Privacy Policy

Last updated: May 2, 2026

Language (Quebec): Under the Charter of the French Language (Quebec), many consumer contracts and related information must be available in French, and French may need to prevail in certain cases. An official French version of these documents should be published or provided on equal footing. Until then, you may request a French copy at the contact email below.

1. Who we are

This Privacy Policy describes how [Legal name or registered corporation]("we", "us", "our") collects, uses, discloses, and protects personal information in connection with the online service branded "cielcat" (the "Service"), operated from Montreal, Quebec, Canada.

Contact (privacy): [contact email]
Mailing address: [Complete mailing address, including postal code, Montreal, QC, Canada]

2. Scope and application

This policy applies to personal information we collect about users of the Service, including visitors to our website, account holders, and purchasers. It is intended to align with Canada's federal Personal Information Protection and Electronic Documents Act(PIPEDA), as applicable, and Quebec's private-sector privacy regime, including the Act respecting the protection of personal information in the private sector (often referenced in relation to Quebec's modernized framework, including Law 25 amendments), where they apply to our activities.

If you access the Service from outside Canada, your information may be processed in Canada or other countries as described below.

3. Personal information we collect

Depending on how you use the Service, we may collect:

  • Account and authentication data: When you sign in with a third-party provider (such as Google), we may receive or store identifiers issued by that provider, your email address, display name, profile image URL, and session or security tokens managed through our authentication vendor.
  • Profile and onboarding data: Information you submit during onboarding (for example, a chosen username) and timestamps of acceptance of our Terms or Privacy Policy where we record them in your profile or metadata.
  • Technical and usage data: IP address, approximate location derived from IP, browser type, device type, pages viewed, timestamps, diagnostics, and similar logs needed to operate and secure the Service.
  • Payment-related data: If you make purchases, payment card details are processed by our payment processor(s); we typically receive limited information such as transaction identifiers, partial card metadata, billing region, and payment status, not your full card number, unless we expressly state otherwise in a checkout flow.
  • Support communications: Information you send us by email or through support channels.

4. How we use personal information

We use personal information to:

  • Provide, operate, maintain, and improve the Service;
  • Create and secure your account, authenticate you, and prevent fraud;
  • Process transactions, deliver virtual goods, and operate marketplace features if enabled;
  • Comply with legal obligations and respond to lawful requests;
  • Analyze aggregate or de-identified usage to understand performance and product trends;
  • Communicate with you about the Service, security, or policy changes;
  • Enforce our Terms of Service and protect rights, safety, and integrity.

5. Legal bases (Quebec and Canada)

We collect, use, and disclose personal information only for identified purposes that a reasonable person would consider appropriate in the circumstances. Depending on the activity, we rely on one or more of the following: your consent (for example, accepting this policy or optional cookies where required); performance of a contract with you (providing the Service you request); legitimate interests (such as security, debugging, and improving the Service) where those interests are not overridden by your rights; and legal obligation.

You may withdraw consent where processing is based on consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect our ability to provide certain features.

6. Cookies and similar technologies

We and our service providers may use cookies, local storage, and similar technologies for authentication, preferences, security, and, where enabled, analytics. Where required by law, we will obtain consent before using non-essential cookies or analytics. You can control cookies through your browser settings; blocking some cookies may limit functionality.

7. Disclosure and service providers

We may disclose personal information to:

  • Supabase (or comparable infrastructure) for authentication, database storage, and related backend services;
  • Google (or other OAuth providers) for sign-in, according to your relationship with that provider;
  • Hosting and analytics providers (for example, Vercel for hosting and, if enabled in production, Vercel Analytics) subject to their policies;
  • Payment processors to complete transactions you authorize;
  • Professional advisers (lawyers, accountants) and law enforcement or regulators when required or permitted by law.

We use contractual and organizational measures to require service providers to protect personal information and to process it only on our instructions or as required by law.

8. Cross-border processing

Our service providers may process or store personal information in Canada, the United States, or other countries. Those jurisdictions may have different data protection rules. Where required, we assess risks and use appropriate safeguards (such as contractual clauses or reliance on adequacy decisions) in line with applicable Canadian and Quebec law.

9. Retention

We retain personal information only as long as necessary for the purposes described unless a longer period is required or permitted by law (for example, tax, accounting, or dispute resolution). When retention ends, we delete or de-identify information in accordance with our practices and technical constraints.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

11. Your rights and choices

Subject to applicable law, you may have the right to request access to, correction of, or deletion of your personal information; to withdraw or vary consent; to obtain a copy of information in a portable format where required; and to object to or restrict certain processing. You may also have rights regarding automated decision-making; we do not use solely automated decisions that produce legal or similarly significant effects about you without human involvement, unless we tell you otherwise.

To exercise rights, email [contact email]. We may need to verify your identity before responding. You may also have the right to lodge a complaint with a supervisory authority.

12. Complaints (Quebec and Canada)

If you are in Quebec, you may file a complaint with the Commission d'accès à l'information du Québec (CAI). For federal private-sector matters under PIPEDA, you may contact the Office of the Privacy Commissioner of Canada (OPC). We encourage you to contact us first so we can try to resolve your concern.

13. Children

The Service is not directed to individuals under 14. We do not knowingly collect personal information from children under 14 without appropriate parental consent. If you are a parent or guardian and believe we have collected information from a child under 14, contact us and we will take appropriate steps.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Where required by law, we will provide additional notice or obtain consent.

15. Accuracy and third-party links

The Service may contain links to third-party sites or services. We are not responsible for their privacy practices. See their policies before providing personal information.