Last updated: 2026-10-16 (DRAFT — requires review by a Quebec lawyer before launch)
DRAFT — requires review by a Quebec lawyer before launch. Version 2026-10-16 (CURRENT_TERMS_VERSION). Full counsel-ready text lives in docs/legal/privacy-en.md; this page is a public summary. Legal entity: [LEGAL ENTITY TBD]. Sync apps/www with the markdown after counsel approval.
[LEGAL ENTITY TBD] (“Keefa”) provides a multi-tenant cloud ERP for Quebec and Canadian businesses. Privacy Officer (Law 25): [Name TBD] — interim contact info@keefa.ca until a named officer is designated.
For website visitors and leads you send us, Keefa is typically the controller. For customers, vendors, employees, and files you store in the ERP, you (the tenant) are the controller and Keefa is the processor under our DPA.
Website: contact details, technical data (IP, browser), optional analytics. Services: tenant users (identity, MFA, roles), business records you enter, files (EXIF/GPS stripped on ingest), audit logs, Kai prompts and usage metadata, billing via Stripe, and transactional email metadata via Resend SMTP/API.
We use personal information to provide, secure, and support the Services; authenticate and isolate tenants; bill subscriptions and Kai packs; send transactional email; prevent abuse; and operate Kai. We do not sell personal information. Kai output is not legal, tax, or accounting advice.
Customer ERP application and database hosting are in Quebec at OVHcloud Beauharnois (BHS). Each customer is a separate tenant with row-level security. Some subprocessors (xAI/LLMs for Kai, Stripe, Cloudflare, Resend) may process data outside Quebec or Canada.
Key providers include OVHcloud (BHS Quebec), Cloudflare, Stripe, Resend (transactional email), and xAI (Kai AI inference), plus planned LLM vendors. See docs/legal/subprocessors.md for the draft schedule.
Under Quebec’s Law 25 and applicable Canadian privacy law, you may request access, correction, or deletion of personal information, subject to legal limits. For Keefa-controlled data: info@keefa.ca. For data inside a customer tenant: contact that organization’s administrator first.
To report a confidentiality incident or potential privacy breach involving Keefa, contact info@keefa.ca (label confidentiality incident / breach notification).
Privacy questions, rights requests, or incident notices: info@keefa.ca. [LEGAL ENTITY TBD] — postal address and NEQ TBD (do not invent).