Privacy Policy

This Privacy Policy explains how mtl.ai (“we”, “us”, “our”) collects, uses, discloses, retains, and protects personal information when you visit mtl.ai or interact with us through this website. We are based in Montreal, Quebec, Canada, and we comply with the Act respecting the protection of personal information in the private sector (Quebec, also known as “Law 25”) and the Personal Information Protection and Electronic Documents Act (Canada, “PIPEDA”).

1. Who is responsible for your personal information

mtl.ai is the enterprise responsible for the personal information collected through this website. Under Law 25, we have designated a Privacy Officer who oversees compliance with applicable privacy laws and handles requests and complaints related to personal information.

Privacy Officer
mtl.ai — Montreal, Quebec, Canada
Email: privacy@mtl.ai
General contact: info@mtl.ai

2. What information we collect

We collect only the personal information necessary for the purposes identified below.

Information you provide

• Contact form submissions: your name, email address, optional company name, and the contents of your message.
• Job inquiries: any information you choose to include when you email us at jobs@mtl.ai, including your resume and any attached materials.

Information collected automatically

• Technical data: when you submit the contact form, we record the IP address of the request for the purpose of rate-limiting and abuse prevention.
• Server logs: our server may briefly record standard request metadata (timestamps, user agent, requested URL) for operational and security purposes.

We do not use advertising trackers, third-party analytics, social media pixels, or behavioural profiling on this website. We do not set cookies for marketing or analytics purposes.

3. Why we collect it (purposes)

We use personal information strictly for the following purposes:

• To respond to your inquiries and follow up on potential engagements.
• To evaluate job applications and communicate with candidates.
• To operate, secure, and maintain the website, including preventing spam, abuse, and unauthorized access.
• To meet our legal and regulatory obligations.

We do not use personal information for any other purpose without first obtaining your consent or unless permitted or required by law.

4. Legal basis — your consent

By voluntarily submitting the contact form or emailing us, you consent to the collection and use of your personal information for the purposes described in this policy. You may withdraw your consent at any time by contacting our Privacy Officer (see Section 1). Withdrawing consent does not affect the lawfulness of processing done before the withdrawal.

5. Who we share information with

We do not sell, rent, or trade personal information. We may share personal information only with the following categories of recipients, and only to the extent necessary:

• Service providers that help us operate the website and deliver our services, including email delivery, server hosting, error monitoring, and notification tools. These providers are contractually required to use personal information only for the purposes we specify and to apply appropriate security measures.
• Legal and regulatory authorities when we are required by law to disclose information, or to protect our rights, safety, or property, or that of others.
• Successors in the context of a corporate transaction (merger, acquisition, or sale of assets), subject to confidentiality obligations.

6. Transfer of information outside Quebec

Some of our service providers (including our email delivery provider, server infrastructure, and notification tools) are located outside Quebec, including in the United States and other jurisdictions. As a result, your personal information may be processed, stored, or accessed from outside Quebec.

When personal information is communicated outside Quebec, we conduct a privacy impact assessment as required by Law 25 and ensure that the information receives a level of protection equivalent to that provided under Quebec law, through contractual safeguards with the service provider and reasonable technical and organizational measures. You acknowledge that, when personal information is transferred outside Canada, it may be subject to the laws of the foreign jurisdiction, including lawful access by foreign authorities.

You may contact our Privacy Officer for more information about these transfers and the safeguards in place.

7. How long we keep your information

We retain personal information only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Specifically:

• Contact form submissions are kept for as long as needed to respond to your inquiry and to follow up on any related engagement. Once the purpose is fulfilled, the information is destroyed or anonymized.
• Job applications are kept for the duration of the relevant recruitment process. Materials from candidates we do not hire are deleted after the process closes, unless you ask us to keep them for future opportunities.
• Technical logs are kept only for the short period necessary for security and operational purposes.

8. Your rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right of access: obtain confirmation that we hold personal information about you and a copy of that information.
• Right of rectification: ask us to correct personal information that is inaccurate, incomplete, or out of date.
• Right to withdraw consent: withdraw your consent to the processing of your personal information at any time.
• Right to de-indexing and erasure (cessation of dissemination): in certain cases, ask us to stop disseminating your personal information, or to de-index a hyperlink that gives access to it.
• Right to data portability: obtain the personal information you have provided to us in a structured, commonly used technological format, where required by law.
• Right to be informed about decisions based exclusively on automated processing of your personal information, if any. We do not currently make such decisions about you.

To exercise any of these rights, contact our Privacy Officer at privacy@mtl.ai. We will respond within thirty (30) days. To protect your information, we may need to verify your identity before acting on a request.

9. How to file a complaint

If you believe we have not handled your personal information in accordance with the law, you can contact our Privacy Officer first. If you are not satisfied with our response, you have the right to file a complaint with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) or, where applicable, the Office of the Privacy Commissioner of Canada (priv.gc.ca).

10. Security

We apply reasonable physical, organizational, and technological security measures to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These include encrypted connections (HTTPS), restricted access to systems holding personal information, rate-limiting and abuse prevention on the contact form, and ongoing review of our service providers’ practices.

If a confidentiality incident involving your personal information poses a risk of serious injury, we will notify the Commission d’accès à l’information and affected individuals as required by Law 25.

11. Cookies and similar technologies

This website does not use cookies for advertising, analytics, tracking, or profiling. Any cookies set by the site are limited to those strictly necessary for the site to function (for example, session-related cookies if and when applicable). You can configure your browser to refuse cookies; this should not affect your ability to view our content.

12. Children

Our website and services are directed to businesses and professionals. We do not knowingly collect personal information from individuals under the age of 14. If you believe a minor has provided us with personal information, please contact our Privacy Officer so we can take appropriate action.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Effective date” at the top of this page indicates when the latest version took effect. We encourage you to review this page periodically.

14. Contact

Questions, comments, or requests about this Privacy Policy or about your personal information can be sent to:

Privacy Officer
mtl.ai — Montreal, Quebec, Canada
privacy@mtl.ai