Privacy policy
Agile Solutions — Last updated: July 6, 2026
We collect only the information necessary to process your financing application. Your sensitive data is encrypted at rest and in transit, in accordance with Quebec's Law 25 and PIPEDA. You may access, export or request deletion of your data at any time from your account.
Privacy officer
The person responsible for the protection of your personal data is Clemento Consultants. For any question or to exercise your rights: privacy@clemento.ca. Agile Solutions remains responsible for the processing of your information.
Certifications. Clemento Consultants holds ISO 9001, ISO 27001 and SOC 2 Type II certifications, reflecting our rigorous quality and information security practices.
Data we collect
- Identity and contact details: first name, last name, email, phone number (and extension).
- Business information: legal name, business number, address, industry, legal structure, website.
- Financial data: revenue, income and expenses, debt, estimated credit rating, and accounting data imported from QuickBooks (if you choose to connect your account).
- Uploaded documents: financial statements, statements and supporting documents.
- Consents and signatures: credit check authorization, electronic signature and consent log.
Data collected automatically
- IP address, browser and device type (user agent).
- Connection and activity logs (authentication, security).
- Cookies strictly necessary for operation (session, security).
- With your consent: audience measurement and advertising data (Google Analytics, Google Ads).
Why we collect this data
- Process your financing application and connect you with lenders.
- Communicate with you about your application.
- Comply with our legal, accounting and tax obligations.
- Prevent fraud and secure the portal.
- Improve our services and measure our campaigns (with your consent).
Partner referrals. A partner (business introducer) may refer you by sharing your contact details (name and email) with Agile Solutions, after attesting that they obtained your consent to do so. The application, consent and signing of the credit authorization are always performed by you. The partner can only see the status of your application (step, missing documents, outcome); they never see your personal information or the content of your documents.
Subprocessors (third parties handling your data)
| Role | Provider | Processing location |
|---|---|---|
| Database | Clemento Consultants (MySQL) | Quebec, Canada |
| Website hosting | Clemento Consultants | Quebec, Canada |
| Email (mailbox) | Google Workspace | United States |
| CRM | Zoho CRM | Canada |
| Transactional emails (automated) | Clemento Consultants | Quebec, Canada |
| Accounting data (QuickBooks) | Intuit Inc. | United States (primary), backup in Canada |
| Audience measurement and advertising | Google (Analytics, Ads) | United States |
| Workflow automation (n8n) | Clemento Consultants | Quebec, Canada |
| Artificial intelligence | OpenAI | United States |
| Electronic signature (some documents) | BoldSign | United States |
| Electronic signature (other documents) | Clemento Consultants | Quebec, Canada |
Transfers outside Quebec
Some subprocessors (Google, Intuit/QuickBooks, OpenAI, BoldSign) process your data in the United States. For each one, we review the guarantees offered (encryption, certifications, contractual commitments) before entrusting them with data.
Retention periods
| Type of data | Period |
|---|---|
| Active account (profile, applications, documents) | As long as your account exists |
| Deleted account | Immediate deletion, no backup copies beyond 30 days |
| Uploaded documents | 12 months, then automatic purge |
| Connection logs | 90 days |
| Aggregated analytics | Indefinitely (anonymous) |
| Accounting and tax data | 7 years (tax requirement) |
Your rights under Law 25
You have the right to:
- Access: obtain a copy of your personal data.
- Rectification: correct inaccurate data.
- Erasure: delete your account (direct option in Settings).
- Portability: receive your data in a structured format (CSV).
- Withdrawal of consent: at any time.
- Automated decisions: request human review if an automated decision affects your rights.
To exercise a right, write to privacy@clemento.ca (response within 30 days).
If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (CAI): cai.gouv.qc.ca.
Security
- Encryption in transit (HTTPS / TLS).
- Encryption at rest for sensitive data (libsodium XChaCha20-Poly1305, AES-256 equivalent).
- Hashed passwords (Argon2id).
- Two-factor authentication (email by default, authenticator app optional).
- Limited log access and audit trail.
In the event of a privacy incident, you will be notified within 72 hours.
Cookies
The portal uses cookies strictly necessary for its operation (session, security), which do not require consent. With your prior consent, we use Google Analytics (audience measurement) and Google Ads (advertising conversion measurement, including "enhanced conversions" which sends Google hashed contact data — e.g. email — to attribute a conversion); these cookies and transmissions only occur after you accept. This data is processed by Google and may be transferred abroad. You can accept or refuse from the banner, and change or withdraw your choice at any time via "Manage cookies" in the footer — refusing is as easy as accepting.
Changes
We may update this policy. The last updated date appears at the top of this page. In the event of a significant change, we will notify you by appropriate means.
Contact
For any question regarding the protection of your personal data: Clemento Consultants — privacy@clemento.ca.