Français · English
This document follows the spirit of Quebec's Law 25 but is not legal advice.
Application published by Benjamin Maingueneau, residing at
221 chemin de Wexford, Shannon (Quebec) G3S 0Y8, Canada.
Officer in charge of the protection of personal information:
Benjamin Maingueneau — etatdeslieux.assistance@gmail.com.
The application is a tool. You (landlord or property manager) are responsible for the information collected about your tenants and third parties. We are responsible for what we process to operate the service: your account, your tokens and the sealing (§4).
By default, your condition-report data stays on your device. We do not host any central database of your condition reports.
On your device (under your control)
| Information | Purpose |
|---|---|
| Names and emails of the landlord and tenants | Identify the parties |
| Photos of the dwellings | Document the condition report |
| Handwritten signatures | Attest to the parties' agreement |
| GPS position at the moment of a signature | Strengthen evidentiary value — captured with consent, never blocking; only its presence appears in the PDF |
| Inspection data and audit log | Produce and seal the report |
Processed by our services (sealing and tokens)
| Information | Purpose | Hosting |
|---|---|---|
| Google identifier and email | Authentication | Google (Canadian regions) |
| Token balance and history | Purchases and debit on sealing | Firestore, northamerica-northeast1 (Montreal) |
| PDF document submitted for sealing | Apply the seal | northamerica-northeast1 — not retained |
| Purchase data | Payment | Google Play Billing |
Camera / photos: photos of the condition report. Location: timestamping a signature (with consent, never blocking). Internet: sealing and tokens.
Google (Firebase, Cloud Functions, Firestore, Cloud KMS, Play Billing) — processor, data in Canadian regions. DigiCert (RFC 3161 timestamping, United States) — receives only a fingerprint (hash), no personal information. We do not sell your personal information.
Processing is carried out primarily in Canadian data centres. The only disclosure outside Quebec is the sending of a non-identifying fingerprint to the timestamping authority (United States).
On the device: as long as you keep the condition report (deletion and purging offered). Tokens / account: as long as the account exists. Documents submitted for sealing: not retained.
Access, correction, withdrawal of consent, deletion, and complaint to the Commission d'accès à l'information du Québec (CAI). To exercise a right, write to the officer (§1). Response within 30 days.
Communications encrypted in transit, cryptographic seal of documents, signing keys protected by Cloud KMS (never embedded). In the event of an incident presenting a risk of serious harm, we will notify the persons concerned and the CAI.
Application intended for professionals, not for persons under 18 years of age.
Any significant change will be reported in the application and by the date above.
Benjamin Maingueneau — Officer in charge of the protection of personal information — etatdeslieux.assistance@gmail.com.