Privacy Policy
01Data controller
Metrrik App (“Metrrik”, “we”) is the controller of the personal data collected through the metrrik.com platform. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25.
This policy applies to information collected when you use our services, visit our website or contact our team.
02Data we collect
We collect the data needed to provide and improve the service, including:
- Account and organization: name, work email, job title, organization, role and account settings.
- Usage and interactions: pages viewed, actions taken, interface preferences and usage statistics.
- Billing: billing details and transaction history, handled by our payment provider.
- Documents and content: documents, invoices, supporting files and their metadata, comments and fields entered as part of the service.
- Communications: exchanges with our support team and your communication preferences.
- Technical data: IP address, device identifiers, browser, operating system and activity logs — used notably for security and fraud prevention.
- Country and language: from your IP address, we infer your approximate country and your browser’s language header to suggest the most suitable language and hosting region. This inference is used only to tailor the display; you can change this choice at any time, and it is then stored in a preference cookie.
This list may evolve as new features are introduced; this policy is then updated accordingly.
03How we use your data
Your data is used exclusively to:
- Provide, maintain and improve the Metrrik platform.
- Process transactions and manage your subscription.
- Send you account-related notifications.
- Respond to your support requests.
- Meet our legal and regulatory obligations.
We do not sell or rent your data to third parties. No data is used for advertising purposes.
04Legal basis for processing
In accordance with PIPEDA, we process your data on the basis of:
- Performance of the contract: processing needed to deliver the service you subscribed to.
- Consent: for marketing communications and non-essential cookies.
- Legitimate interest: service improvement, fraud prevention and security.
- Legal obligation: retention of billing data under Canadian tax law.
05Sharing your data
We do not sell or rent your personal data. We may share it only with:
- Providers: data hosting in a Canadian region (Supabase), application hosting (Vercel), payment processing, transactional emails (Resend), antivirus scanning and AI-based data extraction. Each is bound by a contractual confidentiality commitment.
- Integrations: OneDrive, Google Drive, Slack — according to your explicit settings.
- Authorities: if required by law, after careful review of any request.
06Data retention
We keep your data for as long as needed to provide the service, then for a reasonable period after cancellation so you can export or reactivate your account.
Some data is kept longer where required by law, in particular billing data in line with applicable tax obligations.
07Your rights
In accordance with PIPEDA and Law 25, you have the following rights:
- Access: obtain a copy of your data within 30 days.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion, subject to legal obligations.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to certain processing based on legitimate interest.
To exercise your rights, contact our data protection officer at the address below.
08Security
Metrrik applies encryption in transit (TLS 1.3) and at rest (AES-256), least-privilege access controls and access logging.
Our servers are hosted on Canadian soil. In the event of a breach, we notify the Commission d’accès à l’information and affected individuals within the legal timeframes.
09Cookies
We use only essential cookies (session, security, preferences). No audience measurement, advertising or third-party tracking cookies are deployed.
Among the preference cookies, we store your chosen language and region as well as whether that choice was automatically inferred from your country. These functional cookies are necessary for the service to display correctly and are not used for any tracking.
You can manage your preferences through our consent banner or your browser settings.
10Changes and contact
Any material change will be notified by email to active users at least 30 days before it takes effect.