This policy applies to the personal information collected by Technologies VMLearn inc. ("we") in operating the VMLearn platform (https://www.vmlearn.com). It is established in accordance with Quebec's Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1) and applicable federal legislation.
The person exercising the highest authority within Technologies VMLearn inc. is in charge of the protection of personal information. Requests and complaints may be addressed to info@vmlearn.com.
This information is collected directly from you through your use of the platform or from your educational institution.
The information is used for no other purpose, is not sold, and is not used for advertising.
Consent is obtained at first sign-in through acceptance of the Acceptable Use Policy and the Terms of Use. It may be withdrawn at any time under section 9, subject to the educational institution's obligations towards you.
| Recipient | Information | Purpose |
|---|---|---|
| Educational institution (instructors, administrators, security office) | Attendance, progress, results, lab activity, logs in the event of an investigation | Academic follow-up and discipline |
| Microsoft Corporation (Azure) — hosting, Canada Central region (Ontario) | All information | Hosting and backup |
| Microsoft Corporation (Azure Communication Services) | E-mail address, content of service e-mails | E-mail delivery |
| Anthropic, PBC and Google LLC (United States) | Text of tutor conversations and page viewed, without personal identifiers | Operation of the artificial-intelligence tutor |
| Competent authorities | Information required | Legal obligation, court order |
Information hosted by Microsoft is kept in Canada, outside Quebec. Tutor conversations may be processed in the United States. They are made under contractual terms with those providers and in accordance with the Act's requirements for communication outside Quebec.
| Information | Retention period |
|---|---|
| Log of pages viewed, IP addresses, sign-ins | 60 days |
| Commands entered in lab machines | 14 days |
| Screenshots requested by an instructor | 60 days |
| Artificial-intelligence tutor conversations | 90 days |
| Account, learning record | Duration of enrolment, then as instructed by the institution; destroyed on account closure |
At the end of these periods the information is destroyed or anonymised. Backup copies are replaced on a limited rotation cycle.
Encryption of communications (TLS); password hashing; throttling of sign-in attempts; role-based access control and access logging; network isolation of lab environments; encrypted backups kept in Canada.
The platform uses one session cookie strictly necessary for authentication, in which the display language is stored. No advertising cookie or third-party audience-measurement tool is used. Activity on the platform is analysed to detect unauthorised use (section 3); no technology for locating individuals or for advertising profiling is used.
Any person may, by contacting the person in charge named in section 1:
A written response is provided within 30 days of receipt of the request. A person dissatisfied with the response may file a complaint with the Commission d'accès à l'information du Québec.
Confidentiality incidents are handled as the Act requires: they are recorded, and an incident presenting a risk of serious injury is notified to the Commission d'accès à l'information and to the persons concerned.
This policy may be amended. The version in force and its update date are published at this address.