Privacy policy

Compliant with Quebec's Act respecting the protection of personal information in the private sector (Bill 25).

1. Who we are

L'Aube Étoilée inc. · NEQ 1178747052 · 8877 rue Lajeunesse, app. 110, Montreal (Quebec) H2M 1R8 · nicolas@aubemail.com. Data protection officer: Nicolas Breidi.

2. Data we collect

Quote request: name, email, phone, organization, mandate description, location, requested date, budget range.
On signature: signer name, date, time and IP address (legal proof).
On payment: no card number is stored on our servers. Stripe handles the transaction and returns only a payment identifier and amount.

3. Why we use them

Execute the mandate (quote, contract, delivery)
Fulfill legal and fiscal obligations (Revenu Québec, 7-year retention)
Contact you about your mission (by email only)

4. Retention period

Mandate duration + 7 years for fiscal and accounting purposes (Canadian/Quebec legal obligations). Beyond that, data is deleted unless you request early erasure after fiscal obligation expiry.

5. Who we share with

Stripe (United States, GDPR/PCI-DSS compliant) for card payment processing
No other third party. No resale, no advertising.

6. Your rights (Bill 25)

Access: get a copy of all data about you
Rectification: correct inaccurate data
Erasure: after fiscal obligation expires
Portability: receive your data in a structured format
Complaint: Quebec Access to Information Commission (cai.gouv.qc.ca)

To exercise these rights, email nicolas@aubemail.com. Response within 30 days.

7. Cookies

No analytics or advertising cookies. Only technical cookies: Flask session (anonymous, expires on browser close) and language cookie (FR/EN, kept 1 year).

8. Security

HTTPS connection (TLS 1.2+), hashed passwords (PBKDF2 or bcrypt), restricted admin access, daily encrypted backups, sovereign hosting.

Last updated: May 25, 2026.