Privacy Policy
1. Our commitment
We collect only the information necessary to operate the service.
We never sell your personal information.
We do not run any advertising based on your data.
2. Who is responsible
Calovex Softwares
For information about your own customers, you remain the party responsible for the processing. We act only as a service provider.
3. Information we collect
We may collect, among other things:
- your name;
- your email address;
- your password (stored in encrypted form);
- your business information;
- information about your customers;
- information about jobs;
- expenses;
- receipt photographs;
- quotes;
- invoices;
- payments;
- hours worked;
- uploaded documents;
- sign-in logs;
- IP addresses;
- device type;
- technical information necessary for security.
When your customer accepts a quote electronically, we record the date, the time, the IP address and the browser used, in order to establish proof of acceptance.
4. Why we use this information
We use this information only in order to:
- create your account;
- operate the app;
- read receipts automatically;
- send your emails;
- process payments;
- keep the service secure;
- answer your support requests.
5. Our providers
We rely on the following providers, among others:
- Supabase: database hosting, authentication and file storage (Canada, Montreal region).
- Anthropic: automatic reading of receipts using artificial intelligence (United States). Data sent through the API is not used to train Anthropic's models.
- Stripe: payment processing (United States). Bank card numbers never pass through our servers.
- Resend: sending emails (United States).
- Vercel: hosting the app and technical logs (United States).
- Sentry: technical error reports (United States), used only to diagnose faults.
6. Where your data is
Your database and your files, including receipt photographs, are hosted in Canada, in the Montreal region.
Some providers still process information in the United States: Anthropic reads receipt photographs, Resend sends the emails, Stripe handles payments, Vercel runs the app and Sentry receives error reports.
That information may therefore be subject to United States law, including access requests provided for by applicable legislation. The database being in Canada does not change that for those providers.
By using the service, you acknowledge this situation.
7. Automatic reading of receipts
When you photograph a receipt, the image is sent to Anthropic and read by an artificial intelligence model, which returns the vendor, the date, the amounts and the taxes.
Two models may look at the same photograph: a smaller one first, then a larger one when the first is not confident or its own figures do not add up.
Nothing is decided about you by this process. It fills in a form, and you review and correct every field before anything is saved.
Images sent through Anthropic's API are not used to train their models.
You can do without it simply by not using it: every field can be typed in by hand, and on some plans that is the only way.
8. Emails we send you
We send you the emails the service needs in order to work: confirming your address, resetting your password, a quote or an invoice you asked us to send, and notices about your account or your subscription.
You cannot unsubscribe from those and keep using the service, because they are the service.
We will only send you news, tips or offers if you have agreed to receive them, and every one of those carries an unsubscribe link that works.
Emails the app sends to your own customers are sent on your behalf. Under Canada's anti-spam legislation it is your responsibility to have the consent needed to contact them.
9. Retention
Your data is kept for as long as your account remains active.
After your account is closed, it is deleted within a maximum of thirty (30) days, except where the law requires longer retention.
10. Your rights
You may:
- access your data;
- correct it;
- export it in the formats the app offers, so you can take it elsewhere;
- request its deletion;
- withdraw a consent you have given, where the processing rests on that consent.
We will respond within a maximum of thirty (30) days.
If our answer does not satisfy you, you may complain to the Office of the Privacy Commissioner of Canada and, if you live in Quebec, to the Commission d'acces a l'information du Quebec.
11. Security
Communications are encrypted.
Each business is isolated from the others at the database level.
Financial information is accessible only to authorized owners and administrators.
Invited employees cannot view amounts, profits or invoices when those restrictions are enabled.
As no computer system is completely secure, we cannot guarantee absolute security.
In the event of a privacy incident presenting a real risk of significant harm, we will notify you and the competent authorities in accordance with applicable laws.
12. Cookies
We use only the cookies necessary to operate the service, in particular to:
- keep your session open;
- remember your language;
- keep certain essential settings of the app.
We do not use any advertising cookies or any cross-site tracking mechanism.
13. Children
The service is reserved for people aged 18 and over.
14. Changes
We may change this privacy policy.
When a significant change is made, we will inform you by email or in the app.