Privacy policy

Who is responsible

Huard & Co is operated by Stonetab, 3510, boulevard Saint-Laurent, Montréal (Québec), Canada. For any question about your personal information, write to [email protected] or by mail at that address.

Only the people who run the service can access its systems, under a confidentiality undertaking. The person in charge approves our practices and handles complaints.

What we collect and why

Without an account, your answers and calculations stay in your browser.

• Account: your email, language and plan tier, to sign you in, manage your purchases and send your receipts and reminders.
• Plan: the household information you enter (and your client files in the Advisor workspace), to keep and sync it. It is encrypted with a key unique to your account or, as an option, end to end.
• Purchases: Stripe receives your payment details. We receive the confirmation, your email, the product and the amount, and keep the version of the terms you accepted.
• Email reminders and follow-ups (optional): your email, what you chose to receive and the date you consented.
• Continue on another device (optional): a copy of your plan encrypted in your browser, which we cannot read, deleted once it is opened or after 24 hours at most.
• Security: a log of sign-ins and of access to your data (with a non-reversible fingerprint of the IP address) and the server’s technical logs.

Cookies and ad measurement

A necessary session cookie keeps you signed in. Your browser also keeps your plan and preferences.

Only with your consent (off by default), Meta’s pixel and its cookies measure our ads on the public pages. Meta then receives the pages visited, your IP address and browser, its click and browser identifiers, the fact that you finished the free plan and the amount and type of a purchase, never your plan’s data. To withdraw your consent: the “Cookies” link at the bottom of the public pages.

Service providers and transfers outside Québec

Our providers, bound by contract, use your information only to provide their service to us. Those outside Québec are subject to their country’s laws, which may let authorities access it.

• Servers: Fly.io (Toronto). Database: Supabase (Montréal). Encrypted backups: Amazon Web Services (Montréal).
• Email delivery: Resend (United States).
• Payments: Stripe (United States and Ireland).
• Website delivery: Cloudflare (global network; IP address and page requested).
• Ad measurement, if you accept it: Meta (United States and elsewhere).

How long we keep it

• Account and plan: as long as the account exists. When you delete it, they are erased at once, and from backups within 90 days.
• Payment records (without your email once the account is deleted): 6 years, as tax laws require.
• Security log: 12 months. Server logs: 30 days.

Your rights and complaints

You can access your information, have it corrected or deleted, get a copy in a common format and withdraw your consent. Your account lets you download or delete everything yourself.

For any other request or a complaint: [email protected]. We reply in writing within 30 days. You can also contact the Commission d’accès à l’information du Québec (cai.gouv.qc.ca), the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your province’s commissioner.

Changes

Any change is published on this page, with its date.