Français

Privacy Policy

Effective September 30, 2026

This policy explains how LP Télécom ("we", "us") collects, uses, discloses, retains and protects personal information processed through its web portal and the Fonxtio business management software that powers it (together, the "Software"). It applies to customers and their contacts who use the portal, and to employees who access its administration section.

LP Télécom is responsible for the personal information processed by the Software. The Software is developed and hosted on our behalf by Télipso, which acts as a service provider and does not use this information for its own purposes.

1. Information we collect

• Identity and contact details: name, business name, billing and shipping addresses, email address and phone number of customers and their contacts.
• Account credentials: username, password (stored only as an irreversible hash) and, for the administration section, the two-factor authentication key.
• Transactions: quotes, orders, invoices, deposit requests, payments and receipts, as well as products viewed or saved as favourites.
• Card payments: payments are processed by Stripe. Card numbers are entered directly with Stripe; we never receive or store them. We keep the payment reference, amount, date and status.
• Bank data (Plaid): see section 3.
• Technical data: IP address, browser type, date and time of access, and event logs needed for the security and proper operation of the service.

2. How we use information

We use personal information only to:

• provide the portal: viewing documents, placing orders, accepting quotes;
• process payments, issue receipts and keep our accounting records;
• reconcile payments received in our bank accounts with the corresponding invoices;
• communicate with you about your orders, invoices and payments;
• protect the Software and accounts against unauthorized access and fraud;
• comply with our legal obligations, including tax and accounting requirements.

We do not sell, rent or trade personal information, and we do not use it for targeted advertising.

3. Bank connection through Plaid

The administration section allows an authorized employee to connect a LP Télécom bank account to the Software through Plaid Inc. ("Plaid"). This connection is used solely to retrieve the account's transactions in order to reconcile them with our customers' invoices and payments.

• Information obtained: the name of the financial institution; the name, type, currency and last four digits of each connected account; and its transactions (date, amount, description, counterparty). These transactions may include the names of customers or suppliers who made or received a payment.
• What we do not receive: online banking credentials. They are entered in Plaid's interface and never pass through the Software.
• Consent: a connection is only established at the initiative of an authorized employee, who consents in Plaid's interface to Plaid collecting and transmitting this data.
• Protection: the access token issued by Plaid is encrypted (AES-256) before it is stored and is never sent to the browser.
• Removal: a connection can be removed at any time from the administration section; the authorization is then revoked with Plaid and the associated accounts are removed from the Software.

Plaid processes this information in accordance with its own End User Privacy Policy.

4. Disclosure to third parties

We disclose personal information only to the following parties, and only to the extent necessary:

• Stripe, to process card payments;
• Plaid, for the bank connection described in section 3;
• Télipso, which develops, hosts and supports the Software;
• our email delivery provider, to send documents and receipts;
• authorities, where required by law.

These providers are bound by confidentiality obligations and may use the information only to provide their service to us. Some of them, including Stripe and Plaid, process information outside Québec and Canada, notably in the United States; that information is then subject to the laws of those jurisdictions. We assess the protection offered by these providers beforehand.

5. Retention

We keep personal information for as long as necessary for the purposes described above. Accounting and tax records (invoices, payments, reconciled bank transactions) are kept for the period required by law, which is at least six years after the end of the fiscal year to which they relate. After that period, the information is securely destroyed or anonymized.

6. Security

We apply reasonable security measures appropriate to the sensitivity of the information, including:

• encryption of communications (HTTPS/TLS);
• password hashing and encryption of access tokens and keys;
• mandatory two-factor authentication for the administration section;
• limits on login attempts;
• access to information restricted to people who need it for their duties.

If a confidentiality incident presents a risk of serious injury, we will notify the affected individuals and the Commission d'accès à l'information du Québec, as required by law.

7. Cookies

The portal only uses cookies that are strictly necessary for it to work: maintaining your session, protecting forms against cross-site request forgery and remembering your chosen language. No advertising or analytics cookies are used.

8. Your rights

Subject to the exceptions provided by law, you may:

• request access to the personal information we hold about you;
• have it corrected if it is inaccurate or incomplete;
• withdraw your consent to its use or ask that it no longer be disseminated;
• ask that it be provided to you in a structured, commonly used technological format.

To exercise these rights, write to the person in charge of the protection of personal information (section 9). We will respond within 30 days. If you are not satisfied with our response, you may contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

9. Person in charge of the protection of personal information

For any question or request regarding this policy:

Attention: Person in charge of the protection of personal information.

10. Changes

We may update this policy to reflect changes to the Software or to the law. The current version is always published at this address, together with its effective date.