Legal document
Privacy policy
Last updated: July 2026 · Applies to luge.nsolutions.ai and the Luge product.
1. Who we are
Luge is a product of N Solutions, an operating name of Tchat N Sign Solutions inc. (or any successor entity), 375, boulevard De Quen, Alma, Québec G8B 5P2, Canada.
Personal-information officer (Law 25): Willie Savard. For any question or request regarding your personal information: luge@nsolutions.ai.
2. Scope: three distinct contexts
Luge comes in three contexts that don't handle data the same way. Knowing which one applies is most of what this policy is about:
- The website (luge.nsolutions.ai) — static public pages, with no forms.
- The local app — installed on your device; inference and transcription can run entirely locally.
- Hosted services — the Team plan and managed sovereign modules, on Canadian infrastructure.
3. What the website collects
The site uses no tracking cookies and no advertising trackers. Traffic is measured with Cloudflare Web Analytics — no cookies, no persistent identifiers; only aggregated, anonymous statistics are kept.
The site collects no personal information through a form — it contains none. If you write to luge@nsolutions.ai, we process your email address and its content to answer you, nothing more. Account creation happens in the application, not on this site.
4. What the local app processes
The app is built local-first. Your meetings, transcripts, documents and your agents' memory stay on your device: we don't see them and have no access to them. The app performs signed update checks; it does not send the content of your work to our servers.
5. When you bring your own key (BYOK)
If you connect your own API key (Anthropic, OpenAI, Azure…), the requests you send are governed by the agreement you have with that provider. That data then leaves for them — it's your explicit choice, and it doesn't pass through us.
6. Hosted services and sovereign modules
If you use a hosted workspace (Team plan) or a managed sovereign module, your data is isolated per organization (tenant), logged for audit, and managed inference runs on Canadian inference infrastructure. We may evolve the infrastructure provider under the hood; the Canadian residency of your data does not change.
7. Purposes and consent
We process personal information to: provide the service, communicate with you, ensure security, bill paid plans, and meet our legal obligations. By creating an account or writing to us, you consent to this processing for those purposes. You can withdraw consent (see §13).
8. Automated decisions and artificial intelligence (Law 25, s. 12.1)
Luge uses AI models for transcription, agent assistance and personal-information detection. These are designed with the human in the loop: a draft stays correctable before approval, and nothing is published or transmitted without your explicit approval. No decision with a legal effect is made in a fully automated way; you have the right to human review.
9. Sub-processors and third parties
We rely on a small set of providers, each for a specific purpose:
| Provider | Role | Location |
|---|---|---|
| Cloudflare | Hosting the site and cookie-less traffic measurement | Global network (static site) |
| Managed inference infrastructure | Inference for sovereign modules (optional) | Canada |
| Payment processor | Billing for paid plans | To be confirmed per plan |
10. International transfer
Our data is hosted in Canada. The only possible transfer outside Canada is the one you trigger yourself by using your own API key (BYOK) to a provider of your choice — an explicit choice on your part.
11. Retention periods
| Data type | Retention |
|---|---|
| Hosted-service account | Duration of the relationship, then deletion on request / export |
| Audit logs (hosted services) | 12 months |
| Billing data | 7 years (legal obligation) |
| Local data (app) | On your device — under your control |
12. Security
We apply physical, organizational and technological measures proportionate to the sensitivity of the data: encryption, access control, tenant isolation, audit logs. Privacy impact assessments (PIAs) are carried out under Law 25 where required.
13. Your rights (Law 25 / PIPEDA)
By writing to luge@nsolutions.ai, you can exercise your rights of access, rectification (within 30 days), erasure, portability, as well as withdrawal of consent and unsubscription from communications. We respond within the timelines set by law.
14. Privacy incidents
We keep an incident register. Any incident presenting a risk of serious harm is reported, with diligence, to the individuals concerned and to the Commission d'accès à l'information (CAI), in accordance with applicable law.
15. External links
The site may contain links to third-party sites. We are not responsible for their privacy practices; please review their respective policies.
16. Changes
Any change to this policy is published on this page with its update date. See also our terms of use.