Skip to main content

Privacy Policy

Last updated: September 11, 2026.

Introduction​

In our work, we pay particular attention to protecting your privacy. That's why we are committed to respecting the confidentiality of the personal data we collect.

In this document, we distinguish between two services:

The website​

This is this website. Its purpose is to present Feuille de temps, its documentation, and legal information such as this document.

The service​

This is the Feuille de temps application itself. It is only accessible by registration, at https://app.feuilledetemps.ca.

Why do we collect your personal data?​

To provide you with a functional and secure service, collecting your personal data is necessary at several levels:

  • Your contact information (first name, last name, and email address) allows managers to contact employees;
  • Information about your approximate location and the device used to browse our website helps us improve the user experience;
  • Your email address allows us to send you our newsletter, if you have consented to it.

How do we collect your data?​

The personal information we collect is gathered in several ways:

  • When you contact us through our website's contact form or by email;
  • When you register for the service;
  • When you browse our website — through an anonymized analytics tool (see "Where is your data stored").

Where is your data stored?​

Service data (Feuille de temps application)​

Our data is stored and processed on DigitalOcean's servers, located in Toronto, Canada.
DigitalOcean complies with Canada's data protection standards, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Data backups​

Your data is backed up in two locations, both in Canada.

At our hosting provider. Database backups are:

  • Encrypted (at rest);
  • Kept in Canada, with the same hosting provider as the service;
  • Taken daily, with transaction logs allowing the database to be restored to its state at any point in the last seven days.

Outside our hosting provider. Since September 11, 2026, a copy of the database has also been deposited three times a day with OVHcloud, at its Beauharnois, Quebec data centre, where it is kept for 90 days. It addresses a single risk: losing access to our main hosting provider.

This copy is encrypted before it leaves our servers, with a key that only we hold. OVHcloud therefore keeps files it cannot open.

These backups are used to bring the service back online after an incident. They do not replace your own exports: your data remains exportable at any time from the application.

Website data (traffic, browsing)​

Traffic on our site is measured by a single tool, Umami, which we host ourselves, on our own server located in Toronto, Canada.

It places neither a cookie nor an identifier on your device, and it does not track you from one site to another. We only measure traffic on our own pages.

No browsing data leaves our systems: it is not shared with any third party, and no third party has access to it.

Newsletter data​

A list of the last names, first names, and email addresses of our newsletter subscribers is stored with Cyberimpact, a Quebec company whose data is hosted in Canadian data centres.

Emails sent automatically from the service (e.g., password reset, reports, notifications) are transmitted through the servers of Cyberimpact, a Quebec company whose data is hosted in Canadian data centres.
We share your last name, first name, and email address with them — solely for the purpose of sending these emails.

Until September 9, 2026, these emails were routed through a provider based in the United States. They now fall solely under Canadian legal jurisdiction.

Who has access to your data?​

Only our employees have access to the data. Their access to the storage system is protected by:

  • Two-factor authentication (2FA);
  • IP address restriction;
  • Signed confidentiality agreements.

The host of our backup copy cannot read it. The copy deposited with OVHcloud (see "Backups") is encrypted before it is sent, with a key that only we hold. It keeps files that are unreadable to it.

We would like to draw your attention to the fact that, when it comes to information security, zero risk does not exist. We use every means at our disposal to protect your data, but we cannot be held responsible in the event of a malicious intrusion or a technical failure beyond our control.

What are your rights regarding your information?​

In accordance with Canadian legislation (PIPEDA) and Quebec legislation (the Act respecting the protection of personal information in the private sector, known as "Loi 25"), you have the following rights:

  • Right of access: request a copy of your personal data;
  • Right of rectification: request that your information be updated;
  • Right to erasure: request the deletion of your data, subject to legal retention obligations;
  • Right to restriction of processing: request that we stop using your data for certain purposes (e.g., unsubscribing from the newsletter);
  • Right to withdraw consent: you may withdraw your consent at any time.

Who is responsible for protecting your information?​

Séraphin Vandegar is the person responsible for the protection of personal information at Aynils tech. inc. He handles requests for access, rectification, and deletion, and he is your point of contact in the event of a privacy incident.

📧 [email protected]

How to exercise your rights​

To exercise any of these rights, please contact us by email at:
📧 [email protected]

We are committed to responding to your request within a reasonable time, generally within 30 days of receiving your request.

Changes to this policy​

We may update this privacy policy at any time. Any changes will be posted on this page along with the update date. We invite you to check this page regularly to stay informed.

Applicable laws​

This privacy policy is governed by the laws of Canada, and more particularly by the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Loi 25 du Québec (the Act respecting the protection of personal information in the private sector).

Governing language​

In the event of any discrepancy between the French and English versions of this policy, the French version shall prevail.

Contact​

For any questions or concerns about this policy, please don't hesitate to contact us at:
📧 [email protected]