Privacy Policy

1. Introduction

InnoLogiciel Inc. ("we", "our", "us") operates the SOS Bouffe mobile application and the sosbouffe.net website (collectively, the "Service"). This Privacy Policy describes how we collect, use, store and protect your personal information in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Privacy Officer

3. Information We Collect

3.1 Information You Provide

• Account: email address, first name, last name, password (encrypted)
• Orders: customer name, phone number, delivery address, order notes
• Third-party authentication: if you use Google to sign in, we receive your email address, first name and last name via Google Sign-In

3.2 Information Collected Automatically

• Location data: approximate geographic location, used solely for Stripe Terminal payment processing
• Device data: device type, operating system, preferred language
• Bluetooth data: Stripe payment terminal connection information (merchants only)
• Website usage data: pages visited, visit duration (via Google Analytics)

3.3 Payment Data

Credit and debit card information is processed exclusively by Stripe. We never store your full card numbers. We only retain a Stripe transaction identifier, card brand and last 4 digits for receipt purposes.

3.4 Biometric Data

If you enable passkey authentication, your biometric data (fingerprint, facial recognition) is processed locally by your device's operating system. We never have access to your raw biometric data.

4. Use of Information

We use your information to:

• Create and manage your user account
• Process and deliver your orders
• Process payments securely
• Calculate applicable taxes based on your location
• Send you receipts and order confirmations
• Provide technical support
• Improve our Service and user experience
• Comply with our legal and tax obligations

5. Information Sharing

We never sell your personal information. We share it only with:

6. Storage and Security

• Your data is hosted in Canada
• Authentication tokens are stored in encrypted secure storage on your device (Android Keystore / iOS Keychain)
• All communications use HTTPS (TLS) protocol
• Passwords are hashed and never stored in plain text
• Payment data complies with PCI DSS standards via Stripe

7. Data Retention

We retain your personal information as long as your account is active or as necessary to provide the Service. Transaction data is retained in compliance with Quebec tax requirements (minimum 6 years). You may request account deletion at any time.

8. Your Rights

Under Quebec and Canadian law, you have the right to:

• Access the personal information we hold about you
• Rectify inaccurate or incomplete information
• Delete your personal information (subject to legal retention obligations)
• Withdraw consent to the processing of your data
• Data portability in a structured technological format
• Be notified of any privacy incident concerning you

To exercise these rights, contact us at fredericcoutu@innologiciel.com. We will respond within 30 days.

9. Cookies

Our website uses Google Analytics which places cookies to analyze site usage. You can disable cookies in your browser settings. The mobile application does not use cookies.

10. Changes

We may update this policy periodically. The current version is always available on this page with its last updated date. Continued use of the Service after a change constitutes your acceptance of the revised policy.

11. Complaints

If you believe your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec (CAI) at www.cai.gouv.qc.ca.