Privacy notice

Purposes

We process personal information to authenticate invited users, manage client memberships, receive and track service requests, exchange client-visible comments and attachments, send operational notification emails according to your preferences, and meet security, audit and retention obligations.

Categories of information

Account data (email, name, locale, consent version/timestamp), client memberships and role, service request content you submit, client-visible comments and attachments, notification preferences, and technical security/audit events related to portal use.

Please avoid submitting sensitive personal information (government IDs, payment card numbers, passwords, health data) in free-text fields or attachments.

Hosting and transfers outside Québec

Primary application data for this portal is stored in Supabase in the Canada (ca-central-1) region.

Application compute runs on Vercel. The configured serverless region is currently outside Canada (for example pdx1 in the United States). ClickUp, used as an internal work-management tool, is also hosted outside Québec/Canada (United States).

As a result, some personal information may be communicated outside Québec for hosting, processing or internal ticket handling. Appropriate contractual and access controls are applied; an assessment of privacy factors (EFVP) must be completed before production go-live.

Your rights

Subject to applicable law and legal retention obligations, you may request access to your portal data (export), request correction of your profile information, and submit an erasure request. Erasure is reviewed internally and may be delayed or limited where retention or operational obligations apply.

Contact the privacy contact at vieprivee@cossette.com for questions or rights requests. You may also use the in-portal “My data” page after signing in.

Privacy contact

Designated contact for personal information matters related to this portal: vieprivee@cossette.com.