Privacy & Cookie Policy

MONASTUDIO Inc. develops and operates Triddy, a business software solution for interactive 3D product visualization and configuration, augmented and virtual reality experiences, product information and workflow management, analytics, and AI-assisted product guidance.

When you visit our public website or contact us about Triddy, we decide why and how your personal information is used and act as the organization responsible for it (a "controller" under European data protection law). When a business customer uses Triddy with its own buyers, employees or other users, that customer generally decides what information is collected and why. In that situation, the customer is responsible for its privacy notices and legal basis, and MONASTUDIO processes information on the customer's instructions under the applicable agreement.

• Demo request and inquiry information: your name, work email, company, industry and message, which you provide through the "Book a demo" form or by email, and whether you ticked the optional box to receive news and updates. We record this in our customer relationship management (CRM) system, where we also log a follow-up task and a sales opportunity linked to your request.
• Website usage information: anonymous visit statistics such as the pages viewed, referring page, approximate country, browser and device type, collected with Vercel Web Analytics. It does not use cookies and does not build a profile that follows you across other websites.
• Website analytics (only with your consent): if you accept analytics cookies, Google Analytics records how you use our website (pages viewed, approximate location, device and browser, and the campaign or website that brought you here). We turn off its advertising features.
• Optional tracking information (visitors in the United States, only with your consent): if you are located in the United States and you accept, a tool from Apollo.io (see "Who may receive information") uses cookies and similar technologies to recognize the company associated with your visit and the pages you view on our website, so our sales team can better respond to businesses interested in Triddy. If you refuse, it is not loaded.
• Business contact information from other sources: for prospecting, we may obtain professional contact details (name, job title, company, business email address) from business databases such as Apollo.io and add them to our CRM. We use them only to contact people about services relevant to their role, in line with applicable anti-spam laws, and you can ask us to stop or to delete them at any time.
• Campaign source: if you arrive through a campaign link, the campaign details in the link (such as utm_source), the website that referred you and the page you landed on. If you send us a demo request, we attach them to it so we know which channel you came from.
• Technical information: information that appears in routine web-server and security logs, such as IP address, browser/device details, pages requested and request time.
• Customer product and usage information: depending on the customer's setup, product/catalog content, configuration choices, feature usage, analytics events and messages submitted to an AI assistant.

Please do not submit sensitive personal information, or confidential information that is not needed to handle your request. Customer product data and end-user information are handled according to the customer's configuration and service agreement.

We use information, as applicable, to:

• respond to your demo request or inquiry, schedule a demo and follow up on it;
• send you news and updates about Triddy, only if you have opted in;
• identify and contact businesses that may be interested in Triddy, based on their professional role and, if you accept, their visit to our website;
• operate, secure and improve our website and services, including by measuring how the website is used;
• provide the product visualization, configuration, AR/VR, workflow, analytics and AI-assisted features requested by a customer;
• diagnose technical issues and prevent misuse or fraud; and
• meet legal obligations and establish or defend legal claims.

We use the details you send through our forms to deal with your request. If you tick the optional box on our forms, we will also add you to our mailing list to send you news and updates about Triddy. This consent is separate from your demo request, is never pre-ticked, and you can withdraw it at any time using the unsubscribe link in each message or by contacting us. We never add you to a marketing list without it, and we do not sell personal information.

For people in the EEA, our legal basis depends on the activity: taking steps at your request before a contract (demo requests), our legitimate interests in operating, securing and improving the website (visit statistics, security logs) and in contacting businesses likely to be interested in Triddy, compliance with a legal obligation, or your consent where consent is required (for example, marketing emails). For people in Quebec and elsewhere in Canada, we collect your information with your consent, which you give when you submit a form after being informed of the purposes described here. You may object to processing based on legitimate interests and withdraw consent at any time; withdrawal does not affect processing already carried out.

We do not make decisions about website visitors based exclusively on automated processing of their personal information.

We share information only with service providers that help us host, secure, support or operate Triddy, with professional advisers, and with public authorities where required by law. They may only handle information for authorized purposes and are subject to contractual protections. On this website, they currently include:

• Vercel Inc.: website hosting, delivery and Web Analytics.
• Attio: the CRM in which we store demo requests and follow-up tasks.
• Google (Google LLC, United States; Google Ireland Limited for the EEA): website analytics (Google Analytics), only if you accept analytics cookies.
• Apollo.io, Inc. (United States): business contact database used for prospecting and, if you are in the United States and accept, to recognize the companies that visit our website.
• one.com (one.com A/S, Denmark): the email service used to send and receive the emails generated by the demo form.
• Calendly (optional): only if you choose the booking link. You then leave our website and Calendly's own privacy policy applies.

For customer deployments, the customer may also receive information about its users and configurations. Customers should consult their service agreement for the applicable hosting, AI and subprocessor details.

Information may be processed in Quebec, elsewhere in Canada, the United States, the EEA or other locations where MONASTUDIO or its service providers operate. Some of our providers, including Vercel, Attio, Apollo and Google, may store or process data outside Quebec and outside the EEA. A recipient country may have privacy protections different from those where you live.

Before transferring personal information outside Quebec, we assess the privacy protections that would apply, including through a privacy impact assessment, and put required contractual safeguards in place. For transfers from the EEA, we use a legally recognized transfer mechanism where required, such as an adequacy decision (including the EU-U.S. Data Privacy Framework for certified recipients) or approved standard contractual clauses, and apply supplementary measures when appropriate. Contact us for information about the safeguards relevant to your data.

We keep personal information only for as long as needed for the purposes described above, to meet legal requirements, resolve disputes and enforce agreements. Demo request and inquiry information is kept for up to 24 months after our last interaction with you, unless you become a customer, in which case your customer agreement applies. We then delete or anonymize it. Customer information is retained or deleted in accordance with the customer agreement and instructions, subject to legal requirements.

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information. No method of transmission or storage is completely secure. If a privacy incident presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and the people concerned, and, for people in the EEA, notify the competent authority within 72 hours where required. We keep a register of privacy incidents.

Depending on where you live and the applicable law, you may have the right to:

• know what personal information we hold about you and obtain a copy of it;
• have inaccurate, incomplete or outdated information corrected;
• have your information deleted, or ask us to stop using or disclosing it, where the law allows;
• withdraw your consent at any time;
• object to or restrict certain processing;
• receive your information in a structured, commonly used technological format, or have it sent to another organization (portability); and
• lodge a complaint with a privacy regulator.

To exercise a right, contact our privacy officer (see below). We will respond within 30 days, and may need to verify your identity first. Quebec residents may contact the Commission d'accès à l'information du Québec (CAI). People in the EEA may contact the data protection authority in their country of residence, work or the place of the alleged infringement. If your request concerns information handled for a Triddy customer, please contact that business first; we will assist the customer as required.

Cookies are small files stored by your browser. Similar technologies can store or read information on your device. They can support core site functions, remember preferences, measure usage or support advertising.

• Analytics: Vercel Web Analytics measures visits without cookies and without storing anything on your device. It does not identify you personally or follow you across other websites.
• Preferences: when you choose a language, your choice is saved in your browser (local storage, key "preferredLanguage") so the site opens in that language next time. This is strictly necessary for the feature you requested, and stays on your device.
• Campaign source: the campaign details of the link you arrived from (if any) are kept in your browser's session storage until you close the tab, and are only used to complete a demo request that you submit. They are never used to track you across visits.
• Analytics cookies (with your consent only): if you accept, Google Analytics sets cookies (named _ga and _ga_ followed by an identifier, kept up to 14 months) to tell visits apart and measure which pages and campaigns bring visitors. Advertising features are turned off. If you refuse, or if your browser sends a Global Privacy Control signal, it is not loaded.
• Visitor recognition (visitors in the United States, with your consent only): if you are located in the United States and accept analytics cookies in the banner, a script from Apollo.io is also loaded. For visitors located elsewhere, it is never loaded. To decide this, our server reads your approximate country from your IP address when the page loads; we do not store it. It uses cookies and similar technologies to recognize the company associated with your visit and the pages you view. It is off by default and is never loaded if you refuse, or if your browser sends a Global Privacy Control signal.
• No advertising or profiling: this website does not use advertising cookies or tracking pixels. Apart from the optional visitor-recognition tool described above, which only runs with your consent, it uses no technology that identifies, locates or profiles you. Our hosting and security infrastructure may use strictly necessary technologies to deliver and protect the site.

You can change or withdraw your choice at any time with the "Cookie settings" link at the bottom of every page. If you withdraw after accepting, the page reloads and the tool stops; you can also delete cookies already stored in your browser settings. If we introduce other non-essential technologies, we will update this policy and ask for your consent first. External sites you choose to visit, including booking services linked from Triddy, have their own privacy and cookie practices. You can control or delete data stored by your browser in its settings. Customer deployments of Triddy may have different storage or cookie settings, which the deploying customer should explain to its users.

For privacy questions, to exercise your rights or to make a complaint, contact the person in charge of the protection of personal information at MONASTUDIO Inc.:

Nicolas Germeaux, Privacy Officer
MONASTUDIO Inc.
Email : nicolas@monastudio.co

If you are not satisfied with our response, you may lodge a complaint with the Commission d'accès à l'information du Québec or, if you are in the EEA, with your local data protection authority.

This policy may be updated as our practices or legal requirements change. We will post the current version on this page and revise the update date.