Last updated: September 22, 2026

Privacy Policy

This policy explains how Groupe Dispozition inc. (“Modifee”) handles personal information. It is written for Québec’s Act respecting the protection of personal information in the private sector (Law 25) and for PIPEDA.

Who is responsible

Samuel Jacques is responsible for the protection of personal information. Email the contact address in the site footer.

Information we collect

  • Agency account: name, email, and profile details from GitHub sign-in, plus workspace settings.
  • Widget messages: what your end clients type, files they attach, and the language of the conversation.
  • Repository metadata: names, pull requests, and deployment status needed to propose a change. We do not keep a copy of your repository. Code is read inside a temporary sandbox for that request.
  • Integration tokens for GitHub and Vercel, stored encrypted.

How we use it

We use this information to run your workspace, show requests, run the agent, open pull requests, send preview links, and email you about the product. We do not sell personal information.

Service providers

We use other companies only to operate Modifee:

  • A hosting provider, for the app.
  • An AI provider, to draft replies and code changes.
  • Resend, to send email.
  • GitHub and Vercel, when you connect those accounts.

They process information to provide those services.

Transfers outside Québec

Some of these providers store or process information outside Québec, including in the United States. When we transfer personal information, we follow Law 25, including a look at the protection offered and a written arrangement where the law requires one.

How long we keep it

We keep account data and request history while the workspace is active. If you close the workspace or ask us to delete it, we delete or de-identify personal information within a reasonable time, except what the law tells us to keep. Encrypted integration tokens are removed when you disconnect.

Your rights

You can ask to access, correct, or delete personal information we hold about you, and to withdraw consent where the law allows. You can also complain to the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada. Write to the address above. We answer within the time the law requires, generally 30 days.

Security

Access to production systems is limited. Integration tokens are encrypted. Agent runs use an isolated sandbox. No method of storage or transmission is perfectly secure.

Cookies

We use a session cookie to keep you signed in. We do not use advertising cookies. The widget on your clients’ sites does not set an advertising cookie.

Contact

Samuel Jacques, privacy officer, Groupe Dispozition inc., Québec, Canada. Email the contact address in the site footer. See also the Terms of Service.