Privacy Policy

1Who we are

Mon Déneigeur is a snow route management platform designed for snow removal companies in Quebec. It helps manage operators, clients, routes and service runs, and sends automatic notifications to clients during each service visit.

The application and associated services are developed and operated by Plomberie RJ Léveillée Inc., headquartered in Baie-Saint-Paul, Quebec, Canada.

2Data collected

2.1 — Account information

• Email address
• Full name
• Phone number
• Business name and billing information

2.2 — Operational data

• First and last name of operators
• Client names, addresses and phone numbers (entered by the manager)
• Snow route definitions (list of addresses per route)
• Service run history (date, start/end time, operator, route)

2.3 — Location data

• GPS position of the operator during active snow removal runs

2.4 — Photos and media

• Service proof photos taken via the application (with your explicit consent)

2.5 — Technical data

• Session identifiers and authentication tokens
• Device type, operating system version
• Anonymized error logs for debugging purposes

3Purposes of processing

We use your data exclusively to:

• Provide the service — route, operator and client management
• Record service visits — timestamping and GPS tracking of snow removal runs
• Notify clients — automatic SMS notifications during each visit (via Twilio)
• Authentication and security — verify your identity and protect your account
• Billing — subscription and payment management (via Stripe)
• Service improvement — bug fixes and performance optimization
• Legal compliance — meeting applicable legal obligations in Quebec

4GPS geolocation

Mon Déneigeur accesses the operator's GPS position during active snow removal runs in order to record completed service visits and enable real-time route tracking.

• Location is used during active runs only — the app does not track your position when no run is in progress.
• GPS coordinates are recorded with each run and accessible to the company manager.
• Accuracy may vary depending on the device and GPS signal availability.
• You can revoke the location permission in your device settings, but this will disable service tracking.

5Service photos

The application may access your camera to take service proof photos.

• Camera access is requested only when you initiate a photo.
• Photos are securely stored on our servers (Supabase) and linked to the relevant run.
• Only authorized members of your company (managers and designated operators) can view the photos for their account.
• You can deny camera permission in your device settings.
• The application never accesses your microphone.
• Proof photos are retained for 3 years, then permanently deleted.

6Data sharing

6.1 — Within your organization

Operator data (runs, routes) is accessible to your company account manager.

Support access:at the subscriber's request or to resolve a technical issue, the Mon Déneigeur administrator may access the subscriber's account. Each access is logged (admin_impersonations).

6.2 — Client notifications

Client phone numbers are shared with Twilio (twilio.com) solely for the purpose of sending service notification SMS messages. No other client data is shared with Twilio.

6.3 — Service providers

We use the following providers, bound by confidentiality obligations:

• Supabase (supabase.com) — database and authentication — Canada (Montreal, AWS ca-central-1)
• Vercel (vercel.com) — website and API hosting — United States
• Stripe (stripe.com) — payment processing and subscription management — United States
• Twilio (twilio.com) — SMS notifications to clients — United States
• Resend (resend.com) — transactional email delivery — United States
• Google (maps.googleapis.com) — Street View photos in the operator portal — United States
• Meta (Facebook) (facebook.com) — Meta Pixel, advertising conversion measurement (loaded only after your consent) — United States
• Expo / EAS (expo.dev) — mobile application distribution — United States
• Environment and Climate Change Canada (geo.weather.gc.ca) — precipitation radar data for the GPS map weather layer — Canada

Before entrusting information to a provider located outside Quebec, Mon Déneigeur evaluates that the information benefits from adequate protection, in particular with regard to the contractual commitments of those providers.

6.4 — Legal obligations

We may disclose information if required by law (e.g., court order, regulatory obligation in Quebec or Canada).

We do not share your data with third parties for commercial, advertising or profiling purposes.

6bSubscribers as data controllers for their clients' data

Subscribers (snow removal entrepreneurs) who use Mon Déneigeur enter and manage their own clients' personal data (names, addresses, phone numbers). In this regard, the subscriber acts as the data controller for that data, within the meaning of Law 25.

Clients of subscribers who wish to exercise their rights over their personal data (access, correction, deletion) must contact the subscriber (the snow removal company) directly, as they are the data controller.

7Retention and security

7.1 — Retention periods

• Active account data: retained for the duration of the subscription
• Raw GPS points (positions_gps): retained for 3 years (1,095 days), then automatically deleted by monthly cron job — retention period based on the prescription delay under the Civil Code of Québec, to allow response to any claim
• Service completion records (GPS punch at ✓ Done): retained for the duration of the active account (proof of service)
• Data after cancellation: deleted within 90 days of account closure, upon request — except raw GPS points and service completion records (retained up to 3 years, CCQ prescription period, to allow response to any claim) and billing data (7 years)
• Billing data: retained for 7 years in accordance with Quebec tax obligations
• Security logs: retained for a maximum of 12 months

7.2 — Security measures

• TLS/HTTPS encryption for all communications
• Data at rest encrypted in the database (Supabase)
• Secure JWT token-based authentication
• Role-based data access (manager / operator)
• No passwords stored in plain text
• Payments processed exclusively by Stripe — no card data is stored on our servers

7.3 — Incident response procedure

In the event of a privacy breach that could present a serious risk to the rights of affected individuals:

• We will document the incident in our internal register.
• We will notify with due diligence the Commission d'accès à l'information du Québec (CAI) and affected individuals (s. 3.5 LPRPSP), and aim to do so within 72 hours of becoming aware of the incident.
• To report a potential incident: snowplow@mon-deneigeur.ca

8Your rights

Under the Act respecting the protection of personal information in the private sector (Quebec Law 25) and applicable Canadian federal laws, you have the following rights:

• Right of access — obtain a copy of the personal data we hold about you
• Right to correction — correct inaccurate or incomplete information
• Right to deletion — request deletion of your data (subject to legal obligations)
• Right to portability — receive your data in a structured, machine-readable format
• Right to withdraw consent — revoke your consent to certain processing at any time
• Right to object — object to certain processing of your data

To exercise any of these rights, contact us at the address in section 11. We will respond to any request within 30 days.

You also have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI) at www.cai.gouv.qc.ca.

9Minors

Mon Déneigeur is a professional platform for snow removal businesses. We do not knowingly collect personal information from individuals under 14 years of age. If you believe a minor has created an account, please contact us immediately.

10Policy updates

We may update this privacy policy to reflect changes in our practices or applicable laws. For significant changes, we will notify you:

• By in-app notification, or
• By email to the address associated with your account.

The last updated date always appears at the top of this page. Continued use of Mon Déneigeur after a change constitutes your acceptance of the updated policy.

11Contact — Privacy Officer

For any questions about this policy, to exercise your rights, or to report a data-related issue:

Response time: within 30 calendar days of receiving your request.

12Analytics and advertising cookies

Mon Déneigeur uses cookies for analytics and advertising purposes, divided into two categories:

Internal analytics cookies

• An anonymous session identifier (stored in sessionStorage)
• A pseudonymous visitor identifier (stored in localStorage)
• Page visited, referrer, campaign UTM parameters

Meta Pixel (advertising) — conditional on consent

If you accept cookies via the consent banner, Mon Déneigeur loads the Meta Pixel (Facebook) to measure the effectiveness of our advertising campaigns (e.g. knowing whether a Facebook ad led to a registration). This pixel is provided by Meta Platforms Inc. (United States) and is subject to their privacy policy. No personal data (email, name) is transmitted to Meta via this pixel.

In accordance with Canada's Anti-Spam Legislation (CASL)and Law 25, your consent is requested on your first visit via the consent banner. You can withdraw consent at any time by clearing your browser's local storage or by contacting snowplow@mon-deneigeur.ca.