Effective date: [to be completed]
This is a template document and must be reviewed by qualified legal counsel before being used in production.
This Privacy Policy explains how SASLab ERP ("we", "us") collects, uses, discloses and protects personal information when you use our software-as-a-service platform. We are committed to handling personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Québec’s Act respecting the protection of personal information in the private sector (Law 25).
We collect information you provide directly, such as your name, business name, email address, login credentials and billing details. We also collect data you enter into the platform (customers, invoices, contracts, accounting records) and technical information generated automatically, including IP address, device and browser data, and usage logs.
We use personal information to provide and operate the service, authenticate users, process subscriptions and payments, deliver customer support, send service-related communications, ensure security, and meet legal and accounting obligations. We do not sell your personal information.
Your data is stored and processed in Canada on Google Cloud Platform, in the northamerica-northeast1 (Montréal) region. Backups and operational copies are maintained within Canada. Where limited processing must occur outside Canada, we apply contractual and technical safeguards consistent with applicable law.
We rely on a small number of trusted service providers to operate the platform, including Stripe for payment processing and Google Cloud for hosting. These processors are bound by contract to protect personal information and to use it only to provide services to us. Payment card details are handled directly by Stripe and are not stored on our servers.
Subject to applicable law, you have the right to access and review the personal information we hold about you, to request corrections, to request deletion, and to receive a portable copy of your information in a structured, commonly used format. To exercise these rights, contact our Privacy Officer using the details below.
We use strictly necessary cookies and similar technologies to keep you signed in, remember your language preference and secure your session. We do not use advertising cookies. You can control cookies through your browser settings, though disabling essential cookies may prevent the platform from functioning.
We retain personal information for as long as your account is active and as needed to provide the service, then for the period required to meet legal, tax and accounting obligations. When information is no longer required, we securely delete or anonymize it.
Questions, requests or complaints about privacy may be directed to our Privacy Officer at privacy@saslab.example (placeholder). We will respond within the timeframes required by applicable law.
We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email, and the effective date above will be updated. Continued use of the service after changes take effect constitutes acceptance of the revised policy.