Privacy Policy

1. Personal Information Protection Officer

AlloPresta's Personal Information Protection Officer is Franck Martial Nemadeu, founder, reachable at info@allopresta.ca.

2. Information Collected

• Name, first name, email address
• Phone number (if provided)
• Address (for providers)
• Profile and portfolio photos
• Booking and transaction history
• Payment data (managed by Stripe — AlloPresta never stores banking data)
• IP address and browsing data

3. Purposes of Collection

• Account creation and management
• Payment processing via Stripe
• Sending notifications and transactional emails via Resend
• Improving the platform
• Legal compliance

4. Retention Period

• Account data: account lifetime + 3 years after deletion
• Transaction data: 7 years (Canadian tax obligation)
• Security logs: 90 days

5. User Rights

In accordance with Law 25, every user can:

• Access their personal information
• Correct their information
• Delete their account and data
• Withdraw their consent
• File a complaint with the Commission d'accès à l'information (CAI)

Contact to exercise these rights: info@allopresta.ca

6. Privacy Incident

In the event of a data leak or unauthorized access, AlloPresta commits to notifying affected users and the Commission d'accès à l'information within 72 hours.

7. Transfer Outside Quebec

Some data is processed by third parties outside Quebec:

• Stripe (United States) — payment processing
• Supabase (United States) — data storage
• Resend (United States) — email delivery
• Vercel (United States) — hosting

These transfers are governed by appropriate protection measures.

8. Cookies

AlloPresta only uses cookies essential to the platform's operation. No advertising or third-party tracking cookies are used.

9. Changes

Any material change to this policy will be communicated to you by email 30 days before it takes effect.