Privacy
Privacy policy
This policy explains how SoftFactory (“we”) handles the personal information of people who visit softfactory.ca or write to us. It applies under Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union’s General Data Protection Regulation (GDPR) and U.S. state laws such as California’s CCPA/CPRA, where they apply.
Each of our solutions (for example TektonAI) has its own website and its own policy. This page covers softfactory.ca only. This policy is also available in French; if the two versions differ, the French version prevails.
1. Person in charge of the protection of personal information
SoftFactory (9487-1134 Québec inc.) is responsible for the information described here. For any question, access request or complaint, write to:
Person in charge of the protection of personal information
9487-1134 Québec inc. (SoftFactory), Quebec, Canada
Email: info@softfactory.ca
2. Information we collect
The site has no forms and no accounts. We only collect:
- What you write to us. If you send us an email (for example with the “Submit a problem” button), we receive your email address, your name if it appears, and the content of your message.
- The host’s technical logs. Our host, Vercel, processes the IP address, browser type, requested page and time of each request to deliver the site and protect it against abuse.
- Audience measurement, which you can reject. OpenPanel, a measurement tool hosted on our servers in Canada, counts page views, the referring page, the country and city derived from the IP address, device type and browser. It recognizes a visit by an identifier computed from the request, which changes every day. This tool sets no cookies and builds no profile. It is on by default: you can reject it in one click (section 4).
We do not sell any personal information. We do not rent or share it for targeted advertising. We make no decision based exclusively on automated processing.
3. Why we use it
| Purpose | Information | Legal basis (GDPR) |
|---|---|---|
| Reply to your message and look into the problem you submitted | Email, name, message content | Pre-contractual steps and legitimate interest |
| Deliver and secure the site | Technical logs | Legitimate interest |
| Learn which pages are read to improve the site | Audience measurement statistics | Legitimate interest (you can reject it) |
We do not use this information for any other purpose without your consent, unless the law allows or requires it.
4. Cookies and similar technologies
On your first visit, a banner tells you about audience measurement, which is on by default. Rejecting it takes one click, in that banner or later with “Manage cookies”. If your browser sends the Global Privacy Control signal, we treat it as a refusal.
| Name | Category | Role | Duration |
|---|---|---|---|
sf-temoins (local storage) | Necessary | Keeps your privacy choice in your browser. It is never transmitted. | 12 months |
sf-theme (local storage) | Necessary | Keeps the light or dark theme you chose. It is never transmitted. | Until you change the theme |
| OpenPanel | Audience measurement (on by default, can be rejected) | Counts page views. Sets no cookies. | 365 days, then archived by year, deleted 5 years after archiving |
After 12 months, the banner asks for your choice again. You can change it at any time:
Fonts are hosted on our own site. No resource is loaded from Google or any other third party.
5. Disclosure and hosting outside Quebec
We entrust some processing to providers who act on our behalf and follow our instructions:
- Vercel Inc. (United States): site hosting and technical logs.
- OVHcloud (servers in Beauharnois, Quebec): hosting of our audience measurement tool.
- Cloudflare, Inc. (United States): protection and routing of requests to our audience measurement tool.
- Google LLC (United States), through Google Workspace: receiving and storing emails.
This information may therefore be processed outside Quebec and Canada. Before disclosing it, we assess whether it will receive adequate protection there, as required by section 17 of the Quebec Act, and we govern it by contract. For people in the European Union, transfers to the United States rely on the European Commission’s standard contractual clauses or on the EU–U.S. Data Privacy Framework, depending on the provider.
We may also disclose information when the law requires it, for example at the request of a competent authority.
6. Retention
We keep your emails for as long as we need to reply and follow up on your request. We then destroy them securely or anonymize them, unless the law requires us to keep them longer. Technical logs are kept by Vercel according to its own retention periods. Audience statistics are kept 365 days in OpenPanel, then archived by year on our servers in Canada and deleted 5 years after archiving.
7. Security
The site is served over HTTPS only. Access to emails and management tools is limited to team members who need it and protected by authentication. If a confidentiality incident presents a risk of serious injury, we notify the Commission d’accès à l’information and the people affected, and we record it in our incident register.
8. Your rights
Depending on the law that applies to you, you can:
- find out whether we hold information about you and get a copy, including in a structured, commonly used technological format;
- have inaccurate or incomplete information corrected;
- withdraw your consent at any time, without affecting what was done before;
- ask for your information to be deleted, or for its dissemination to stop;
- object to processing or ask for it to be restricted (GDPR);
- know which categories of information we collect and opt out of their sale or sharing (CCPA/CPRA). We do not sell or share information.
To exercise a right, write to the person in charge (section 1). We may verify your identity before replying. We reply within 30 days, free of charge. Exercising a right never leads to discrimination.
If you are not satisfied with our reply, you can file a complaint with the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada or, if you are in the European Union, your country’s data protection authority.
9. Minors
The site is intended for businesses. We do not knowingly collect information about people under 14.
10. Changes
We publish any new version of this policy on this page, with its effective date. If a change affects a cookie category, the banner asks for your choice again.
11. Legal notice
Site publisher: 9487-1134 Québec inc., which operates SoftFactory (Software Factory Holding), Quebec, Canada. Email: info@softfactory.ca.
Host: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States.
The names SoftFactory, TektonAI and Mensor, the logos and the content of the site belong to 9487-1134 Québec inc. Any reproduction without written permission is prohibited.