Privacy policy

Version of October 15, 2026 · Version française

This policy explains what personal information we collect through the website www.kouadiojose.com, the student portal and the Markel mobile app (iOS and Android), why we collect it, who we share it with, how long we keep it and how you can exercise your rights.

1. Who we are

The data controller is Agence Markel Tech Inc. (Markel Technology), 27-705 Progress Avenue, Scarborough, Ontario, M1H 2X1, Canada. The person in charge of the protection of personal information is José Ismaël Kouadio, reachable at contact@kouadiojose.com.

2. What we collect

• Identity and contact details: name, email address (and a second address if you give one), phone number (also used for WhatsApp), language, time zone (detected by your browser so that session times are shown in your own time).
• Account and sign-in: password (stored only as a bcrypt hash), sign-in links and 6-digit codes sent by email (stored only as a hash, single use, valid 10 to 20 minutes), session cookie.
• Enrollment and payments: program, group, enrollment status, amounts, payment plan and dates, invoices (name and billing address you ask us to print). Card payments are handled by Stripe (or PayPal when offered): your card details are entered on their pages and never reach our servers; we only keep payment identifiers and receipts.
• Training activity: videos watched and where you stopped, quiz answers and scores, exercises and preparation items you tick, your project brief, the updates, screenshots, links, questions, comments and reactions you post in your project journal and in your group's community, the deliverables you hand in and José's feedback, your 1-on-1 coaching bookings.
• Live sessions: when you join a group session, your image, voice, name and chat messages pass through the video service. Group sessions are recorded (this is announced on the page before you join); the recording is transcribed automatically and an AI-generated summary, quiz and exercises are produced from the transcript. Replays are visible only to your group.
• Notifications: if you allow notifications, a technical address of your device (a token from Apple or Google for the app, or a Web Push subscription for a browser), the platform and the app version.
• Before enrollment (website): what you send us through the contact form, newsletter, webinar or event registration (name, email, phone, project idea), discovery-call bookings, admission offers, and video testimonials if you choose to record one (with your consent to publish it).
• Emails: a log of the emails we send you (recipient, subject, content, delivery status, bounce or complaint notices from our email provider).

We do not use advertising trackers or audience measurement tools, and we do not sell your information.

3. Why we use it, and on what basis

• To provide the training you enrolled in (account, portal, app, live sessions and replays, coaching, project follow-up, community of your group, service emails and notifications): performance of our contract with you.
• To bill and keep our accounting records: legal obligation.
• To secure the service (sign-in, anti-spam protection, abuse prevention): legitimate interest.
• To answer your requests before enrollment and to send information about our training to people who asked for it: your consent (or, for existing students, our legitimate interest). Every commercial email contains an unsubscribe link.
• Notifications on your phone: your consent, given in your phone's system prompt; you can withdraw it at any time in your phone settings.
• Publishing a testimonial: your explicit consent.

Under Québec's Act respecting the protection of personal information in the private sector (Law 25), we only collect what is necessary for these purposes, and we ask for your consent when the law requires it. You can withdraw your consent at any time (see section 10).

4. Automatic summaries (artificial intelligence)

Transcripts of recorded group sessions are sent to Anthropic (Claude) to produce the written summary, the quiz and the exercises of each replay. No decision about you is made automatically: these documents are teaching material for the group, which José can correct or withdraw.

5. Cookies and local storage

• connect.sid: keeps you signed in (strictly necessary). 7 days on the website, 90 days in the app.
• lang: remembers the language you chose (1 year).
• poll_voter: prevents double votes in live polls (30 days), only if you vote.
• Your browser's local storage keeps a few display preferences (cookie notice closed, notification card hidden, notifications turned on for this device). Nothing is sent to us from it.

Some pages load content from other services, which may then receive your IP address: Google Fonts (typefaces), YouTube or Vimeo (embedded videos), Cloudflare Turnstile (anti-spam check on some forms), Daily (video room).

6. Service providers and countries

We share your information only with the providers we need to run the service, under contract, and only for these purposes:

• Railway: hosting of the application, database and files (United States).
• Huawei Cloud: storage of session recordings, once enabled (the region is stated here when it is).
• Daily.co: live video rooms, recordings and transcription (United States).
• Anthropic: automatic summaries, quizzes and exercises (United States).
• Stripe and, when offered, PayPal: payments (United States, Canada, Europe).
• Resend: sending of emails (United States).
• Google: Firebase Cloud Messaging (Android notifications), Google Calendar (coaching and call bookings), Google Fonts, YouTube (United States).
• Apple: Apple Push Notification service (iPhone notifications) (United States).
• The push service of your browser for Web Push (Google, Apple, Mozilla or Microsoft, depending on the browser).
• Meta (WhatsApp): group chats, if you join your group's WhatsApp group (United States, Ireland).
• Zoho: video meetings for some calls (Canada).
• Cloudflare: anti-spam check on some forms (United States).

Your information may therefore be stored or processed outside your province or country, including in the United States, where it may be accessed by local authorities under local law. Before entrusting information to a provider outside Québec, we assess the privacy risks as required by Law 25. For people in the European Union, transfers rely on adequacy decisions (Canada for commercial organisations, the EU-U.S. Data Privacy Framework for certified providers) or on the European Commission's standard contractual clauses.

7. How long we keep it

• Account, enrollment and training activity: as long as your account exists, then up to 3 years after the end of your training without sign-in. After you delete your account: deactivation is immediate, and your personal information is erased within 30 days.
• Invoices and accounting records: 6 years, as required by tax law.
• Recordings, transcripts and summaries of group sessions: as long as your group's portal remains open.
• Prospect information (contact form, webinar, discovery call) without enrollment: 3 years after the last contact.
• Email log: 24 months.
• Notification devices: until you sign out or delete the app, and at most 270 days without activity.
• Sign-in links and codes: 10 to 20 minutes of validity, deleted the next day.
• Unsubscribe list: kept so that we never write to you again.

8. Security

Connections are encrypted (HTTPS). Passwords, sign-in links and codes are stored only as hashes. Your files (screenshots, deliverables) are stored at addresses that cannot be guessed, shared only with the people allowed to see them. Access to the administration is limited to José and protected by a password. No method is perfectly secure: if an incident threatens your information, we will inform you and the competent authorities as required by law.

9. Minors

Our training and the Markel app are intended for adults (18 years and over). We do not knowingly collect information about children under 14. If you believe a child has sent us information, write to us and we will delete it.

10. Your rights

You can ask to access your information, correct it, receive it in a structured format, withdraw your consent, object to its use or have it deleted. Write to contact@kouadiojose.com; we answer within 30 days. You can delete your account yourself at any time (see below). If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, the CNIL (France) or the ARTCI (Côte d'Ivoire), depending on where you live.

11. Deleting your account

In the app or in your space on the website: More, then Delete my account (also in Settings). Without the app: see how to delete your account, or write to contact@kouadiojose.com.

12. Changes

We may update this policy. The date of the current version is shown at the top of this page; in case of an important change, we will let you know by email or in your space.