. Purposes of use

• respond to a request and deliver the selected service;
• authenticate users and enforce permissions;
• execute a MASTA command and return output for human review;
• configure an AI automation, integration, or customer workspace;
• communicate about a project, support request, or incident;
• prevent abuse, secure systems, and diagnose errors;
• comply with legal duties and protect DJOE’s or another person’s rights.

DJOE does not use personal information for an incompatible purpose without required consent or other legal authority.

6. Artificial intelligence processing

When an AI feature is enabled, necessary text, documents, or instructions may be sent to the selected model to generate a response, extraction, classification, or automation. The provider depends on project configuration; a request is not automatically sent to every compatible model.

Technical options being evaluated or available for integration may include OpenAI, Anthropic Claude, Google Gemini, xAI Grok, DeepSeek, Moonshot AI/Kimi, and open-source models running locally. Before production use, DJOE or its customer must identify the authorized provider, permitted data, and applicable safeguards.

MASTA is not intended to independently make a decision that has legal or similarly significant effects on a person. Human review is required for important decisions.

7. Providers and disclosures

DJOE may disclose only the information needed to these provider categories: hosting and infrastructure; form and email services; security and technical support; an expressly enabled AI model or API; professional advisers; and public authorities where legally required.

The public DJoe.ca website is hosted on our DELL infrastructure. Form requests are sent through our email provider outside Quebec, and received at our Gmail contact address. The form does not use Vercel or Resend. Information is used only to respond to your request; this form does not authorize advertising uses.

DJOE does not sell personal information.

8. Cookies and external resources

Public website fonts are hosted locally and no longer request Google Fonts. Language preferences and essential security mechanisms remain in use.

You may restrict some cookies in your browser, although an essential feature may then stop working properly.

9. Retention and destruction

DJOE keeps information only for as long as needed for the stated purpose, the business relationship, security, backups, and tax or legal obligations. Retention varies by category: a contact request may remain for follow-up; a technical log is held for a limited period; MASTA content depends on workspace configuration and the authorized task.

Once the purpose is complete and no duty requires retention, information is securely destroyed or anonymized under applicable requirements. You may ask for the specific period or criteria that apply to your file.

10. Security safeguards

DJOE applies safeguards proportionate to sensitivity, including HTTPS encryption in transit, access controls, customer-workspace separation, authentication, logging, backups, and least-privilege access. Administrative access is limited to people who need it.

No technology eliminates every risk. If an incident creates a risk of serious harm, DJOE will take required steps, including assessment, risk reduction, and legally required notices.

11. Your rights

Subject to law, you may request access, correction, consent withdrawal, an end to certain uses, deletion where applicable, and delivery of computerized information in a structured, commonly used format. You may also request information about an automated decision if such a function were used.

A request must allow DJOE to reasonably verify identity. DJOE will respond within legally required time limits. You may also complain to the Commission d’accès à l’information du Québec.

12. Children

Business automation services are not directed to children. DJOE does not knowingly seek personal information from a child under 14 without required authorization. If you believe a child submitted information without authorization, contact the Privacy Officer for review.

13. Control over your account

You may stop using MASTA and submit a request about your account or information through the contact form. Some information may remain for legal obligations, security, backups, or dispute resolution.

14. Third-party links and policies

The website and MASTA may link to external services. Their own privacy policies govern their practices, including any enabled provider. Review those policies before connecting an account or sending information.

15. Policy changes

DJOE will revise this policy when features, data categories, providers, or legal requirements change. The last-updated date will be revised. Clear notice will be given before a material change applies to previously collected information where required by law.

16. Contact

To exercise a right, report a concern, or ask a privacy question, use the contact form and mention “Privacy” in your message. Do not send identity documents until you receive secure instructions.