Privacy policy

01The person responsible for personal information

monSpot is operated by Groupe Bien-aime.

Any question, any access request and any complaint can go to them at info@email.monspot.ca.

02Two situations, not to be confused

Your seller information is ours in responsibility: we decide why we collect it and we answer for protecting it.

Your customers' information belongs, in responsibility, to the seller they ordered from. We host it on that seller's behalf, only to run the service, and we follow their instructions. If you ordered from a seller and want your details removed, write to them; write to us if you cannot reach them and we will bridge it.

03What we collect

From sellers, at sign-up and while they use the service:

• name, email address and, if you give it, phone number;
• your business name, your city, your address and postal code, your language, your timezone and your currency;
• what you publish: story, photos, catalogue, prices, selling dates;
• the label of your payment methods, for example "Interac transfer", never the address or number that goes with it;
• your expenses and receipts if you use the finances section;
• the technical logs needed to run and secure the service.

04What your customers give the seller

When ordering: name, phone number, sometimes email, the contents of the order, and a delivery address where the seller delivers. On a waitlist: name and phone number.

No payment information is collected, not by the seller through monSpot and not by us. There is no account to create in order to place an order.

05Why we collect it

For these purposes and no others:

• to create and keep your account, and to display your public page;
• to record orders and appointments, and let the seller prepare and hand them over;
• to let you reach your customers about their order;
• to show in the marketplace the sellers who asked to be there;
• to keep the service secure, prevent fraud and meet our legal obligations.

06Consent

Most of this information is necessary to perform the contract between us: without it the service does not work.

Marketplace listing is different: it is off by default, it takes a deliberate act on your part, and we record the date of that act. You can withdraw it at any time with no effect on the rest of your account.

07Who else has access

Nobody buys it and we sell none of it. Providers involved in running the service:

• Supabase, for the database, authentication and photo storage.
• OpenStreetMap (Nominatim), only when a seller searches for their city in their marketplace settings. The text typed is sent to that service; no customer data ever is.

08WhatsApp links

monSpot prepares messages you can send your customers over WhatsApp. We send nothing ourselves: you press the button, and the message leaves from your device through your own WhatsApp account. What WhatsApp then does with that message is governed by its own terms.

09Communication outside Quebec

Our hosting providers may process or store information outside Quebec.

Before entrusting information to a provider we assess the protection it offers and frame the relationship by contract.

10How long we keep it

Account information is kept while the account exists, then destroyed or anonymised within 90 days of its closure.

Orders and accounting records are kept for as long as tax law requires, currently six years.

A waitlist entry is deleted at the person's request, or when the seller closes their account.

11How we protect it

Access is controlled in the database itself: a seller can read only their own rows, and that rule is enforced by the server, not just by the interface.

Public photos sit in a public space because they are meant for a public page, under filenames nobody can guess and with no way to list the contents. Receipts sit in a private space, reachable only through a signed, temporary link.

We hold no payment data at all, which takes the most sensitive category of information out of the system.

12Automated decisions

No decision about you is made solely by automated processing. Marketplace ranking puts sellers with an open sale first; that is a display order, not a decision about you.

13Your rights

By writing to info@email.monspot.ca, you can:

• ask for access to the information we hold about you;
• have it corrected if it is inaccurate or incomplete;
• ask for its deletion where we no longer have a reason to keep it;
• ask us to stop disseminating it, or to remove a link leading to it;
• receive the information you gave us in a structured, commonly used technological format;
• withdraw a consent you had given, for example your presence in the marketplace.

14If our answer does not satisfy you

We answer within 30 days. If our answer does not suit you, you can complain to the Commission d'accès à l'information du Québec.

15Confidentiality incidents

We keep a register of confidentiality incidents. Where an incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned with diligence.

16Cookies and technologies

With your permission, monSpot uses Google Analytics to understand the use of its public pages. It stays disabled until you accept analytics cookies. We use no advertising pixel or social network tracker. Details are in the cookie policy.

17Changes

We may change this policy. The update date at the top of the page marks the version in force, and we flag significant changes in the service.