Privacy Policy

This policy explains what personal information Locu Vie collects, why, where it goes, and the rights you have over it, as required by Québec’s Law 25 and Canada’s PIPEDA. It covers the application at yulnet.com.

• Account information: your name and email address, held by our authentication provider.
• Business records you enter: pharmacies you work with (including their contact details), shifts and rates, invoices, expenses and photographed receipts, and your GST/QST registration numbers and tax settings.
• Payment information: handled entirely by Stripe: your card number never reaches our servers. We keep only your subscription status. Your billing address is collected by Stripe to calculate GST/QST.
• Technical data: error reports when something breaks (scrubbed of personal content before they leave the app) and anonymous, cookieless page-view counts.

To run the Service you signed up for: keeping your records, generating your invoices, computing tax summaries, billing your subscription, answering support requests, and keeping the Service secure. We do not sell personal information, run advertising, or profile users.

The Service is built on a small number of specialised providers, each receiving only what its role requires:

• Stripe: subscription payments and GST/QST calculation (United States).
• Neon: the database holding your sign-in identity and your business records (United States, US-East).
• Vercel: application hosting, private file storage for receipts and archived invoice PDFs, and cookieless analytics (United States).
• Resend: sends the invoices you email to pharmacies (United States).
• Sentry: error monitoring (European Union; reports are scrubbed of personal content before sending).

Your information is stored and processed outside Québec: business records and files in the United States (US-East), and error telemetry in the European Union. These providers are bound by contractual safeguards, and we assessed this arrangement as offering adequate protection, but if cross-border storage is not acceptable to you, do not use the Service.

• We keep your information for as long as your account exists. A lapsed subscription never causes deletion; your records stay readable and exportable.
• Export: you can download everything the Service holds about you, in JSON, from the settings page at any time.
• Deletion: deleting your account from the settings page permanently removes your records from our database, including your sign-in identity, and your payment customer at Stripe. This is immediate and irreversible.
• Receipts and archived invoice PDFs live in private storage; links to them are access-controlled and expire.

All traffic is encrypted in transit. Files are held in private, token-gated storage. Error reports are scrubbed before leaving the application. Access to production systems is limited to the operator.

The Service uses only cookies essential to its operation: keeping you signed in and remembering your language. Page analytics are cookieless and anonymous (no personal information, no cross-site tracking), which is why you see no consent banner.

You may access, correct, export, or delete your personal information. The settings page covers all four without needing to ask. For anything else (or if you prefer a human), the person responsible for the protection of personal information is the operator of Locu Vie, reachable through the contact page. You may also complain to the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

If this policy changes materially, we will notify you in the app or by email before the change takes effect.