Privacy policy.
What we collect, why, who can see it and how to exercise your rights, on this site and in Studio Plavon, our internal app.
Last updated: September 12, 2026
-
01 Who we are
Studio Plavon inc. (Plavon) is a business corporation incorporated in Quebec, registered under Quebec enterprise number (NEQ) 1182549965, with its head office at 300-204 rue du Saint-Sacrement, Montréal, Quebec H2Y 1W8.
This policy explains how we handle personal information collected through the plavon.ca website, in our dealings with our clients and with the businesses we reach out to, and through Studio Plavon, the internal app we use to manage our clients, our projects and our accounting.
-
02 Person in charge of protecting personal information
Our president is the person in charge of the protection of personal information, as required by Quebec's Act respecting the protection of personal information in the private sector.
For a question, an access request or a complaint, write to bonjour@plavon.ca, or by mail to our head office, to the attention of the person in charge of the protection of personal information.
-
03 What we collect
Depending on how you interact with us:
- Through the contact form: your first name, last name, email, company name, type of enquiry and your message.
- When you visit the site: your IP address and our host's technical logs, which the site needs to run and stay secure. The site sets no cookies and uses no analytics or advertising tools.
- In our business relationships: the professional contact details of our clients and the people we do business with (name, role, email, phone), the history of our exchanges, quotes, contracts, project documents and invoices.
- For prospecting: business contact details taken from public sources, such as business registries and directories, and notes from our calls.
- Through the QuickBooks Online connection: the accounting data of Studio Plavon inc., described in the next section.
We collect only what is needed for the purposes described here.
-
04 QuickBooks data
Studio Plavon connects to the QuickBooks Online company of Studio Plavon inc., with the authorization of an administrator of that company, through Intuit's OAuth authorization protocol. The app accesses only our own company's accounting data:
- customers, invoices and payments, so that invoices issued in Studio Plavon are recorded in our books;
- purchases, expenses, deposits, transfers and accounts, to follow our transactions, balances and sales taxes;
- the company name, the items and the tax codes needed to create an invoice.
This data is used only to keep the books of Studio Plavon inc. It is not sold, rented or shared with third parties for marketing, and it is not used to train artificial intelligence models.
The access tokens issued by Intuit are encrypted (AES-256-GCM) before they are stored and are never sent to the browser. Disconnecting from Studio Plavon revokes access with Intuit and deletes those tokens. Entries already copied stay in our accounting records for the retention period set out below.
-
05 Why we use it
We use this information to:
- answer your enquiries;
- prepare and carry out our quotes, contracts and projects;
- invoice, collect payment, keep our books and meet our tax obligations;
- contact the businesses we reach out to, and honour the request of anyone who no longer wants to be contacted;
- protect our systems and prevent abuse.
We do not use it for any other purpose without your consent, unless the law allows or requires it.
-
06 Who can see it, and where
Only authorized people at Plavon can see it, as their work requires. We also rely on service providers that process information on our behalf:
- Vercel, to host the site and the app;
- Supabase, for the database and files;
- Proton, for email;
- Resend, to send email;
- Intuit, for accounting (QuickBooks Online);
- Google, for the calendar;
- Quo, for phone calls and text messages.
Some of these providers are located outside Quebec, notably in the United States. Your information may therefore be stored there and be subject to the laws of those jurisdictions. We do not share personal information with any other third party unless the law requires it.
-
07 How long we keep it
We keep information for as long as the purposes it was collected for require:
- accounting and tax records, at least six years after the end of the tax year they relate to, as the Canada Revenue Agency and Revenu Québec require;
- contact form messages that lead to no project, two years;
- for a business that asks not to be contacted again, only its phone number, so that the request is honoured.
When those periods end, the information is securely destroyed or anonymized.
-
08 How we protect it
The app is restricted to authorized people, who sign in with a one-time code. Communications are encrypted (HTTPS), the passwords and tokens we store are encrypted, access is limited by role and sensitive lookups are logged.
No measure is infallible. If a confidentiality incident presents a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information, as the law requires.
-
09 Your rights
You may ask to access your personal information, to have it corrected, to withdraw your consent or to no longer be contacted. Write to bonjour@plavon.ca. We answer within 30 days.
If our answer does not satisfy you, you may contact Quebec's Commission d'accès à l'information at cai.gouv.qc.ca.
-
10 Changes
We may update this policy. The date at the top of the page shows the version in force.