Gestion de portes

1. Who we are

Gestion de portes is a software service (SaaS) for rental property management operated by Canari prospective S.A. (CPSA)("we", "our"), a company established in Québec, Canada.

For any question relating to the protection of your personal information, you may contact our privacy officer at confidentialite@gestiondeportes.ca.

2. Information collected

Information you provide us

First name, last name, and email address (account creation)
Information about your buildings and units
Information about your tenants (name, email, phone)
Financial data related to your property portfolio (rent, expenses, mortgages)

Information collected automatically

IP address and browser type (security logs)
Pages visited and actions taken in the application (usage analytics)
Billing data transmitted to Stripe (we do not store your card numbers)

3. Purposes of collection

We use your information to:

Provide and improve the Gestion de portes service
Manage your subscription and billing
Send you notifications related to your account (deadlines, alerts)
Ensure platform security and prevent fraud
Comply with our legal and accounting obligations

We do not sell your personal information to third parties and do not use it for advertising purposes.

4. Data hosting

Your data is hosted on servers operated by OVH Canada, physically located in Beauharnois, Québec. No data is transferred outside the province.

5. Sharing of information

We share your information only with:

Stripe Inc. — payment processing (PCI DSS Level 1 certified)
OVH Canada — infrastructure hosting
Resend Inc. — sending transactional emails
Government authorities, only if required by law

6. Retention period

Active account data: retained for the duration of the subscription
After account closure: data retained for 30 days (export available), then deleted
Billing data: retained for 7 years in accordance with Québec tax law
Security logs: retained for 90 days

7. Security

We implement the following measures to protect your information:

Encryption in transit (HTTPS/TLS 1.3 required)
Encryption at rest for sensitive data (income) with pgcrypto/AES-256
Two-factor authentication (MFA) available and mandatory for Pro accounts
Strict data isolation between clients (PostgreSQL Row Level Security)
Access to production data limited to authorized personnel

8. Your rights (Law 25)

In accordance with An Act to modernize legislative provisions as regards the protection of personal information (Law 25), you have the right:

Of access — to obtain a copy of the information we hold about you
Of rectification — to correct inaccurate information
Of erasure (right to be forgotten) — to request the deletion of your information, subject to our legal retention obligations
Of portability — to receive your data in a structured, machine-readable format
To withdraw your consent — at any time, for processing based on consent

To exercise these rights, write to confidentialite@gestiondeportes.ca. We will respond within 30 days.

9. Breach notification

In the event of a confidentiality incident presenting a serious risk of harm, we will notify the Commission d'accès à l'information (CAI) and the affected individuals within the timeframes prescribed by Law 25.

10. Cookies

We use session cookies strictly necessary for authentication to function. We do not use advertising or profiling cookies. Usage statistics are collected via Plausible Analytics, a privacy-friendly tool that does not set any cookies and does not identify users.

11. Changes

We may modify this policy at any time. In the event of a substantial change, we will notify you by email at least 30 days before it takes effect. The update date is shown at the top of this page.

12. Contact us

Privacy Officer
Canari prospective S.A. (CPSA) — Gestion de portes
confidentialite@gestiondeportes.ca

If you believe your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec.

Privacy Policy