Privacy Policy

1. Our commitment

We collect only the information necessary to operate the service.

We never sell your personal information.

We do not run any advertising based on your data.

2. Who is responsible

Calovex Softwares

For information about your own customers, you remain the party responsible for the processing. We act only as a service provider.

3. Information we collect

We may collect, among other things:

  • your name;
  • your email address;
  • your password (stored in encrypted form);
  • your business information;
  • information about your customers;
  • information about jobs;
  • expenses;
  • receipt photographs;
  • quotes;
  • invoices;
  • payments;
  • hours worked;
  • uploaded documents;
  • sign-in logs;
  • IP addresses;
  • device type;
  • technical information necessary for security.

When your customer accepts a quote electronically, we record the date, the time, the IP address and the browser used, in order to establish proof of acceptance.

4. Why we use this information

We use this information only in order to:

  • create your account;
  • operate the app;
  • read receipts automatically;
  • send your emails;
  • process payments;
  • keep the service secure;
  • answer your support requests.

5. Our providers

We rely on the following providers, among others:

  • Supabase: database hosting, authentication and file storage (Canada, Montreal region).
  • Anthropic: automatic reading of receipts using artificial intelligence (United States). Data sent through the API is not used to train Anthropic's models.
  • Stripe: payment processing (United States). Bank card numbers never pass through our servers.
  • Resend: sending emails (United States).
  • Vercel: hosting the app and technical logs (United States).
  • Sentry: technical error reports (United States), used only to diagnose faults.

6. Where your data is

Your database and your files, including receipt photographs, are hosted in Canada, in the Montreal region.

Some providers still process information in the United States: Anthropic reads receipt photographs, Resend sends the emails, Stripe handles payments, Vercel runs the app and Sentry receives error reports.

That information may therefore be subject to United States law, including access requests provided for by applicable legislation. The database being in Canada does not change that for those providers.

By using the service, you acknowledge this situation.

7. Automatic reading of receipts

When you photograph a receipt, the image is sent to Anthropic and read by an artificial intelligence model, which returns the vendor, the date, the amounts and the taxes.

Two models may look at the same photograph: a smaller one first, then a larger one when the first is not confident or its own figures do not add up.

Nothing is decided about you by this process. It fills in a form, and you review and correct every field before anything is saved.

Images sent through Anthropic's API are not used to train their models.

You can do without it simply by not using it: every field can be typed in by hand, and on some plans that is the only way.

8. Emails we send you

We send you the emails the service needs in order to work: confirming your address, resetting your password, a quote or an invoice you asked us to send, and notices about your account or your subscription.

You cannot unsubscribe from those and keep using the service, because they are the service.

We will only send you news, tips or offers if you have agreed to receive them, and every one of those carries an unsubscribe link that works.

Emails the app sends to your own customers are sent on your behalf. Under Canada's anti-spam legislation it is your responsibility to have the consent needed to contact them.

9. Retention

Your data is kept for as long as your account remains active.

After your account is closed, it is deleted within a maximum of thirty (30) days, except where the law requires longer retention.

10. Your rights

You may:

  • access your data;
  • correct it;
  • export it in the formats the app offers, so you can take it elsewhere;
  • request its deletion;
  • withdraw a consent you have given, where the processing rests on that consent.

We will respond within a maximum of thirty (30) days.

If our answer does not satisfy you, you may complain to the Office of the Privacy Commissioner of Canada and, if you live in Quebec, to the Commission d'acces a l'information du Quebec.

11. Security

Communications are encrypted.

Each business is isolated from the others at the database level.

Financial information is accessible only to authorized owners and administrators.

Invited employees cannot view amounts, profits or invoices when those restrictions are enabled.

As no computer system is completely secure, we cannot guarantee absolute security.

In the event of a privacy incident presenting a real risk of significant harm, we will notify you and the competent authorities in accordance with applicable laws.

12. Cookies

We use only the cookies necessary to operate the service, in particular to:

  • keep your session open;
  • remember your language;
  • keep certain essential settings of the app.

We do not use any advertising cookies or any cross-site tracking mechanism.

13. Children

The service is reserved for people aged 18 and over.

14. Changes

We may change this privacy policy.

When a significant change is made, we will inform you by email or in the app.