Software made in Québec · Data hosted in Canada · Support from the Québec team

Privacy Policy

Privacy Policy

Last modified: 18th October 2026

  • Information
  • Information We Collect
  • Use of Information
  • Sharing Information
  • Data Retention
  • Reading by Artificial Intelligence
  • Data Security
  • Your Rights
  • Cookies and Similar Technologies
  • Policy Changes
  • Contact

Information

This Privacy Policy explains how InnoLogiciel Inc. (“we”, “us”, “our”) collects, uses, maintains, and protects the personal information of users (“you”, “your”) when you use our online invoicing, time tracking, and estimating software (the “Service”). By using the Service, you accept the practices described in this Policy.

Information we collect

We may collect the following information :

Account information: name, email address, password.

Billing information : customer names, addresses, invoice details, payment history.

Financial data : payment information processed by Stripe (we do not store your credit card numbers).

Technical data : IP addresses, connection information, browser type, operating system.

Communications : Messages sent to our support team.

Use of information

We use your data to:

To provide and manage the Service (invoice creation, time tracking, estimates).

  • To process your monthly payments via Stripe.
  • To improve the operation and security of the Service.
  • To respond to your support requests.
  • To comply with our legal and tax obligations.

Sharing of Information

We do not sell your personal information. We may share certain data only in the following circumstances :

Stripe : secure payment processing.

  • OVH : secure hosting of the Service.
  • CloudFlare : Security
  • Google Analytics : anonymized statistics
  • Third-party technical service providers : only if necessary for maintenance, backup, or security.
  • Legal obligations : if required by law, government authority, or court.

Data Retention

  • We retain your personal data for as long as necessary to provide the Service and comply with our legal obligations.

Account deletion and anonymization. You may request the deletion of your account at any time from your profile. A 30-day grace period applies, during which you can cancel the request by signing in. At the end of this period, your personal information (name, email address, login credentials, registered devices) is irreversibly anonymized, in accordance with section 23 of Quebec’s Law 25.

Portability. Before anonymization, you may export a copy of your personal information and the books of the companies for which you are the sole administrator (Law 25, s. 27).

Tax retention. Certain anonymized accounting data is retained for seven (7) years in accordance with federal and Quebec tax obligations (Canada Revenue Agency, ITA 230(4); Revenu Québec, TAA 35.1), then permanently purged. Company books (invoices, receipts, MEV transactions) belong to the relevant business and are not affected by the deletion of an individual account.

Free-trial abuse prevention. When your account is anonymized, we retain a cryptographic digest (HMAC) of your email address for twenty-four (24) months, for the sole purpose of preventing free-trial abuse. This digest cannot be reversed to reveal your address and is not linked to any other information; it is automatically deleted at the end of that period.

Backups. Anonymized data disappears from our backup copies within a maximum of thirty-five (35) days.

Reading by Artificial Intelligence

When you ask InnoBooks to read a document or a photo — a receipt, an invoice, a product label, a shopping list, a flyer, a price list, a document to transcribe — or to write a description or a translation, the file or the text is sent to Claude, Anthropic’s artificial intelligence service. Removing the background of a product photo, straightening a photo and reading a product video go through Gemini, Google’s artificial intelligence service. Both services process the data outside Québec and Canada, only to give you the result, which you review before saving it.

InnoBooks keeps what you save: the document attached to the expense, the fields and the item sheets you accepted. A product video is deleted when you close the review, or within two days if it is abandoned; a shopping-list photo, a flyer or a price list is read and then discarded.

Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or disclosure. However, no method of transmission over the Internet is completely secure. You accept this risk by using the Service.

Your Rights

Depending on the applicable jurisdiction (e.g. Quebec, PIPEDA, GDPR in Europe), you may have the following rights:

  • Access your personal information.
  • Correct inaccurate information.
  • Request deletion of your data.
  • Limit or object to certain processing.
  • Request data portability.

All inquiries should be sent to : [email protected]. We will respond within a reasonable timeframe, in accordance with applicable laws.

Cookies and Similar Technologies

We may use cookies or similar technologies to :

Keep your session active.

Improve the user experience.

Analyze Service usage. You can configure your browser to refuse cookies, but some functionality may be limited.

Cookieless audience measurement. The innobooks.net website and the app.innobooks.net app count their visits with Matomo, a tool we host ourselves in Canada (Web Hosting Canada, Montréal): this data goes through no third party. Matomo sets no cookie and keeps no identifier on your device; your IP address is truncated (its last two bytes erased) before it is recorded, so it can neither identify you nor recognize you from one visit to the next. What it counts: pages viewed, where visits come from, country, type of device and browser, clicks towards signing up and, in the app, sign-ups and sign-ins. It receives neither your name, nor your email, nor the content of your account: page addresses reach it without their identifiers. These figures are used only for overall statistics, and the raw data is deleted after 14 months. Because this measurement neither identifies nor follows you, it does not go through the cookie banner.

A contact form protected from robots. Our contact form uses Cloudflare Turnstile, a service of Cloudflare, Inc. (United States), to keep out robots that send spam and phishing. While you fill in the form, Turnstile receives technical signals from your browser (IP address, browser type, connection characteristics). They are used only to check that a person is writing and to improve Cloudflare's robot detection, never to identify, profile or target you. See the Turnstile privacy addendum.

Where your visit came from. When you follow a link to sign up for one of our products, or to Google Play and the App Store, we add where your visit came from: the site that brought you or the campaign, and the first page you saw. It is kept for the length of the visit in your browser (session storage "origine.visite"), with no cookie and no identifier. The product may keep it with your sign-up; its own policy says so.

When you create your InnoBooks account — by email, Google or Apple — the app keeps with it where your visit came from: the site that brought you or the campaign, and the first page you saw, noted for at most 30 days in your browser before sign-up (local storage "origine.inscription"), with no cookie and no identifier. This is used only to know how our customers find us, is seen only by the InnoLogiciel team, and is deleted with your account.

Changes to the Policy

We may update this Policy at any time. The current version will always be available on our website. Any significant changes will be communicated to users.

Contact

For any questions or requests regarding this Policy, you can write to us at: [email protected]