1. Who we are
Pigedeck is sales management software for consultants and small firms. It is operated by Mormind Inc., an Ontario corporation, 192-1769 St. Laurent Blvd, Ottawa (Ontario) K1G 3V4, Canada ("Mormind", "we").
This policy explains how we handle personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for individuals and customers in Quebec, the Act respecting the protection of personal information in the private sector (Law 25).
2. Privacy Officer
Our Privacy Officer is accountable for the handling of personal information. You can write to privacy@pigedeck.com or to the postal address above. Contact details and the complaints process are on the Privacy Officer page.
3. Scope and roles
- We are responsible for your account information, the waitlist, technical logs and the audience measurement of the public website.
- For the content you enter (projects, contacts, amounts, calendars, attached files), we act as a service provider processing that information on your behalf: your organization remains accountable for it, and we process it only to provide the service, under the Data Processing Annex of the terms of use. For Quebec customers, we act as a mandatary within the meaning of section 18.3 of Law 25.
- You must be entitled to enter your own contacts' information in Pigedeck.
4. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account | email address, password (stored hashed), organization name, preferences (language, hidden amounts) | you, at sign-up and in the settings |
| Customer content | projects, contacts, amounts, calendars, attached files | you (we process this content on your behalf, see section 3) |
| Waitlist | email address, language, consent | public website form |
| Consents and acceptances | cookie choices, accepted version of the terms and date | you |
| Technical logs | IP address, browser, requested address, date and time | your browser, automatically |
| Error reports | technical account and organization identifiers, requested address without parameters; errors that occur in the browser are sent directly to our provider Sentry, which then receives your IP address | automatically |
| Audience measurement of the public website | _ga cookie identifiers, pages viewed | Google Analytics, only after your consent |
We do not collect payment card numbers. When paid subscriptions are offered, payments will be handled by a payment provider and this policy will be updated.
5. Purposes
We use this information to: create and manage your account; provide the features of the service; keep it secure and prevent abuse; answer and help you; inform you of significant changes to the service or its legal texts; measure the audience of the public website (with your consent); and, later, bill the subscription. We do not sell personal information and we do not run targeted advertising.
6. Consent
By creating an account, you consent to the processing needed for the service described here. No non-essential cookie is set without your consent: the most protective settings apply by default. You may withdraw a consent at any time (cookie settings, unsubscribe, account deletion); withdrawal may prevent the use of some features. Pigedeck uses no identification, location or profiling feature [to be confirmed].
7. Cookies
| Name | Purpose | Duration | Set by |
|---|---|---|---|
sb-…-auth-token | sign-in session of the application (strictly necessary) | extended session, until sign-out | Pigedeck (Supabase) |
pd_locale | chosen language (strictly necessary) | 1 year | Pigedeck |
pd_hide_amounts | hidden amounts (strictly necessary) | 1 year | Pigedeck |
pd_consent | remembers your cookie choices | 6 months [to be confirmed] | Pigedeck |
_ga, _ga_<ID> | audience measurement of the public website, only after consent | up to 13 months |
You can change your choices at any time with the "Cookie settings" link at the bottom of the public website.
8. Disclosure to third parties and subprocessors
We entrust some processing to providers (hosting, database, email delivery, error monitoring, backups, monitoring, audience measurement). They are bound by contract and may use the information only for those purposes. Their current list, with their processing countries, is on the Subprocessors page; we give notice before adding one. Google is involved for the audience measurement of the public website (after consent) and, to be confirmed, for the inbox of our email addresses. We disclose information to other third parties only when the law requires it.
9. Processing outside Canada
Some providers process information in the United States or the European Union (details per provider: Data location). The information may then be accessible to the authorities of those countries under their laws. The region of some services is being verified [to be confirmed].
10. Retention and backups
- Account information and customer content are kept as long as the account exists. After a deletion request, a 30-day grace period allows you to cancel; the organization and the account are then deleted.
- Database backups are encrypted and kept 90 days; deleted data therefore leaves the backups at most 90 days after its deletion. Attached files are not backed up.
- Technical logs are kept for a limited time [to be confirmed: 14 days intended].
11. Security
We protect information with safeguards appropriate to its sensitivity: encryption in transit and at rest, isolation of each organization's data at the database level, encrypted backups, two-factor authentication on our providers' administration accounts. Our staff do not access our customers' content, except where required by law or for a security incident, and then only as strictly necessary. If a breach creates a real risk of significant harm, we notify the affected individuals and the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d'accès à l'information.
12. Your rights
You may ask to access your information, to correct it, to withdraw your consent or to delete your account. Several of these actions are available in the application; otherwise, write to privacy@pigedeck.com. We reply within 30 days and may ask you to confirm your identity. Quebec residents may obtain their computerized information in a structured, commonly used technological format. For content entered by a customer organization about its contacts, we forward the request to that organization and help it respond.
13. Complaints
Please address your complaint to our Privacy Officer first (privacy@pigedeck.com). If you are not satisfied with our reply, you may contact the Office of the Privacy Commissioner of Canada or, if you live in Quebec, the Commission d'accès à l'information du Québec.
14. Professional use
Pigedeck is intended for adult professionals. We do not knowingly collect information from minors.
15. Changes
We publish any substantive change to this policy at least 30 days before it takes effect and notify you by email and in the application. The version history is at the bottom of this page.