Promovision Privacy Policy

Effective date: August 27, 2026

Who we are: Promovision Technologies inc. ('Promovision', 'we'), Québec, Canada. Person in charge of the protection of personal information (Law 25): Keven Cliche — privacy requests: support@promovision.ai

This policy explains how Promovision collects, uses, discloses, and protects personal information, in accordance with Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's PIPEDA. It covers our platform, our public pages (booking, quotes, invoices, business directory, business sites), and our marketing site.

1. Two roles — read this first

Promovision handles personal information in two distinct roles:

• For our own account holders (business owners and their team members), we are the organization collecting your information — this policy applies directly.
• For our customers' customers (the clients of the businesses using Promovision — their contacts, appointments, invoices, messages, call recordings), the business you dealt with is responsible for that information, and Promovision processes it as that business's service provider, on its instructions, under contractual confidentiality and security obligations. If you are a client of a business that uses Promovision, direct privacy requests to that business first; we will assist it in responding.

2. What we collect

Account holders: name, email, phone, business name and address, language preference, login credentials (passwords are hashed; we never see them), role and team membership, billing history. Payment cards are collected and stored by Stripe — we store only a payment-method reference, never card numbers.

On behalf of businesses (their customer data): contact details, appointment and job records, quotes and invoices, payment records, notes, uploaded files and photos, email and SMS message content, and — if the business enables the AI receptionist — call recordings and transcripts.

Automatically: technical logs (IP address, browser type, timestamps) needed to operate and secure the Service, and the cookies described in the Cookie Policy.

Public pages: when you book an appointment, view a quote, or apply for financing through a business's public page, the information you enter goes to that business's account.

3. What we use it for

Providing and operating the Service; processing payments and metered billing; sending transactional messages (booking confirmations, invoices, account notices); providing support; securing the Service (fraud prevention, abuse detection, audit logs); complying with legal obligations; and, with your consent, sending our own product communications (you can unsubscribe at any time).

We do not sell personal information. We do not use your business's customer data for advertising.

4. AI features

If a business enables the AI receptionist, calls to its business number are answered by an automated agent, recorded, and transcribed; recordings and transcripts are stored in that business's account and processed by our voice-technology provider during the call, after which we delete the provider-side copy and retain only our own. Text and image generation features send the prompts you provide to our AI model providers to produce the output; we do not permit our providers to use this content to train their models where the provider offers that control.

5. Who we share it with (service providers)

We disclose personal information only to the service providers needed to run the Service, each bound to use it solely to provide their service to us:

We may also disclose information if required by law, or in a business transaction (merger, financing, sale) under confidentiality obligations.

6. Where your information is stored

Our providers operate cloud infrastructure that may be located outside Québec and outside Canada, including in the United States. Before communicating personal information outside Québec we assess, as Law 25 requires, whether it will receive adequate protection, and we bind providers contractually to protect it. By using the Service you acknowledge this cross-border processing.

7. How long we keep it

• Account and business data: for the life of the account.
• Account deletion: you can request deletion in the app (confirmed by email link). After a 30-day grace period, your organization's data is permanently deleted, except records we must keep by law (e.g., billing and tax records) and minimal audit entries of the deletion itself.
• Call recordings, files, and messages: retained in your account until you delete them or your account is deleted.
• You can export your data at any time with the built-in export.

8. How we protect it

Encryption in transit, encrypted storage, role-based access controls within each business account, tenant isolation enforced at the database layer, audit logging of sensitive actions, and confidentiality commitments from every service provider. No system is perfectly secure; if a confidentiality incident presents a risk of serious injury, we will notify the affected persons and the Commission d'accès à l'information as Law 25 requires, and keep a register of incidents.

9. Your rights

Subject to applicable law, you may: access the personal information we hold about you; correct inaccurate information; withdraw consent to optional uses; request deletion; and request a copy of information you provided us in a structured, commonly used technological format (data portability). Write to support@promovision.ai; we respond within 30 days. If unsatisfied, you may complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada. If you are a client of a business using Promovision, we will redirect your request to that business and assist it.

10. Changes

We will post updates here and, for material changes, notify account holders by email or in-app before they take effect.

Contact: support@promovision.ai