Privacy Policy

1. Introduction

VIVAVAN CONSULTING INC. (“we”, “our”, or “us”) operates Visage Atlas. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including British Columbia's Personal Information Protection Act (PIPA) and Quebec Law 25.

We do not sell your personal information.

2. Information We Collect

We may collect information that you provide directly to us, including:

• Data you enter for analysis: the price per session and the number of sessions you type into the treatment-cost tool, which runs in your browser and transmits nothing to us
• Usage data and analytics

We do not collect Social Insurance Numbers (SIN), bank login credentials, or brokerage account access credentials. Visage Atlas does not have access to your bank accounts, brokerage accounts, or any external financial accounts.

We collect no health information, treatment history, photographs, clinician or appointment records, or any record of which procedure you are considering; the treatment-cost tool runs entirely in your browser and transmits nothing. We do record aggregate page-view counts, including the page viewed, together with the anonymous daily visitor hash described under Cookies and Tracking.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process the calculations you run
• Improve and optimize our platform

4. Consent

By using Visage Atlas, you provide implied consent for the anonymous usage measurement described in section 6. Visage Atlas offers no accounts and asks you for no personal information.

Non-essential cookies and identity-linked tracking — the Analytics and Advertising categories described in section 6 — are used only with your express opt-in consent, collected through our cookie-consent banner. Anonymous, cookieless usage measurement that is never linked to you runs without consent, as described in section 6. You can change or withdraw your consent at any time via the “Cookie settings” link in the page footer.

You may withdraw your consent for non-essential data processing at any time by contacting us. Please note that withdrawing consent may limit your ability to use certain features of the service.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit
• Encryption at rest for database storage
• Encrypted database connections

Canadian data residency: Your primary data is stored and processed in Canada. Some ancillary services (such as analytics) may process limited data outside of Canada, as described in the Third-Party Services section below.

6. Cookies and Tracking

We use cookies and similar browser-storage technologies in three categories. The non-essential categories are off by default and are used only with your express opt-in consent, which you can give, refuse, or withdraw at any time. Separately from cookies, we measure site usage with anonymous analytics that stores nothing on your device and is never linked to you (see “Analytics” below).

Strictly necessary (always active):

• A browser-storage entry (“vv_consent”) that records your cookie-consent choices, together with the date of your decision and the consent version it applies to, so we can honour them on later visits

Analytics (no cookies): We never set analytics cookies. Analytics runs in an anonymous, cookieless, memory-only mode that stores nothing on your device and is not linked to your identity (see “Analytics” below). If we ever move analytics from memory-only to persistent storage, we will update this policy first.

Advertising cookies (opt-in): Used to show advertising on our Trailfolio (trailfolio.com), Passavia (passavia.ca), and Visage Atlas (visageatlas.com) sites, as described under “Advertising” below. No advertising cookies are set on your device unless you opt in.

Your consent choices: On your first visit, a consent banner lets you accept all cookies, reject all non-essential cookies, or set the Analytics and — on our ad-supported sites — Advertising categories individually. Until you opt in, only strictly necessary storage is used. You can change or withdraw your consent at any time via the “Cookie settings” link in the page footer (or open your cookie settings here); withdrawal takes effect immediately for your subsequent browsing. If we materially change our cookie practices, the banner will ask for your consent again.

Outside the consent-gated advertising described below, we do not use third-party advertising cookies or cross-site tracking cookies. We do not currently respond to Do Not Track (DNT) browser signals, as there is no industry-standard technology for honoring DNT requests.

Analytics: We use a privacy-focused analytics service (PostHog) configured with memory-only storage. No persistent identifiers, cookies, or localStorage entries are placed on your device for analytics purposes. Analytics runs for all visitors in an anonymous mode that cannot identify you: each visit uses a new random identifier, events are not linked to any account, and client IP addresses are not forwarded to PostHog by our first-party proxy and are discarded at ingestion. Analytics data is processed by PostHog in the United States.

Anonymous usage data (all visitors): We collect aggregated, anonymous usage data such as page views, feature usage, referring websites, and general geographic region, through the anonymous analytics mode described above and through server-side page-view, click, and card-impression counters. To count unique daily visitors, our servers derive a one-way hash from your IP address and browser signature using a random salt that rotates and is deleted every day: the raw values are never stored, the hash cannot be reversed or linked across days, and it is deleted within 35 days. We cannot identify individual visitors from this data.

Events we track: Page views only. Visage Atlas records no feature-usage events, and we do not record your browsing sessions.

Advertising

Our Trailfolio (trailfolio.com), Passavia (passavia.ca), and Visage Atlas (visageatlas.com) sites display advertising served by Google AdSense. Google, as a third-party vendor, uses cookies — including the DoubleClick/DART cookie — to serve ads to our users based on their prior visits to this website and other websites on the Internet.

Personalized advertising runs only if you opt in to advertising cookies. If you decline, or have not yet made a choice, we signal Google through Google Consent Mode to serve non-personalized ads only — these are based on the page you are viewing rather than on your browsing history, and no advertising cookies are stored on your device.

Visitors in the EEA, UK, and Switzerland: On our ad-supported sites (trailfolio.com, passavia.ca, and visageatlas.com), where required by law, Google presents its own certified consent message — built on the IAB Transparency & Consent Framework (TCF) — in place of our banner. You make your advertising-cookie and personalization choices, and can review the advertising partners involved, directly through that message; on those sites our own banner does not appear in these regions, so you are not asked twice. You can reopen Google's message at any time via the “Cookie settings” link in the page footer.

You may opt out of personalized advertising from Google at any time in Google Ads Settings, and from other participating vendors at www.aboutads.info/choices. For more detail, see how Google uses information from sites that use its services.

7. Third-Party Services

We use the following third-party services to operate Visage Atlas:

• Cloud hosting and database infrastructure providers (data stored and processed within Canada)
• PostHog - Privacy-focused analytics service, running for all visitors in an anonymous, cookieless mode. Collects page views and feature usage events; uses memory-only storage (no persistent identifiers on your device) and session recording is disabled. Analytics data is processed in the United States in accordance with PostHog's privacy policy.
• Google AdSense — Advertising service on our Trailfolio (trailfolio.com), Passavia (passavia.ca), and Visage Atlas (visageatlas.com) sites. Subject to your consent choices (see section 6), Google may set and read advertising cookies and process ad-related data (such as IP address, page URL, and ad interactions) in the United States in accordance with Google's privacy policy.

With the exception of Google's advertising services — which, where you have consented to advertising cookies, process data for ad serving under Google's own privacy policy — these third-party service providers act as data processors on our behalf and are contractually required to protect your information in accordance with this Privacy Policy and applicable privacy laws, and are prohibited from using your data for their own marketing purposes. We do not sell your personal information. Apart from the consent-based advertising described in section 6, we do not share your personal information with third parties for marketing purposes.

8. Your Rights

Under PIPEDA and applicable provincial privacy legislation, you have the right to:

• Access, correct, or delete your personal information
• Request a copy of your personal data
• Ask us to restrict processing of your information
• Withdraw consent for non-essential data processing

We will respond to data access requests within 30 days, as required by PIPEDA. Contact us at the email below to exercise these rights.

If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at 1-800-282-1376. Quebec residents may also file with the Commission d’accès à l’information du Québec (CAI); British Columbia residents may file with the Office of the Information and Privacy Commissioner for British Columbia.

9. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm to you, we will:

• Notify affected users as soon as feasible
• Report the breach to the Office of the Privacy Commissioner of Canada
• Maintain records of all breaches for at least 5 years, meeting both PIPEDA and Quebec Law 25 (§3.5) requirements

10. Data Retention

Visage Atlas keeps no account data. We retain the anonymous usage data described in section 6 for:

• Backup and disaster recovery (up to 90 days)
• Aggregated, anonymized analytics (indefinitely)

You may request earlier deletion by contacting us at the email below.

11. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email or a prominent notice within the service. We will also post the updated policy on this page and update the “Last updated” date.

13. Contact Us

Privacy Officer. Pursuant to Quebec Law 25 §3.1, the senior officer of VivaVan Consulting Inc. serves as our Privacy Officer and is responsible for our compliance with applicable privacy legislation. Direct privacy questions, access requests, and correction requests to the email below.

If you have questions about this Privacy Policy, please contact us at: [email protected]

If you are not satisfied with our response, you may escalate your privacy complaint to the Office of the Privacy Commissioner of Canada at 1-800-282-1376. Quebec residents may also escalate to the Commission d’accès à l’information du Québec (CAI); British Columbia residents may escalate to the Office of the Information and Privacy Commissioner for British Columbia.