Privacy Policy

Last updated: 7 August 2026

This is written to be read by a shopkeeper, not a lawyer. It says what we collect, where it’s kept, who can see it, and how you take back control.

Who is responsible

Stock Radar is operated in Quebec, Canada. In keeping with Law 25, a person is responsible for the protection of personal information and can be reached at confidentialite@stockradar.ca. Every request is answered within 30 days.

What we collect

We collect nothing else. No advertising cookies, no third-party analytics, no tracking pixels — neither in the app nor on this site.

An honest warning about photos

A photo of an invoice can hold more than the invoice: a partially masked card number, a signature, a loyalty-program number, a handwritten note. We keep the photo as-is, because it’s the only proof of what the system read and it has to stay verifiable. Don’t photograph what you don’t want to entrust to us.

Where it’s kept

On a server in Beauharnois, Quebec, at OVHcloud, a French company. Backups stay in the same place. Your invoices, photos, prices and purchase history do not leave Quebec. Only two things leave that server, and both are described below.

What leaves, first: reading the photos

To read an invoice, the photo is sent to a Google artificial-intelligence service, on its paid tier. This was a deliberate choice: the free tier’s terms allow human review of submissions and their use to improve their products. The paid tier does not — submissions are not used to train their models.

This is the only third party that sees your documents. We sell nothing, we share nothing with other shops, and we do not use your invoices to train anything.

What leaves, second: the email

The only email the system sends is your sign-in link. It goes through Zoho, whose Canadian data centres are in Montreal and Toronto. Your email address therefore passes through and may be kept there: in Canada, but not necessarily in Quebec.

No invoice, no photo, no price passes through there — only an email address and a link that expires in fifteen minutes.

Automated decisions

The system reads your invoices automatically, but no decision is made without you: nothing enters your totals, your tax credits or your statistics until a person has confirmed the document on screen, beside the photo. When a reading is doubtful, the system says so rather than deciding.

How long

• Your documents and their photos: as long as your account is active, because a purchase history exists precisely to compare with previous years.
• After your account is closed: 90 days, then deletion, including from backups on their normal rotation.
• Sign-in logs: 12 months.

Your rights

Law 25 gives you the right to see your information, to have it corrected, to have it deleted, and to receive a copy in a usable format. Write to confidentialite@stockradar.ca.

You may also file a complaint with the Commission d’accès à l’information du Québec.

If something goes wrong

In the event of a privacy incident presenting a risk of serious harm, we notify you and the Commission d’accès à l’information without delay, as the law requires.

Who sees what inside your shop

You decide, and the system enforces it:

• Employee: photographs receipts and sees their own photos. Sees no amounts.
• Manager: sees what you pay. Sees neither your selling prices nor your margins.
• Owner: sees everything, adds and removes people, and can hand the shop to someone else — including by stepping away themselves.

This text describes what the system actually does. It is not a substitute for legal advice, and it will be reviewed by an adviser before paying shops arrive.