Privacy policy
How Potentiel handles information and your choices.
Publication date: October 21, 2026 (Montréal).
Operator and contact
Potentiel is operated by 9506-7237 QUEBEC INC. Privacy contact: Frederic Hanna, Founder and Privacy Officer, fred@potentiel.io.
Information and purposes
We collect information you provide through accounts, workspaces, uploaded documents, assessments, messages and bookings to deliver those features and respond to you. Technical identifiers and connection information support authentication, security and operation.
Cookies and your choice
Essential cookies and local storage support the service and preferences. Optional PostHog analytics starts only after acceptance. It measures permitted product activity with browser identifiers and a minimal tab-session continuity record. After authentication is verified, an opaque account identifier can associate consented account activity on this origin. Earlier consented guest activity is joined only when fresh server verification confirms the same guest identity became that account; an unrelated sign-in starts a fresh period. The tab record is separate from authentication and grants no access. Your accepted or declined choice is saved in local storage on this browser and origin, without a fixed expiry. Other browsers and domains have separate choices. Refusal keeps core features available. You can stop optional analytics at any time from the Privacy policy. Opening this policy does not accept analytics. Earlier unconsented activity is never backfilled. Withdrawal stops future optional collection and clears optional local identifiers without signing you out or deleting saved work or earlier server records.
Providers and processing
Our service providers include Vercel (hosting/storage), Supabase (authentication), PostHog (optional analytics), Postmark (contact email), Calendly (scheduling), CARTO (map styles/tiles), and Mapbox and Google Places (maps/search). Requested AI analysis or matching sends selected documents and relevant inputs to OpenAI. These requested services and their provider processing are separate from optional analytics. Information may be processed outside Québec. Your sharing choices and applicable legal requirements may also result in disclosure.
Retention
We retain personal information for the purposes described and applicable legal requirements, then destroy it or anonymize it in accordance with applicable rules. Removing a document does not necessarily remove existing reports derived from it.
Your rights
For access, correction, applicable portability, deletion, consent withdrawal or privacy concerns, contact fred@potentiel.io. We may verify your identity proportionately and explain applicable limits. You may also request details about collected information, who can access it and retention. Requests are handled manually; withdrawal does not automatically erase previously collected records.