DRAFT — pending review by a Quebec lawyer.
Privacy policy
Responsible
Person responsible for the protection of personal information: Alborz M. — vie-privee@tigidu.com
What we collect
The establishment's name, your contact details, the answers to the claim questionnaire, the documents you upload, and the attribution parameters from your first visit. If you explicitly ask for it, the date and approximate place of a photo. If an obligation belongs to a person, the name you designate. If you turn on notifications, your device's technical identifier. If you give a month away, the email address of the person you mean it for. Nothing else.
The date and place of a photo
The box is unchecked by default and your browser then asks for its own permission: nothing is collected without both gestures. The place is rounded to roughly 11 metres — which building, not where you stood — and it is deleted along with the photo.
The map
The Map page is drawn by us and served from our own servers: the island, the water and the parks come from an open geometry file from the Ville de Montréal that we host, and the dots come from our own database. Opening it sends your address to nobody, because there is nobody else to contact. Our typefaces, too, are served from our own servers.
Where it is hosted
All data is hosted in Canada (AWS ca-central-1, Montréal). That choice is documented in our privacy impact assessment note.
Sharing
A share pack is visible only to whoever holds the link, until it expires or is revoked. No personal information is ever sold. Any sharing of de-identified data (with an insurer, for example) will require explicit prior consent.
Your rights
A full export of your register is free, at any time, subscribed or not. Deletion is requested from your settings: the email offers the export first, and nothing is erased without your click. For access, correction or withdrawal of consent, write to the officer named above; we answer within 30 days. You may also complain to Québec's Commission d'accès à l'information.
Incidents
Every privacy incident is recorded in an incident register and, where required, reported to the Commission d'accès à l'information.