Subprocessors
The Béluga Platform runs on infrastructure owned and operated by Technologies Shelter-Bay inc. in Québec; only backup copies, encrypted, are entrusted to OVHcloud, in Québec. The providers below are the only third parties that process personal information on our behalf.
- CyberImpact — Notification email relay and newsletter · Email address, subject and content of notifications · Canada (Québec)
- Stripe — Payment processing · Email, billing name and address, payment information · United States
- Mistral AI — Meeting transcription, at the host's request for each recording · Audio track only, never the video; not kept beyond processing (zero data retention), never used for model training · European Union (EU and EFTA data centres)
- hCaptcha (Intuition Machines) — Anti-bot verification at sign-up · IP address, browser signals · United States
- Element — Mobile push gateway (Béluga Conversations) · Message metadata only (room and sender identifiers, counters), never the content · United Kingdom
- OVHcloud — Off-site backups · Backup copies encrypted before transfer (keys held by us alone) · Canada (Québec)
Incidental technical communications. Two external services also receive technical data, never the readable content of your communications: Google Fonts (United States), which serves a font for the sign-in page and receives the browser's IP address and user agent; public reputation lists (DNSBL) and the Rspamd fingerprint service, located outside Québec, which spam filtering of incoming email queries with the sender's IP address, the domains of the links in the message and fingerprints (hashes) of its content.
This page is updated whenever a provider is added, replaced or removed; substantial changes are announced in accordance with our Privacy Policy.
For any question about our subprocessors: rprp@beluga.quebec.