What we do with your data, plainly.
Here’s what’s in place today, what comes with reporting when it opens, and who else touches the data.
In place today
- Every connection is encrypted with HTTPS.
- Each business’s records are kept apart. Every staff action checks membership and role, and automated tests try to cross from one business to another.
- A public label is only a locator. It never shows past reports, names or photos, and its code can be replaced if it’s copied somewhere it shouldn’t be.
- The application and its database run on a server in Canada.
- No advertising trackers on this site, and only the cookies it needs to work. The home page and staff screens count visits without cookies, on our own server, and that counting never runs on the pages a machine’s label or a private link opens.
Coming with reporting
- Photos are stored privately, re-encoded with their metadata removed, and every download is checked against the report it belongs to.
- Follow-up links are long and random, show only the status of one report, and expire after 180 days.
- Reporters’ contact details are removed 90 days after a report closes, and photos after 180 days.
- Backups are encrypted and expire after 30 days, and restoring from them is rehearsed.
- Owners can export their records and delete their organization.
Who else handles data
Some of these process data outside Québec.
- Cloudflare: domain name and secure connections.
- Resend: sending email.
- Zoho: our own [email protected] mailbox.
- Stripe: billing, once signup opens.
Found a security problem?
Write to us and we’ll look at it right away. [email protected]