Privacy Policy

1. Who we are and who to write to

Reventis Technologies is a Quebec, Canada company. The person in charge of the protection of personal information is Victor Moroni, founder.

For any question, access or correction request, or complaint, write to bonjour@reventis.io. We reply within 30 days.

2. What we collect and why

We only collect what is needed to reply to you or to deliver the service. There are four situations.

• Demo request (website form): first and last name, work email, company name, accounting software and, if you wish, the number of documents per month and a phone number. Purpose: set up a demonstration and get back to you about it. This information reaches us by email. Your name, email and phone number are not stored in a database; our mail system only keeps a technical log of the sending (date, recipient at Reventis, sending status, your company name) for audit purposes.
• Invited user account: name, work email, password (hashed, never readable), authentication factors. Purpose: identify you and protect access.
• Business data entrusted by your company: documents (invoices, receipts, bank statements), proposed and approved entries, processing rules, access token to your QuickBooks Online (encrypted). Purpose: deliver the service your company entrusts to us. These documents may contain information about third parties (suppliers, customers): we process them only to keep your books.
• Technical logs: security events and action log (time, author, action, document concerned), reduced or hashed IP address, never raw. Purpose: security, abuse prevention, traceability of every action — yours and the agent’s.

We seek no sensitive information (social insurance number, health, opinions). No profiling, no sale of information, no advertising. We do not use your data to train an artificial-intelligence model.

3. The role of artificial intelligence

The agents read your documents and propose entries. They decide nothing: a person approves each proposal before it is recorded in your books. Each proposal cites the document it comes from; what the agent cannot read, it says so instead of making it up.

Reading by the AI model is performed by Anthropic, in the United States, under contract, with no training on your data. Only the content needed to read a document is sent to it, for the time it takes to process it.

Your data is stored in Canada; reading by the AI model takes place in the United States, with no training on your data.

4. Where your data is hosted

• Database and files: Supabase, region ca-central-1 (Montreal, Canada).
• Application: Vercel, functions run in the Montreal region.
• Emails (demo requests, invitations, notices): Resend, servers in the United States.
• Accounting connection: Intuit QuickBooks Online. Your books stay in your Intuit account and are subject to Intuit’s terms. Reventis writes what you have approved and keeps only a read copy.

Some processing therefore takes place outside Quebec (reading by the AI model and email sending in the United States). This communication outside Quebec is declared in accordance with Law 25 and rests on a privacy impact assessment that we keep up to date.

5. Our subcontractors

We rely on five providers, each bound by contract and limited to its function: Supabase (database and files), Vercel (application), Anthropic (reading by the AI model), Resend (emails) and Intuit (connection to QuickBooks Online). No other third party receives your information. We use no payment service and no audience analytics tool.

6. Your rights

At any time, you may:

• access the information we hold about you;
• have it corrected if it is inaccurate or incomplete;
• withdraw your consent for what is not necessary to the service;
• obtain your data in a structured, readable format (portability);
• request its deletion, within the limits of your company’s accounting and tax obligations;
• file a complaint with the Commission d’accès à l’information du Québec.

To exercise a right, write to the person in charge at bonjour@reventis.io. We reply within 30 days and may ask you to confirm your identity before acting.

7. How long we keep your information

• Demo request: in Reventis’s mailbox, deleted as soon as it is no longer useful and at the latest 12 months after receipt.
• Account and business data: for the duration of your company’s access, then 90 days to export, then deletion.
• Security logs and action log: kept for audit, without raw IP address.

8. How we protect your information

Encryption in transit and at rest; encrypted integration tokens; segregation by company in the database (each company sees only its books); two-factor authentication for accounts; time-limited sessions; Reventis’s access limited to its founder, logged. No measure is perfect: we keep them up to date and we test them.

9. In case of a confidentiality incident

We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we notify the Commission d’accès à l’information and the persons concerned with diligence, as Law 25 requires, and we take measures to limit its consequences.

10. Cookies

The public website uses no tracking cookie. The application uses only technical cookies: session, security and language choice. No advertising tracker, no audience analytics tool.

11. Changes to this policy

The version in force is always published at this address, with its date. Any important change is announced by email to account holders before it takes effect.