meritag.ca is operated by 4376790 Canada Inc. ("IADATA", "we"), a company based in Sainte-Anne-des-Plaines, Quebec, Canada. Meritag is a validation and attestation service: a trusted third party that verifies skills, achievements and recognitions, then certifies them as tamper-proof digital credentials (Open Badges 3.0, cryptographic signature, timestamped anchoring) that anyone can publicly verify, at any time. Meritag acts as the validator for the organizations that issue these recognitions and as the guarantor of their authenticity for those who receive and consult them. This policy covers meritag.ca, the Meritag services, and the social media publishing tools we operate for our own brands (Meritag, CSS Consult, Trivio, MagnetoFun).
In accordance with Quebec's Law 25, the person responsible for the protection of personal information is:
Ermenegildo Conte, President, 4376790 Canada Inc.
Email: contact@meritag.ca
Address: Sainte-Anne-des-Plaines, Québec, Canada, J5N 3T2
Site visitors: truncated IP address, browser type, pages viewed, and technical cookies required for the site to function.
Registered users and badge holders: name, email address, organization, badges earned, verification history, and any information you voluntarily submit through a form.
LinkedIn integration (see section 5): authentication data and publishing data described below.
We do not collect sensitive information (health, origin, political opinions, etc.) and we never knowingly collect information from minors.
We use your information only to:
We do not sell, rent or trade your personal information.
We use LinkedIn's APIs (Community Management API) through our in-house software, OmniSocial, to manage our own accounts: our founder's LinkedIn member profile and our brands' LinkedIn Pages.
Authorization. Access is granted by the account holder through LinkedIn's OAuth 2.0 flow. Access tokens are encrypted and stored on our own servers. The account holder can revoke access at any time from their LinkedIn account settings.
Data obtained. Through these APIs we receive: the content and status of our own posts; comments and reactions made on our own posts (including the author's display name and public identifier as made visible by LinkedIn); and aggregated performance statistics for our posts and Pages (impressions, clicks, reactions, comments, shares, followers).
Use. This data is used exclusively to publish our content, reply to comments we receive, and analyze the performance of our editorial content. It is never used for advertising targeting, sales prospecting, lead-list building or resale, and is never combined with other sources to profile LinkedIn members.
Retention and deletion. Comment and reaction data is retained for no more than 12 months; aggregated statistics for no more than 24 months. We are able to securely delete all data obtained through LinkedIn's APIs upon request from LinkedIn or from an affected member, within 30 days.
Compliance with LinkedIn terms. Our use complies with LinkedIn's User Agreement and Privacy Policy. We do not store member profile data beyond what is required to display the comments we receive.
We use strictly necessary cookies (session, security, preferences). Where analytics tools are used, they are configured to anonymize IP addresses and are used only for aggregated statistics. You can disable cookies in your browser.
We rely on service providers that process data on our behalf under confidentiality obligations: web hosting in Canada (WHC), email services, and LinkedIn for the functions described in section 5. Some providers may process data outside Quebec; in such cases we perform the privacy impact assessment required by Law 25.
We keep your information for as long as necessary for the purposes described, then securely destroy or anonymize it, subject to our legal obligations (including tax obligations).
You may request access to your personal information, its correction or deletion, withdraw your consent, or request data portability by writing to contact@meritag.ca. We respond within 30 days. You may also file a complaint with the Commission d'accès à l'information du Québec.
We apply reasonable safeguards: encrypted communications (HTTPS), encrypted access tokens, strong authentication on administration systems, access control, logging and backups.
In the event of an incident presenting a risk of serious injury, we notify the Commission d'accès à l'information and the affected individuals as required by law, and we maintain an incident register.
We may update this policy. The update date appears at the top of the page. Significant changes are announced on the site.
4376790 Canada Inc. (IADATA / Meritag)
Sainte-Anne-des-Plaines, Québec, Canada, J5N 3T2
contact@meritag.ca