Privacy policy

1. Person in charge

The person in charge of the protection of personal information at VirtuelCOM inc. is Michel T Dallaire. You can reach them at [email protected].

2. What we collect

• Account: last name, first name, username, email, cell number, photo and language, received from your VirtualCOM Identity account when you sign in; and the billing address you enter (city, province or state, country), used to calculate taxes and for receipts.
• Websites: the files you upload, your settings (email that receives the forms, encrypted Turnstile keys), your bio page and your favicon.
• Payments: dates, amounts, taxes, promo code and Stripe transaction identifiers. Your card number is processed by Stripe; the platform never receives it.
• Emails: the address we send payment reminders to and when they were sent.
• Your websites' forms, on your behalf: the message content, the visitor's IP address and browser (to limit abusive submissions) and the date.
• Technical data: server and Cloudflare logs (IP address, requested page, date), used for security and proper operation.

3. Why

This information is used only to provide the service: signing you in, publishing your websites, processing your payments, calculating your taxes and producing your receipts, sending you reminders and your forms' messages, protecting the platform against abuse and meeting our legal obligations. It is neither sold nor rented, and is not used for any advertising.

4. Cookies

We only use the cookies needed for the service to work:

• hmsia: the portal session cookie, which keeps you signed in and protects your forms; it is removed when you sign out or close the browser;
• Cloudflare security cookies (for example __cf_bm or cf_clearance), set to recognize bots and block attacks;
• VirtualCOM Identity cookies, while you sign in.

We use no audience measurement, advertising or tracking tools, and we add none to the websites we host. A client may however add their own tools to their website: they are then responsible to their visitors. If we ever add another type of cookie, this policy will be updated and your consent will be asked where the law requires it.

5. Who we share with

We use service providers, which process information for us and according to our instructions:

• WHC (Canada): server and database hosting;
• Cloudflare (United States and global network): website delivery, HTTPS certificates, attack protection and the Turnstile bot check;
• Stripe (United States): card payment;
• Brevo (France): sending emails (reminders and form messages);
• VirtualCOM Identity, a VirtuelCOM inc. service: signing in to your account.

Some of these providers are located outside Quebec. Before entrusting them with information, we assessed that they protect it adequately. We may also disclose information when the law requires it.

6. How long

• Account: as long as it exists. If it is deleted at VirtualCOM Identity, it is anonymized in the platform.
• Websites: as long as they are paid for, then during the grace period and the 6 months after it; they are then deleted with their versions, bio page and favicon.
• Form messages: 365 days, then deleted automatically.
• Payments: the time required by tax laws.
• Technical logs: a few weeks, depending on our providers.

7. Security

Exchanges go through HTTPS. Secret keys are encrypted, access to the administration is restricted and passwords are never handled by the platform (sign-in goes through VirtualCOM Identity). In case of a confidentiality incident that presents a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information.

8. Your rights

You may ask to access your information, correct it, delete it, get a copy in a structured technological format, or withdraw your consent. Write to [email protected]; we answer within 30 days. If you are not satisfied with our answer, you may contact the Commission d'accès à l'information du Québec.

Visitors of a hosted website who wrote through its form should first contact the website owner; we will help them answer.

9. Changes

This policy may change over time, depending on laws and our providers. The update date is shown at the top of the page. It is up to you to check it to stay informed; we will try to present important changes 30 days before they take effect.