Promovision Privacy Policy

Effective date: August 27, 2026. Updated October 13, 2026.

What changed on October 13, 2026: section 5 names Google Cloud, which makes AI promo videos; section 6 says our database and files are hosted in Canada. (September 28, 2026: section 5 names the financing partners a business chooses, and what they receive once it agrees.)

Who we are: Promovision Technologies inc. ('Promovision', 'we'), Québec, Canada. Person in charge of the protection of personal information (Law 25): Keven Cliche. Privacy requests: support@promovision.ai

This policy explains how Promovision collects, uses, discloses, and protects personal information, in accordance with Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's PIPEDA. It covers our platform, our public pages (booking, quotes, invoices, business directory, business sites), and our marketing site.

1. Two roles. Read this first

Promovision handles personal information in two distinct roles:

• For our own account holders (business owners and their team members), we are the organization collecting your information, and this policy applies directly.
• For our customers' customers (the clients of the businesses using Promovision: their contacts, appointments, invoices, messages, call recordings), the business you dealt with is responsible for that information, and Promovision processes it as that business's service provider, on its instructions, under contractual confidentiality and security obligations. If you are a client of a business that uses Promovision, direct privacy requests to that business first; we will assist it in responding.

2. What we collect

Account holders: name, email, phone, business name and address, language preference, login credentials (passwords are hashed; we never see them), role and team membership, billing history. Payment cards are collected and stored by Stripe. We store only a payment-method reference, never card numbers.

On behalf of businesses (their customer data): contact details, appointment and job records, quotes and invoices, payment records, notes, uploaded files and photos, email and SMS message content, and, if the business enables the AI receptionist, call recordings and transcripts.

Automatically: technical logs (IP address, browser type, timestamps) needed to operate and secure the Service, and the cookies described in the Cookie Policy.

Public pages: when you book an appointment, view a quote, or apply for financing through a business's public page, the information you enter goes to that business's account.

3. What we use it for

Providing and operating the Service; processing payments and metered billing; sending transactional messages (booking confirmations, invoices, account notices); providing support; securing the Service (fraud prevention, abuse detection, audit logs); complying with legal obligations; and, with your consent, sending our own product communications (you can unsubscribe at any time).

We do not sell personal information. We do not use your business's customer data for advertising.

4. AI features

If a business enables the AI receptionist, calls to its business number are answered by an automated agent, recorded, and transcribed; recordings and transcripts are stored in that business's account and processed by our voice-technology provider during the call, after which we delete the provider-side copy and retain only our own. Text and image generation features send the prompts you provide to our AI model providers to produce the output; we do not permit our providers to use this content to train their models where the provider offers that control.

5. Who we share it with (service providers)

We disclose personal information only to the service providers needed to run the Service, each bound to use it solely to provide their service to us:

Financing partners you choose. When a business applies for financing in the app, and only after it agrees on that application, we send the lender or broker it selected the business name, contact name, email, phone, province, years in business, and the request (type, amount, term and details). We record that agreement. The partner uses this information to contact the business about the financing and handles it under its own privacy policy.

We may also disclose information if required by law, or in a business transaction (merger, financing, sale) under confidentiality obligations.

6. Where your information is stored

Our database and file storage are hosted in Canada (Montréal, AWS region ca-central-1). The other providers in section 5 operate cloud infrastructure that may be located outside Québec and outside Canada, including in the United States. Before communicating personal information outside Québec we assess, as Law 25 requires, whether it will receive adequate protection, and we bind providers contractually to protect it. By using the Service you acknowledge this cross-border processing.

7. How long we keep it

• Account and business data: for the life of the account.
• Account deletion: you can request deletion in the app (confirmed by email link). After a 30-day grace period, your organization's data is permanently deleted, except records we must keep by law (e.g., billing and tax records) and minimal audit entries of the deletion itself.
• Call recordings, files, and messages: retained in your account until you delete them or your account is deleted.
• Export and portability: you can export your contacts and companies from the app at any time. A copy of the rest of your information is provided on request within 30 days, in a structured, commonly used technological format (portability).
• We keep a retention schedule for each category of information: account and business data for the life of the account; a 30-day grace period after a deletion request; billing and tax records for as long as the law requires; and minimal audit entries of the deletion itself.

8. How we protect it

Encryption in transit, encrypted storage, role-based access controls within each business account, tenant isolation enforced at the database layer, audit logging of sensitive actions, and confidentiality commitments from every service provider. No system is perfectly secure; if a confidentiality incident presents a risk of serious injury, we will notify the affected persons and the Commission d'accès à l'information as Law 25 requires, and keep a register of incidents.

9. Your rights

Subject to applicable law, you may: access the personal information we hold about you; correct inaccurate information; withdraw consent to optional uses; request deletion; and request a copy of information you provided us in a structured, commonly used technological format (data portability). Write to support@promovision.ai; we respond within 30 days. To make a complaint about how we handle your personal information, write to support@promovision.ai; the person in charge of the protection of personal information reviews it and answers within 30 days. If unsatisfied, you may complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada. If you are a client of a business using Promovision, we will redirect your request to that business and assist it.

10. Changes

We will post updates here and, for material changes, notify account holders by email or in-app before they take effect.

Contact: support@promovision.ai