Canada privacy

The person in charge of the protection of personal information is our Privacy Officer, reachable at privacy [at] redactfirst.app. Postal address: see the legal notice.

We collect only what we need: your name, email and message when you contact us; order and license details from Lemon Squeezy when you buy; error reports from the app, which contain no files or document contents; and, with your consent, website analytics. The full list, purposes and retention periods are in our privacy policy. RedactFirst never sends us your documents; they are processed only on your computer.

Lemon Squeezy is a Stripe company. Card payments are processed on Stripe’s infrastructure, with Stripe acting for Lemon Squeezy. We never receive your card details.

To keep the app stable and secure, the app sends error reports to Sentry (Functional Software, Inc., USA), our service provider. A report contains the error type and message (with file paths, quoted text, your home folder and user name removed), the stack trace, the app version, the operating system and its version, the computer model and processor architecture, a random installation identifier and your IP address, which Sentry receives with every report and may store with it. Reports never contain your files, document contents, the texts you redact or license keys.

Crash reports are always sent, because we need them to fix crashes. Other reports are sent only while Settings > Privacy & data > Send diagnostics is on; it is on by default, and you can withdraw your consent to them at any time by turning it off. Sentry stores reports in the United States under its data processing terms, where courts and authorities may access them, and deletes them after 90 days.

We ask for express consent before any analytics runs, and analytics is off by default, as Law 25 requires for technologies that track you. You can withdraw consent at any time through “Your privacy choices” in the footer, subject to legal or contractual restrictions.

You can ask to see the personal information we hold about you, to have it corrected, or, in Quebec, to have it de-indexed or receive it in a structured, commonly used technological format. We answer within 30 days, free of charge.

Our service providers (Vercel, Cloudflare, Lemon Squeezy and Sentry) store and process data in the United States. Before using a provider we assess its safeguards, and our agreements require protection comparable to Canadian law. Information processed in another country may be accessed by its courts and authorities.

We keep a register of confidentiality incidents. If an incident presents a risk of serious harm, we notify the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec, and the people affected, as the law requires.

The RedactFirst app is available in French (Canada). You may write to us in French and we will answer in French.

• Office of the Privacy Commissioner of Canada: priv.gc.ca
• Quebec: Commission d'accès à l'information du Québec (cai.gouv.qc.ca)

Please contact us first; most questions are resolved quickly.