Privacy Policy

1. Person Responsible for Personal Information

The person responsible for the protection of personal information at F.G. Web Solutions is the owner of the company. For any questions, requests, or complaints regarding your personal information, you may contact us at:

Email: info@fgwebsolutions.com

2. Personal Information We Collect

We collect the following categories of personal information:

Account information: name, email address, password (encrypted), and authentication data (including passkeys).

Billing information: payment method details processed through Stripe. We do not store your full credit card number on our servers.

Financial data: invoices, expenses, tax records, cash flow data, and other financial information you enter or sync through QuickBooks Online.

Technical data: IP address, browser type, device information, pages visited, and session data collected automatically when you use our platform.

Communications: messages sent through our contact form (name, email, message content).

3. Purposes of Collection

We collect and use your personal information for the following purposes:

Providing and maintaining our financial management platform, including invoicing, expense tracking, tax calculation, and reporting.

Processing payments and managing your subscription through Stripe.

Synchronizing your financial data with QuickBooks Online when you enable this integration.

Authenticating your identity and securing your account.

Communicating with you about your account, responding to support requests, and sending service-related notifications.

Improving our platform, diagnosing technical issues, and ensuring security.

Complying with legal obligations, including Canadian tax regulations.

4. Cookies and Similar Technologies

We use only essential cookies required for the proper functioning of our platform:

Session cookie: maintains your authenticated session.

Locale cookie: stores your language preference (English or French).

Theme cookie: stores your display preference (light or dark mode).

Cloudflare Turnstile: used during sign-in and sign-up to verify that you are a human user. This is a security measure, not a tracking tool.

We do not use any analytics, advertising, or third-party tracking cookies.

5. Sharing with Third Parties

We share your personal information only with the following service providers, strictly as necessary to deliver our services:

Stripe (stripe.com): payment processing. Stripe acts as an independent data controller for payment data. See Stripe's privacy policy at stripe.com/privacy.

Intuit QuickBooks Online: financial data synchronization, only when you explicitly enable this integration.

Hosting provider: our platform is hosted on infrastructure that may process your data in Canada or the United States.

We do not sell, rent, or trade your personal information to any third party.

6. Data Transfers Outside Quebec

Some of our service providers may process your data outside of Quebec or Canada. When this occurs, we ensure that the receiving jurisdiction provides adequate protection for your personal information, or we implement appropriate contractual safeguards in accordance with Law 25.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you close your account, we will delete or anonymize your personal information within 90 days, unless we are required by law to retain it for a longer period (e.g., tax records, which may need to be retained for up to 7 years under Canadian tax law).

Contact form messages are retained for up to 24 months.

8. Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit (TLS/HTTPS) and passwords at rest (hashing).

Passkey (WebAuthn) authentication support for enhanced account security.

Workspace isolation ensuring that each user's data is logically separated.

Role-based access controls and audit trails.

No security measure is infallible. If you become aware of any unauthorized access to your account, please contact us immediately.

9. Your Rights

Under Law 25 and PIPEDA, you have the following rights regarding your personal information:

Right of access: you may request a copy of the personal information we hold about you.

Right of rectification: you may request that we correct inaccurate or incomplete information.

Right of deletion: you may request that we delete your personal information, subject to legal retention obligations.

Right to data portability: you may request your data in a commonly used, structured format.

Right to withdraw consent: you may withdraw your consent to the processing of your personal information at any time, which may result in the termination of your access to our services.

To exercise any of these rights, contact us at info@fgwebsolutions.com. We will respond within 30 days.

10. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through a notice on our platform at least 30 days before the changes take effect. Your continued use of our services after the effective date constitutes your acceptance of the updated policy.

11. Complaints

If you are not satisfied with our response to your request or believe that we are not processing your personal information in accordance with applicable law, you have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI):

Website: cai.gouv.qc.ca

You may also file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.