Privacy Policy

1. Who Is Responsible for Your Data

Offr is operated by Malik Cloutier (Québec, Canada). If you have questions about how we handle your data, email malik.cloutier@videotron.qc.ca.

2. What We Collect

We only collect what we need to run the service:

• Account information — your name and email address when you sign up.
• Business content — client names, project details, and line items you enter into proposals. This content belongs to you.
• Payment information — your Stripe customer ID and subscription status. We never see or store full card numbers; Stripe handles that.
• Usage data — IP addresses, browser type, pages visited, and proposal view counts. Used to operate and improve the service.
• Session data — a session cookie to keep you logged in.

3. How We Use It

We use your data to provide and improve Offr, send transactional emails (account verification, password reset, payment receipts), handle billing via Stripe, and respond to your support requests. We do not sell your data or use it for targeted advertising beyond the Meta Pixel described in section 5.

4. Sub-processors

We share data with the following third parties, strictly to operate the service:

• Neon (database hosting) — stores your account and proposal data.
• Stripe (payments) — processes subscription billing.
• Postmark (email) — delivers transactional emails.
• Render (hosting) — runs the Offr application.
• Vercel / Polsia — infrastructure and proxy services.

Each sub-processor is bound by a data processing agreement and is prohibited from using your data for their own purposes.

5. Cookies and Tracking

We use one session cookie to keep you authenticated. We also load the Meta Pixel, which tracks page views and may set cookies for advertising measurement. The Meta Pixel only fires after page load — no data is sent before the page is visible.

You can opt out of Meta's tracking via Facebook's privacy controls or by disabling cookies in your browser.

6. Your Rights

Under Quebec Law 25 and GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Correction — ask us to fix inaccurate data.
• Deletion — ask us to delete your account and all associated data.
• Export (portability) — request your proposals and account data in a machine-readable format.

To exercise any of these rights, email malik.cloutier@videotron.qc.ca. We will respond within 30 days.

7. Data Retention

We retain your account and proposal data for as long as your account is active. When you request deletion, we remove your personal data within 30 days, except for financial transaction records which we retain for 7 years as required by Canadian tax law.

8. Security

We use industry-standard security practices: HTTPS everywhere, hashed passwords, encrypted database connections, and limited employee access to production systems. No system is 100% secure — if you discover a vulnerability, please report it to us.

9. Changes to This Policy

If we make material changes, we'll notify you by email at least 14 days before they take effect and update the date at the top of this page.