Privacy Policy

Wilsoft Solution Inc., Shawinigan (Quebec), Canada, is responsible for the personal information processed by the Wilsoft Go app and website.

• Person in charge of the protection of personal information: the person with the highest authority at Wilsoft Solution Inc. holds this role. Contact: contact@wilsoftsolution.ca.
• Representative in the European Union (Article 27 GDPR): [TO BE COMPLETED: name and contact details of the representative in the European Union].

This policy complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

• Account: first and last name, email, phone, province or region, language, login identifiers (including Apple or Google if you use them).
• Profile: profile photo (optional), average rating and reviews received.
• Verification: identity documents and information, when you ask to be verified; for drivers, vehicle make, model, colour, plate and photo.
• Listings, trips and parcels: parcel description, departure and arrival locations you enter, dates, times, seats, prices, statuses and timestamps.
• Parcel recipient: name and phone number, entered by the sender.
• Communications: messages between users, proof photos before and after delivery, messages sent to our support.
• Payment: amounts, currency, fees, taxes, status, payment method and last four digits of the card. Full card details and, for payouts, bank details are handled by our payment provider, not by Wilsoft.
• Technical: device identifier, notification token, app version, crash reports and error logs.
• Preferences: whether you want to receive promotional notifications.

We do not continuously collect your GPS location: locations are those you enter.

• Providing the service (account, listings, bookings, tracking, messages, receipts): performance of the contract (Art. 6(1)(b) GDPR).
• Payments, payouts and refunds: performance of the contract; accounting and tax obligations: legal obligation (Art. 6(1)(c)).
• Safety, verification, fraud prevention, reports and disputes: legitimate interest in protecting users and the service (Art. 6(1)(f)).
• Error diagnosis and performance: legitimate interest (Art. 6(1)(f)).
• Promotional notifications and the website's advertising pixel: consent (Art. 6(1)(a)), which you can withdraw at any time.

We do not sell your data and do not use it for targeted advertising in the app.

• Other users: only what is useful for the match (first name, photo, rating, reviews, vehicle, places and times), then what is needed to meet once the booking is confirmed.
• Supabase: hosting of the database, files and authentication.
• Stripe: payments, payouts and refunds.
• Resend: sending automated emails (confirmations, payments, refunds).
• Google Firebase: push notifications and crash reports.
• Apple and Google: sign-in, if you choose those accounts, and app distribution.
• Vercel: website hosting.
• OpenAI: the website's advertising measurement pixel, only if you accept it.
• Authorities: where required by law, or to protect a person's life or safety.

The sender can share a tracking link (wilsoftgo.wilsoftsolution.ca/suivi/…). The link contains a random code and only shows the status, departure and arrival cities and provinces, dates and the carrier's first name. It never shows an address, phone number, recipient's name, last name or identifier. Anyone with the link can see this information: share it only with the recipient.

• Statistics: we count views and clicks on each listing. For a visitor who is not signed in, no identity is recorded. For a signed-in user, only the internal identifier is recorded; it is never shown to businesses or to the teams who view the statistics.
• Businesses: they only receive totals (number of views and clicks).
• External sites: a site opened from the directory applies its own privacy policy.
• Listing requests: we use the business's and contact person's details to process the request, send the payment link and manage the listing.

Wilsoft is located in Canada, which the European Commission recognises as providing adequate protection for commercial organisations. Our providers (Supabase, Stripe, Resend, Google Firebase, Vercel, OpenAI) may process data outside the European Union, including in the United States. These transfers rely on an adequacy decision, on the EU–US Data Privacy Framework where the provider participates in it, or on the European Commission's standard contractual clauses. You can request a copy at contact@wilsoftsolution.ca.

• Account and profile: as long as your account is active. After the account is deleted, this data is deleted or anonymised, except as stated below.
• Transactions and accounting records: for the period required by law (ten years for accounting records, Article L123-22 of the French Commercial Code).
• Identity verification, messages and proof photos: for as long as needed for the safety of the service and to handle disputes, then deleted with the account (subject to the archive described below).
• Archive after your account is deleted: when you delete your account, your information is no longer used; an archive is kept securely, with limited access, for as long as the law requires (in particular for accounting, taxes, fraud prevention and disputes), for no more than 7 years (10 years for accounting records where the law requires it), and is then destroyed.
• Dispute, fraud or request from authorities: relevant data is kept until the end of the proceedings and of the legal limitation periods.
• Website: market cookie (wg_locale) 30 days; choice about advertising cookies 6 months.
• Directory statistics: kept as totals.

We take reasonable measures to protect your data: limited access, encrypted connections, access rules in the database. In the event of a data breach, we document it and, where required by law, notify the CNIL and the people concerned.

• Access, rectification and erasure of your data.
• Restriction and objection, in particular to processing based on legitimate interest.
• Portability of the data you provided to us.
• Withdrawal of consent at any time, without affecting what was done before.
• Instructions on what happens to your data after your death.

Write to contact@wilsoftsolution.ca. We reply within one month, which may be extended by two months for a complex request, and may ask you to confirm your identity. You may lodge a complaint with the CNIL (cnil.fr).

• Booking notifications: sent when useful (booking, payment, message, departure reminder).
• Promotional notifications: limited in number and never at night; you can turn them off at any time in your profile.
• Website: a functional cookie (wg_locale) remembers your market. OpenAI's ad measurement pixel only loads after you accept; refusing has no effect on the site. You can change your mind with the "Cookies" link at the bottom of the page.

The app automatically calculates suggested prices, caps and refunds using fixed, published rules. No account suspension is decided in a fully automated way: a person reviews each case.

The service is for people aged 18 or older. We do not knowingly collect data about minors. If you believe a minor has given us data, write to us at contact@wilsoftsolution.ca and we will delete it.

We may update this policy. The update date appears at the top of the page. For a significant change, we notify you in the app or by email.