Privacy policy

Placeholder text, to be reviewed before public launch, particularly for compliance with Quebec’s Law 25 (Act respecting the protection of personal information in the private sector). Bracketed passages must be completed.

Person in charge of personal information

[Name and title], [email]. Send any questions or requests to this person.

What we collect

• Account: name, email address, password (stored with irreversible hashing) or Google identifier if you sign in with Google.
• Subscription: chosen plan, subscription status, invoice history. Credit card data is handled only by Stripe; we never have access to it.
• Licence: an anonymous device identifier, the date of the last licence check and the request’s IP address, to enforce the one-device-at-a-time rule.
• Technical logs: IP address and time of site sign-ins, kept for [90 days] for security.

Your clients, contracts and documents stay on your computer: we have no access to them. [To be updated when sync between computers becomes available.]

We use no advertising cookies and no analytics tools. The site only uses a session cookie, needed to keep you signed in.

Why

To create and manage your account, bill your subscription, give you access to the software, send account-related emails (declined payment, access suspended or restored) and protect the service against fraud. We never sell or rent your information.

Who we share it with

With providers who help us run the service, only for that purpose:

• Stripe (payments and taxes);
• Cloudflare (site hosting, database and installer files);
• [Email service] (automatic emails);
• Google, if you choose to sign in with Google.

Some of these providers may store information outside Quebec. [A privacy impact assessment must be completed before launch, as required by Law 25.]

How long

As long as your account exists. Invoices are kept for [6 years] for tax purposes. If you delete your account, your other information is erased within [30 days].

Your rights

You may ask to access, correct or delete your information, withdraw your consent or receive a copy of your data in a common format. Write to the person in charge above; we reply within 30 days. You may also file a complaint with the Commission d’accès à l’information du Québec.

Privacy incidents

If an incident presents a risk of serious harm, we will notify you and the Commission d’accès à l’information as soon as possible.