Privacy Policy

Effective August 1, 2025

1. Introduction

9429-2232 Québec inc., operating as ProductShop ("Access", "we", "us", or "our"), is committed to protecting the privacy and personal information of our users. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Website and Platform for smart building communications, access control, and infrastructure services.

Our services are used by three types of users: Administrators (building managers and developers), Residents, and Visitors. This policy applies to all users regardless of their role.

2. Information We Collect

Administrator Information

Name, email address, phone number — used for account creation and building management. This information is not shared with third parties.

Resident Information

Name, email address, phone number — used for account creation, video calls, and notifications. This information may be shared with email service providers and building administrators as necessary for service delivery.

Visitor Information

Video/audio recordings and screenshots captured during building entry — stored in a secure database. This information is accessible to building administrators, and screenshots may be sent to residents for verification purposes.

We adhere to limited collection principles and do not collect sensitive personal information unless voluntarily provided. We may also receive information from third parties such as employers or building owners.

3. Your Rights

Under applicable privacy laws (PIPEDA, Quebec Privacy Act as modified by Act 25, and CCPA for California residents), you have the right to:

  • Withdraw your consent at any time
  • Request erasure of your data (subject to legal retention requirements)
  • Access and port your personal information
  • Correct inaccurate information
  • Opt out of marketing communications
  • Know how your data is shared

We do not sell personal information.

4. Data Sharing

We may share your information in the following circumstances:

  • Residents: Information shared with building administrators and email service providers
  • Visitors: Information shared with residents and administrators
  • Infrastructure providers: DigitalOcean and Google Cloud Platform for hosting
  • Law enforcement: When legally required

5. Email Communications

Email communications are managed via third-party email service providers. You may unsubscribe from marketing emails at any time, except for account-related communications necessary for service delivery. We comply with CASL (Canadian Anti-Spam Legislation) and the CAN-SPAM Act.

6. Cookies & Tracking

We use cookies for authentication, platform access, and fraud detection. Non-essential cookies are disabled by default and require opt-in consent. You can manage cookies through your browser settings.

7. Data Security

We implement technical and organizational safeguards to protect your information, including SSL/TLS encryption, staff training, access controls, and data breach notification procedures. Our hosting providers (DigitalOcean and Google Cloud Platform) maintain industry-standard security practices.

8. Data Retention

Personal information is retained only as long as necessary for the purposes described in this policy. Account data is retained while your account remains active. We maintain retention and destruction frameworks with defined staff roles.

9. Quebec-Specific Protections

For data transfers outside Quebec, we conduct Privacy Impact Assessments (PIA) and maintain Data Processing Agreements (DPA) with all service providers, in compliance with Quebec's privacy legislation.

10. Children's Privacy

We do not intentionally collect information from children under 16. If we become aware that we have inadvertently collected such data, it will be promptly deleted.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website and platform. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact & Complaints

Chief Privacy Officer: privacy@productshop.io

602-2365 rue Saint-Patrick, Montreal, Quebec

Complaints:

  • Canada (outside Quebec): Privacy Commissioner of Canada
  • Quebec: Commission d'accès à l'information