Privacy Policy
Last updated: March 1, 2026(view January 2026)
This document is published in French and in English. In case of any discrepancy between the two versions, the French version prevails.
Table of contents
Introduction
This privacy policy of 9553-6785 Québec Inc. (“Meo”, “we”) describes the personal information we collect through technological means, as well as your rights regarding that personal information. Personal information remains at all times the property of our clients.
For the purposes of this policy, personal information is any information that makes it possible to identify a person, directly or indirectly. This policy applies to the personal information we collect through our website as well as through our Meo software (collectively, the “Services”).
Effective date: March 1, 2026
1. Privacy officer
In accordance with Law 25, we have designated a privacy officer. If you have questions about how we handle your personal information, or if you wish to exercise your privacy rights, you may contact our privacy officer at any time:
2. What personal information do we collect?
We collect your personal information directly from you, through the following means:
- Creating an account in the software
- Booking an appointment through our website
- The contact form
- Connection cookies
Types of information collected:
- Account information: Name, email address, phone number, company
- Documents: The personal information that may be contained in the documents you upload
- Payment information: Processed by Stripe. We do not store your credit card data
- Technical data: IP address, browser and operating system configuration, pages visited, date and time of visit
- Communications: The content of your support requests and emails
3. Why do we collect your information?
We collect and use your personal information solely for the following purposes:
| Purpose | Information used |
|---|---|
| Provide and improve our Services | Account information, documents, technical data |
| Create and manage your account | Name, email, phone, company |
| Respond to your questions and support requests | Name, email, content of the request |
| Ensure the performance and security of the software | IP address, technical browsing data |
| Billing and payment processing | Payment information (via Stripe) |
| Meet our legal obligations | Data required under applicable law |
4. Consent
We collect your personal information with your explicit consent. By using our Services, you consent to the collection and use of your personal information in accordance with this policy.
Withdrawal of consent: You may withdraw your consent at any time by contacting us at conformite@documeo.ca. Please note that withdrawing your consent may limit or prevent the delivery of certain Services, since some data is necessary for them to work.
Minors: Our Services are not intended for persons under 14 years of age. For minors under 14 years of age, the consent of a parent or guardian is required in accordance with Law 25.
5. Retention of your personal information
We retain your personal information only for the period necessary for the purposes for which it was collected, or as required or permitted by law.
| Situation | Retention period |
|---|---|
| Active account | For the entire duration of your subscription |
| After a deletion request | Deleted within 60 days |
| Backups | Purged within 90 days following deletion |
| Legal and billing documents | Retained in accordance with applicable legal requirements |
6. Who has access to your personal information?
Access to your personal information is strictly limited to authorized personnel of 9553-6785 Québec Inc. who need it to carry out their duties. We apply the principle of least privilege: each person has access only to the data necessary to carry out their responsibilities.
We never sell your personal information and we never share it for commercial or advertising purposes.
We may disclose your personal information in the following circumstances:
- Vendors: Our service providers (see section 8) who help us deliver the Services, bound by contractual confidentiality agreements.
- Authorities: Where the law requires it, for example to respond to subpoenas, warrants or court orders.
- Business transactions: In the event of an acquisition, reorganization or financing of our business, in compliance with applicable laws.
7. Transfers outside Quebec
Your documents and account data are stored exclusively in Quebec, in the Montreal region, on AWS infrastructure (ca-central-1 region).
Some of our vendors (see section 8) may process personal information outside Quebec, in particular in the United States. In all cases:
- Data processing agreements (DPAs) are in place with every vendor. See our Data Processing Agreement
- The level of protection is equivalent to or higher than the level required by Quebec law
- A privacy impact assessment has been carried out for each transfer
To keep our services secure, web requests pass through Cloudflare, a global security network. Cloudflare may process requests at points of presence in North America before routing them to our Quebec servers. All data remains encrypted in transit (TLS 1.3).
To see our practices, the controls we have in place, and to submit a Law 25 request, visit our public compliance portal.
8. Our vendors
The following vendors process our users' personal information in the course of delivering our Services. Each one is bound by a data processing agreement.
| Category | Provider | Region | Purpose |
|---|---|---|---|
| Hosting | AWS | Canada (Montreal) | Data storage and deployment |
| Database | Supabase | Canada (Montreal) | Database and authentication |
| Payments | Stripe | United States | Payment processing (not stored by us) |
| Postmark | United States | Sending transactional emails | |
| Security | Cloudflare | Global (transit) | Firewall and DDoS protection |
Detailed security documentation, including the complete list of our service providers, is available on request.
9. Your rights under Law 25
In Quebec, you have a number of rights over your personal information:
| Right | Description |
|---|---|
| Right of access | You have the right to be informed of how we collect, use and disclose your personal information. You also have the right to access the personal information we hold about you. |
| Right to rectification | If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request that it be corrected. |
| Right to portability | You have the right to receive your personal information in a structured, commonly used and machine-readable format, and to transmit it to another entity without hindrance from us. |
| Right to withdraw consent | You have the right to withdraw your consent to the processing of your personal information at any time. |
| Right to erasure | You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected. |
| Right to de-indexation | You have the right to request that any hyperlink attached to your name and giving access to your information be deactivated, or that the link be de-indexed. |
| Right to file a complaint | You have the right to file a complaint with the Commission d'accès à l'information du Québec (CAI) at cai.gouv.qc.ca or by telephone at 1-888-528-7741. |
How do you exercise your rights?
Send an email to conformite@documeo.ca. We undertake to respond within 30 days of receiving your request.
10. Cookies and tracking
Our website uses cookies (called “témoins” in French) to allow the site to work properly, to analyze usage and to simplify navigation.
A cookie is a file placed on your device when you visit our website. This file stores information for a future connection and represents you by means of a unique, anonymous identifier.
No non-essential cookie is enabled without your explicit consent. Analytics and marketing cookies are disabled by default.
You may change your cookie preferences at any time by clicking the button below or through the “Manage cookies” link in the site footer.
11. Automated decisions
Meo currently uses no fully automated decision-making process that would produce legal or significant effects on the persons concerned.
Should we implement such processes in the future, we would inform you through an update to this policy, and you would have the right to object to it or to request a human review of the decision, in accordance with Law 25.
12. Data security
We have put in place physical, technical and administrative measures to protect your personal information against destruction, loss, unauthorized modification, disclosure and unauthorized access.
Encryption in transit
All communications are protected by TLS 1.3
Encryption at rest
Stored data is encrypted with AES-256
Access controls
Multi-factor authentication, principle of least privilege
SOC 2 compliance
We are in the process of SOC 2 compliance to attest to our security controls
When we disclose your personal information to our vendors, we require the same level of security from them before any transfer.
13. Notification in the event of a confidentiality incident
In accordance with Law 25, we maintain a register of confidentiality incidents documenting any event involving unauthorized access to, use of or communication of personal information, as well as any loss of personal information.
In the event of an incident presenting a risk of serious injury:
- We notify the Commission d'accès à l'information du Québec (CAI) as promptly as possible
- We inform the persons concerned of the nature of the incident
- We communicate the measures taken to reduce the risks and the steps you can take to protect yourself
14. Changes to this policy
We may change this privacy policy from time to time, for example to reflect new laws or changes in the way we handle personal information.
In the event of a significant change, we will inform you by email or through a notice in our software. The date of the last update is always shown at the top of this page. Any change takes effect on the date of the update.
15. Contact
For any question about this privacy policy, or to exercise your personal information rights:
Olivier Beaulieu
Privacy officer
Email: conformite@documeo.ca
1779 rue Careau, Québec, Canada, G1M 0C9
If you believe your rights have not been respected, you may file a complaint with the Commission d'accès à l'information du Québec (CAI) or by telephone at 1-888-528-7741.