Privacy policy

For any question, request for access, correction or deletion, or to file a complaint, write to our person in charge of the protection of personal information: info@carnetpignon.ca. We answer within 30 days.

• Your account: name, email address, profile picture and identifier provided by Google if you sign in with Google, or your email address if you use a sign-in link; preferred language.
• Your syndicate's data, which you enter or import: building profile, fractions and co-owner names, finances, work, insurance, contractors, meetings, board members and the email addresses of people you invite.
• Documents you upload or import (invoices, quotes, reports, policies, minutes, etc.) and the information automatic reading extracts from them.
• Technical data: our hosting providers keep logs (IP address, browser, date) for security and operations. Your browser keeps your language, the last syndicate viewed, the email of a sign-in in progress and your session locally.

The Google Drive and Gmail connections are optional. You authorize them yourself, when you use them.

• Sign in with Google: your name, email address and profile picture, to create your account.
• Google Drive (drive.file scope): Pignon can only access the files you choose in the Google picker. Those files are copied into your syndicate's register. Pignon cannot see or change any other file.
• Gmail (gmail.readonly scope): only when you click "Search", Pignon queries your mailbox with the search shown (which you can edit) to list messages that have attachments: sender, subject, date and attachment names. Only the attachments you tick are copied into the register. Pignon does not keep your messages or the result list, and never sends, changes or deletes email.
• Access tokens: the Google authorization is kept in your browser's memory for about one hour. It is never sent to our servers or stored.

Limited Use. Pignon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google data is used only to provide the features you use; it is not sold, not used for advertising, not used to train generalized artificial intelligence models, and no person reads it without your consent, except for security purposes or to comply with the law.

You can remove Pignon's access to your Google Account at any time at myaccount.google.com/permissions.

• To provide the service: keep the register, maintenance log, finances and deadlines, and produce the reports and share links you create.
• To read your documents automatically (type, amounts, taxes, dates, RBQ licence) and suggest entries that you confirm or correct.
• To keep the service secure, prevent abuse and answer your support requests.

Documents you add are analyzed by Google's Gemini model (Vertex AI, Google Cloud), only to extract the information your register needs. Under Google Cloud's terms, Google does not use this content to train its models. Pignon makes no decision for you: nothing is recorded without your confirmation.

• Members of your syndicate see its data according to the role the administrator gives them (admin, board, viewer).
• Reviewers (notary, accountant, broker, professional) to whom you send a share link see a copy of the report, without co-owner names and, if you choose, the supporting documents. The link expires after the period you choose and you can revoke it.
• Our service providers: Google LLC and Google Cloud (Firebase hosting, authentication, Firestore database, file storage, Cloud Functions and Vertex AI), which process data on our behalf under their contractual commitments.
• Authorities, where the law requires it.

The database is hosted in Montréal (Google Cloud region northamerica-northeast1). Document files are kept in the United States (region us-east1). Automatic reading by Gemini may take place in other Google data centers. Your information may therefore be communicated outside Quebec; Google is contractually bound to protect it.

We keep data while your account or syndicate is active. A document deleted from the register is also deleted from storage. On request to info@carnetpignon.ca, we delete your account and, if you are its administrator, your syndicate's data within 30 days. You can export the ledger and print your reports at any time.

You may request access to your information, its correction, deletion or transfer in a common format, and withdraw your consent. If our answer does not satisfy you, you may contact the Commission d'accès à l'information du Québec.

Data is encrypted in transit and at rest. Access rules limit each syndicate to its members, according to their role. If a confidentiality incident presents a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information.

Pignon uses no advertising, no advertising cookies and no third-party audience measurement.

Pignon is meant for syndicate directors and is not intended for people under 14.

We will post any change on this page with its date. If it is significant, we will tell you by email before it takes effect.