Privacy policy
Last updated: October 26, 2026
Ardia is a platform operated by DataSmart Technology (Montréal, Québec). Schools, mosques and other institutions use it to run their website, courses, registrations and payments. This policy explains what Ardia collects, why, and how you can exercise your rights under Québec's Law 25 and Canada's PIPEDA.
Ardia and the schools that use it
Each school decides what information it collects about its members, families and students, and is responsible for it. Ardia keeps and processes that information on the school's behalf and on its instructions only. The school's own privacy policy, on its site, explains its practices.
This policy covers the ardia.academy site and what Ardia itself does for every school.
Person in charge of personal information
The person in charge of the protection of personal information at DataSmart Technology can be reached at admin@datasmart.agency.
What we collect
On ardia.academy: what you enter to ask for a demo (name, work email, institution, message) or to create a school (your name, email and the school's name).
On a school's site, for that school: your account (name, email) and what the school's own forms ask for, such as registrations, donations or course enrolments.
For security: technical logs (IP address, browser, time of the request), kept for a short period. Visit statistics are counted without advertising cookies.
Signing in with Google or Microsoft
When a school turns it on, you can sign in with your Google or Microsoft account. Ardia then receives only your email address, your name and the confirmation that your email address is verified (the openid, email and profile permissions).
We use them only to find the account your school already gave you and to sign you in. Ardia does not create an account this way, and never reads your contacts, mail, files or calendar.
We do not sell this information, share it with anyone or use it for advertising. Ardia's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and deletion: your email address and name are kept only in the account your school opened for you, protected as described under Security, and stored by the providers listed below on our behalf only. Ardia keeps no Google or Microsoft password or access token after you sign in. They stay as long as that account exists; to unlink Google or Microsoft or to have the account deleted, ask your school or write to admin@datasmart.agency, and it is done within 30 days. You can also remove Ardia's access at any time from your Google or Microsoft account settings.
Providers and where information is stored
Ardia relies on Vercel (hosting), Supabase (database, in the United States), Resend (email) and Stripe (payments). Card numbers go straight to Stripe and never reach Ardia.
Some of this information is therefore stored outside Québec and Canada. Before relying on a provider, we assess the protection it offers and bind it by contract to use the information only to provide its service, as Law 25 requires.
Security
Information travels encrypted. Each school's data is kept separate: one school can never see another school's information. Administrators sign in with a second step, and academic and financial changes are recorded in a log that cannot be altered.
How long we keep information
As long as the school uses Ardia, under the school's own rules. When a school leaves, its information is returned to it on request, then deleted within 90 days, except what the law requires us to keep (for example records of tax receipts) and the change log mentioned above.
Security logs are kept for a short period, then deleted.
Your rights
You can ask to see the information about you, to correct it, to have it deleted, to receive it in a usable format, or withdraw your consent. For information a school holds about you, write to that school first; Ardia helps it answer. You can also write to us.
If you are not satisfied with our answer, you can complain to the Commission d'accès à l'information du Québec.
Children
Information about children is entered by their school or their parents, for their schooling only. Ardia never uses it for marketing.
Changes
If this policy changes, the new version is posted on this page with its date. Important changes are also announced to the schools that use Ardia.