Not a pledge.
A practice.
Canada Muse is built in Québec, French-first, under one of North America's strictest privacy laws. Canada has no federal AI statute in force today — the proposed one died on the order paper in January 2025 — so we hold ourselves to the voluntary federal code anyway, and to Québec's Law 25, which is very much in force. Every claim on this page maps to a mechanism you can check.
What we've put
our name to.
Montréal Declaration for Responsible AI
Ten principles for responsible AI, born at Université de Montréal in 2018. It is Québec's declaration — and the natural one for a Québec company. Below, all ten are mapped to what we actually run.
Canada's Voluntary Code of Conduct on Advanced Generative AI
The federal voluntary code (2023): accountability, safety, fairness and equity, transparency, human oversight, validity and robustness. We sign as a manager of systems built on frontier models.
Law 25 groundwork
Privacy-officer designation, confidentiality-incident register, privacy impact assessment. Underway now — and this page is dated, so each lands here when it is real, not before.
Each principle,
a mechanism.
The Montréal Declaration's ten principles, each paired with something you can verify in the product. Where the honest answer is modest, we give the modest answer.
(1) Inbound email that fails authentication (DMARC) or matches spam rules can be dropped before your assistant sees it. (2) Credit enforcement — currently switched off — can pause paid features when your balance reaches zero, until you top up. That's the whole list; if it grows, this page grows first.
What we don't do.
The easiest place to be responsible is in the claims you refuse to make.
Not as a policy — as architecture. Your workspace is its own database. There is nothing to opt out of, because there is nothing to opt into.
No analytics, no pixels and no advertising cookies until you accept the banner. Accept, and Google measures two things: whether an ad led to a sign-up (Google Ads) and how the site is visited (Google Analytics) — ad personalization off, no remarketing. Decline, and nothing loads; change your mind any time from the footer.
There is no advertising business here to feed. Ad measurement reaches Google only with your yes, and your workspace content never does.
Credits are prepaid. Auto-recharge exists — and it is off until you, personally, turn it on.
For people you already work with, it can act — that's the product. Anyone new hears from it only after your explicit yes.
Your data is stored in Canada (AWS ca-central-1). To answer you, your messages are processed by US model providers. Saying otherwise would be tidier — and false.
Law 25, in
plain words.
Write to privacy@museai.ca — it reaches our privacy officer — to access what we hold about you, correct it, delete it, receive a copy in a structured format, withdraw consent, or complain. We answer within 30 days.
Not satisfied with our answer? The Commission d'accès à l'information (Québec) hears complaints, and so does the Office of the Privacy Commissioner of Canada.
Dated, because a page that
never changes is decoration.
Site measurement added. Google Analytics now loads alongside the Google Ads tag — after your yes, never before. Everyone who had already accepted is asked again, because that yes covered ads only.
Tracking, corrected. The site now asks before loading a Google Ads measurement tag, so “zero trackers” and “zero cookies” came off this page the same day — replaced by what is true: nothing loads without your yes.
First publication. Position stated; both signatures marked “signing in progress”; the ten principles mapped to mechanisms; the two automated behaviours disclosed; rights and privacy-officer contact published.