Privacy policy

3.1. Normative Framework and Scope of Application

This Privacy Policy governs the collection, retention, analytical processing, communication, pseudonymization, and destruction of personal information within the Leesee digital ecosystem. It has been drafted in rigorous compliance with Quebec’s Law 25 (Act to modernize legislative provisions as regards the protection of personal information) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

3.2. Exhaustive Inventory of Stored Nominative and Sensitive Data

Within the strict framework of the contractual execution of our matchmaking services and to guarantee institutional trust within the community, Leesee collects and hosts the following categories of data, which are deemed necessary and proportionate to the purpose of the service:

• Civil Identification and Contact Data: First name, last name, declared gender (female, male, other), full residential address, postal code, email address, and cellular phone number.
• Authentication and Profiling Data: Primary language of use, date of birth (collection mandatory to satisfy regulatory requirements for verifying legal capacity and minimum age imposed by Apple and Google app store operators), profile photograph, and systemic timestamp markers related to the identifier's lifecycle (creation, suspension, reactivation, definitive closure).
• Transactional and Governance Data (Leesee Services / Leesee Tools): History of reports, formal complaints structured by geographic zone, logs of borrowing, donations, exchanges, and rentals of services or tools, and metadata of published listings.
• Internal Telecommunication Data: Textual content of private messages, cryptographic identifiers of the sender and recipient, and transactional timestamps.

3.3. Ephemerally Processed Data (Non-Persistent)

In accordance with the fundamental principle of data minimization (Article 5 of Law 25):

• High-Precision Geolocation: Exact GPS coordinates of latitude and longitude are processed exclusively in the volatile memory (RAM) of the terminal. This purpose is strictly limited to displaying the user's position on the interactive cartographic interface. This telemetry data is never transferred for persistence in any relational database. Leesee’s algorithms apply voluntary geographic obfuscation, ensuring that the absolute spatial position of a user, tool, or listing is never publicly exposed.
• Financial and Biometric/Documentary Authentication Data: The submission of payment instruments or official identification documents is not subject to any contractual obligation for access to basic functionalities. If the user requires these optional services (e.g., paying for a rental in Leesee Tools), cryptographic processing is delegated exclusively to Level 1 PCI-DSS certified third-party gateways. No banking data (PAN, CVV) is transmitted in clear text or hosted on Leesee’s sovereign infrastructure.

3.4. Cloud Hosting Architecture and Cross-Border Flows

To ensure enterprise-grade resilience, geographic redundancy, and security, Leesee’s data assets are hosted on Amazon Web Services (AWS) infrastructures. Furthermore, certain logical processing operations are delegated to Heroku (Salesforce) server instances. The data centers hosting these servers are physically located within the territory of the United States of America (US Region). In compliance with Article 17 of Law 25, Leesee has conducted an exhaustive Privacy Impact Assessment (PIA), concluding that information communicated outside Quebec benefits from adequate protection, corroborated by Standard Contractual Clauses (SCCs) ensuring compliance with Quebec privacy principles.

3.5. Strict Non-Commercialization Clause and Statutory Exceptions

It is expressly and irrevocably stipulated that Leesee rejects any practice of monetization, rental, syndication, or brokering (selling) of its clientele’s sensitive and personal data for the benefit of third-party entities. The external disclosure of personal information is strictly prohibited. Leesee will only cooperate with state authorities upon presentation of a search warrant, a competent court order, or a formal requirement expressly provided for by Law 25 (notably the exception aimed at preventing an act of violence involving an imminent risk of death or serious injury).

3.6. Exercise of Fundamental Rights of the Data Subject

The Quebec legislature grants citizens inalienable rights over their nominative data. You have the right to access the information concerning you, demand its rectification (inaccuracy, incompleteness), and require its permanent erasure (right to de-indexing and to be forgotten). You also have the right to withdraw your consent at any time and the right to the portability of your data in a structured, commonly used, and machine-readable technological format. Leesee's Privacy Officer (PRP) is responsible for enforcing this policy. Any request must be addressed to them via the support center and will be processed within the strict legal timeframe of thirty (30) days.