1. Person in charge of the protection of personal information
Mohammed Amine El Galai, owner — confidentialite@vektalo.com.
2. Information we collect and why
| Situation | Information | Purpose |
|---|---|---|
| Visiting the site | No tracking cookies or advertising analytics. Our host keeps technical logs (IP address, browser) for security. | Site security and operation |
| Account and purchase | Name, email, company (optional), country and province/state, order and licence history | Deliver the software, manage the licence, account emails, accounting obligations |
| Payment | Processed by Stripe. We never see or store your full card number. | Payment, taxes, fraud prevention |
| Software activation | Device identifier (generated by the software, not tied to your name), device name, software and CAD versions, last check date | Verify the licence and the number of allowed devices |
| Diagnostics (only with your consent) | Application log, operating system, CAD version, error description | Fix problems and answer support requests |
| Support | Your messages, email, phone number if you call | Answer your request |
We do not sell your information or use it for targeted advertising. Our software never transmits the content of your CAD files.
3. Consent
We collect information with your consent, or when needed to perform the licence agreement or comply with the law. Diagnostics are off until you turn them on, and you can withdraw consent at any time in the software settings or by writing to us.
4. Service providers and processing outside Québec
- Google (Firebase, Google Cloud, Google Workspace): website hosting, accounts, licences, email. Account and licence data are hosted in the Montréal (Canada) region where the service allows; some Google services may process data in the United States.
- Stripe: payments, taxes and invoicing. Stripe acts as merchant of record for your purchases and processes payment data under its own privacy policy; this data may be processed outside Canada.
- Fongo: company telephone (calls and voicemail).
Before communicating information outside Québec, we assess whether it will receive adequate protection, as required by law.
5. Retention
We keep information while your account is active, then as long as required by law (accounting records: 6 years). Diagnostics are deleted after 12 months. Information no longer needed is destroyed or anonymized.
6. Security
Access limited to authorized people, two-factor authentication on our accounts, encrypted communications (HTTPS), default-deny access rules on our databases. If a confidentiality incident presents a risk of serious injury, we notify the affected people and the Commission d'accès à l'information.
7. Your rights
You may request access, correction, deletion where the law allows, a copy in a structured, commonly used technological format, and withdraw consent. Write to confidentialite@vektalo.com; we answer within 30 days. You may also contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or, outside Québec, the Office of the Privacy Commissioner of Canada (priv.gc.ca).
8. Children
Our products are for professionals. We do not knowingly collect information about people under 14.
9. Changes
Changes are posted on this page with their date; we notify you by email of any significant change.