Your information deserves to be protected.
Person responsible for the protection of personal information
Privacy Officer — ChauffeurClair
This person receives questions, access or correction requests, and complaints.
Communication goes through our secure form to protect the address from unwanted messages.
Information processed
The platform processes account contact information, communication preferences, uploaded tax documents and receipts, trip, income, expense, mileage and tax information, and technical logs required for security.
Use and consent
- Provide the requested classification, calculations, and reports;
- authenticate the account, prevent abuse, and protect the platform;
- send confirmations and communications required for the service;
- send marketing only after an affirmative choice, which can be withdrawn in the profile.
Service providers and processing outside Québec
The service is hosted in Canada and uses specialized providers for hosting, encryption-key protection, email delivery and, with consent, marketing communications. Stripe processes information required for payment and billing; ChauffeurClair neither receives nor stores full card numbers. Some providers may process information outside Québec; ChauffeurClair remains responsible for information entrusted to them and limits transmitted data to what is necessary.
Protection
Documents and databases are encrypted at rest in production. Administrative access requires two-factor protection. Communications use HTTPS, and private pages instruct the browser not to cache them.
Public-site measurement
ChauffeurClair locally measures visits to its public pages and a few general actions, such as creating an account or successfully sending the contact form. The IP address is never stored in plain text for this local measurement: it is transformed into a pseudonymous fingerprint used only for aggregate statistics. Visits, their duration, and their entry page are estimated without retaining an identity, email address, form content, or tax information. The generic page name, general source, device category, protected fingerprint, and time are retained for no more than 90 days. Do Not Track and Global Privacy Control signals are honoured by this local measurement.
Google Analytics is also offered as optional audience measurement. Its script is not loaded and no data is sent to it before you consent. If you consent, Google may place analytics cookies and process technical information such as pages viewed, device type, IP address, and visit time, including outside Québec. Advertising features and ad personalization are disabled. No document, tax amount, form content, or email address is intentionally sent to Google Analytics. You can decline or change your choice at any time through “Manage cookies” in the footer.
Help-centre questions
Questions entered in the help centre may be retained temporarily, for no more than 90 days, to improve the answers offered. ChauffeurClair automatically removes certain common contact details and asks that you not enter personal, tax, or financial information.
Voluntary receipt report
When receipt analysis is incorrect, you may voluntarily submit a description of the problem, the text extracted by automated reading, the values initially detected, and the values you corrected. The original document is shared with the ChauffeurClair team only if you expressly select that option. The copy of the original document is deleted as soon as the report is processed. Technical information associated with the report remains protected, is used only to improve recognition, and is retained for no more than 30 days before deletion.
Retention and destruction
Information is retained while the account is in use and for as long as necessary to provide the service or comply with an applicable obligation. Deleting the account destroys active data and removes the marketing contact. Encrypted copies may remain temporarily in backups until their scheduled rotation, normally 30 days, and are then destroyed.
Access, correction, and withdrawal
You can correct several pieces of information in your profile, withdraw marketing consent, and delete your account. For an access or correction request or a complaint, use the contact form. Identity verification may be requested before information is disclosed or changed.
Incidents
Every privacy incident is assessed, contained, and documented. When required by law, affected individuals and the Commission d’accès à l’information are notified. Appropriate corrective measures are then applied.