Privacy Policy - IOcomposer

Provider: I-SYST Inc. (Québec, Canada)

Privacy Officer: The person responsible for the protection of personal information can be contacted at info@i-syst.com.

Address: 50 de Lauzon, Boucherville, Québec, Canada J4B 1E6

This Privacy Policy explains how I-SYST Inc. (“we”, “us”) collects, uses, discloses, and protects personal information in connection with IOcomposer.

IOcomposer is designed to be local-first. We do not intentionally retain prompts, source code, or AI outputs, except transiently for processing, security, error handling, or as otherwise described in this Policy.

1) What We Collect

1.1 Account Information

Email address and account identifiers
Authentication and security metadata

1.2 Billing Information

Billing is processed by Stripe. We receive limited billing metadata only (e.g., subscription status). We do not store full payment card numbers.

1.3 Service Usage Metadata

Feature usage counters (counts only, not content)
Device and application metadata
Security logs (e.g., IP address, timestamps)

We do not intentionally retain: prompts, project files, repositories, or AI outputs.

Important: Users are responsible for removing secrets or sensitive data before submitting content. While safeguards are used, error logs may temporarily process submitted data during failures.

2) How We Use Personal Information

Account management and authentication
Service delivery and security
Billing and subscription management
Legal and compliance obligations

3) AI Processing

AI requests are processed transiently and routed to third-party AI providers (currently Anthropic or OpenAI) based on technical characteristics.

By using AI features, you acknowledge and consent to the processing of applicable information by these providers as described in this Policy.

4) Service Providers

Provider	Purpose	Location
Supabase	Authentication and infrastructure	USA
Stripe	Billing	USA
Anthropic	AI services	USA
OpenAI	AI services	USA

5) Data Retention

Personal information is retained only as long as necessary for service delivery, legal obligations, and security. Retention practices are reviewed periodically.

6) International Transfers

Personal information may be processed outside Québec or Canada and may be subject to foreign laws. We use safeguards intended to provide a level of protection comparable to Canadian privacy requirements.

7) Security

We use appropriate administrative, technical, and organizational safeguards. No system is completely secure.

8) Your Rights

Access and correction
Account deletion
Consent withdrawal where applicable

9) Children’s Privacy

IOcomposer is not intended for individuals under the age of 14.

10) Changes

This Policy may be updated periodically. Continued use constitutes acceptance of the current version.

11) Contact

Privacy inquiries: info@i-syst.com