Last updated: July 15, 2026

At La Main Verte inc., we take care of your garden—and your privacy, too. This policy explains in simple terms what personal information we collect about you, why we collect it, who we share it with, and how you stay in control.

It has been drafted to comply with the Act to modernize legislative provisions as regards the protection of personal information ("Law 25"), in effect in Quebec.

1. Who is responsible for your information

The person responsible for the protection of personal information at La Main Verte is:

• Alexandre Toulemonde, Founder
• Email: support@lamainverte.ca
• Mailing address: 1536 chemin des Sept-Lots, J0A1C0, Saint-Adrien, QC, Canada.

You may contact them at any time with any questions, requests, or complaints regarding your personal information.

2. What information we collect

Depending on how you use our app and website, we collect the following information:

Information you provide to us directly

• When creating your account: your email and password (our authentication provider stores the password in encrypted form—we never see it).
• When personalizing your profile: your first name, last name, city, custom frost dates, and preferences (metric system, etc.).
• When creating vegetable gardens and notes: your garden plans, the geographic coordinates (excluding your address) of your zones, your plant photos, your text and audio notes, and your tasks.
• During a purchase: your email and payment information, which are entered directly with our payment provider (we never have access to your card number or CVV).
• During a chat with our team: the content of the conversation.

Information collected automatically

• Your IP address, device type, operating system, and browser.
• Technical identifiers specific to your session (cookies, advertising identifiers _ga, _gcl, fbp, fbc when you arrive via an ad).
• Your usage events: pages visited, features used, purchases, and app opens—to improve the product and measure the effectiveness of our advertising.
• If you enable notifications: a device identifier (Apple or Google token) used solely to send you these notifications.

Information generated from automated analysis

When you write a note or ask our gardening assistant for a suggestion, we use artificial intelligence models to:

• suggesting a title and tags for your notes;

• answering your questions

This data is not used to qualify your profile or to train AI models.

3. Why we collect this information

We collect your information for the following purposes—and only for these:

• Giving you access to your account: login, magic link, and password reset.
• Running the app: calculating planting dates based on your city, displaying your vegetable garden, and sending you reminders.
• Providing customer support: answering your questions via email or chat.
• Processing your purchases: collecting payments, managing subscriptions, issuing receipts.
• Sending you communications: newsletters, seasonal alerts — only if you have consented.
• Improving the product: understanding which features are used and fixing bugs.
• Measuring our advertising campaigns: determining whether an ad led to a sign-up or purchase. You may opt out of this (see section 7).
• Complying with our legal obligations: retaining accounting records, responding to competent authorities.

4. The basis for processing your information

Depending on the purpose, we rely on:

• your consent (newsletter, advertising metrics);
• the performance of the contract that binds us when you use the application;
• our legal obligations (accounting, tax);
• our legitimate interest in securing and improving the application, provided this interest does not override your rights.

5. Who we share your information with

We never sell your personal information. We only share it with carefully selected service providers who act on our behalf and are contractually bound to confidentiality.

• Stytch — Authentication (login, password, magic link) — United States
• Stripe — Payment processing and subscription management — United States / Ireland
• Postmark — Transactional email delivery (welcome emails, receipts) — United States
• Brevo — Newsletter, marketing emails, CRM — France (EU)
• Crisp — Support chat — France (EU)
• Amazon Web Services (S3, DynamoDB) — File storage — United States (us-east-1)
• Heroku (Salesforce) — Application hosting — United States
• ImageKit — Image optimization and delivery — United States / India
• Expo Push, Apple APNs, Google FCM — Mobile notification delivery — United States
• OpenAI — Note processing, audio transcription, horticultural suggestions — United States
• Google Analytics, Google Ads — Audience and advertising campaign measurement — United States
• Meta (Facebook) Conversions API — Advertising campaign measurement — United States
• New Relic — Technical application monitoring — United States
  
• YouTube (Google LLC) — Playback of embedded videos via YouTube API services. United States.

This list is kept up to date. If you would like to know more about a specific provider, please email us at support@lamainverte.ca.

6. Transfers outside of Quebec

Most of our providers process your information outside of Quebec, primarily in the United States and the European Union. Before any transfer, we have conducted a privacy impact assessment and ensured that:

• the provider implements security measures equivalent to those required in Quebec;
• the contract between us includes contractual clauses for the protection of personal information;
• the provider has access to a minimum amount of information and does not reuse your information for its own commercial purposes.

By using our services, you acknowledge and agree to these transfers. If you prefer that they do not take place, you may let us know, though this may limit the features we can offer you.

7. Your rights

You may exercise the following rights at any time:

• Access the personal information we hold about you.
• Receive a portable copy of your information in a structured, commonly used format (as of September 2024).
• Correct inaccurate or incomplete information.
• Withdraw your consent to receive our marketing communications at any time by clicking the unsubscribe link in any of our emails or by contacting us.
• Request the deletion of your account and all associated information. When you delete your account from the application, we erase your data from La Main Verte, our authentication provider, and our customer relationship management tool. Certain data may be kept longer if required by law (e.g., accounting records related to a purchase—see section 8).
• Object to advertising profiling: upon request, we will exclude your events from data sent to Meta and Google Ads.
• File a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe we have not respected your rights.

How to proceed? Email support@lamainverte.ca and specify the right you wish to exercise. We will respond within a maximum of 30 days. We may ask for reasonable proof of identity before proceeding to ensure the request is coming from you.

8. How long we keep your information

We keep your information for as long as necessary for the purposes described above:

• Account information: as long as your account is active. Anonymized after 36 months of inactivity.
• Notes, garden plans, photos: as long as your account is active; deleted along with it.
• Sessions and usage events: as long as your account is active; deleted along with it.
• Conversations with our team: as long as your account is active; deleted along with it.
• Accounting records (invoices, Stripe receipts): 7 years (tax obligation).
• Technical logs (security, debugging): indefinite
• Encrypted backups: 7 days after deletion.

Once the retention period expires, your information is deleted or irreversibly anonymized.

9. Cookies and similar technologies

Our website and application use cookies and technical identifiers to:

• Strictly necessary: to maintain your login session and prevent fraud. These cookies cannot be disabled.
• Audience measurement (Google Analytics): to understand how you use the service.
• Advertising (Google Ads, Meta): to measure the effectiveness of our campaigns.

You can decline analytics and advertising cookies via the banner displayed during your first visit, or by adjusting your browser settings. You may also contact us to have your account excluded from data shared with advertising networks.

10. Security

We implement reasonable technical and organizational measures to protect your personal information:

• encryption in transit (HTTPS/TLS) and at rest for the most sensitive data;
• passwords managed by a specialized provider that never shares them with us in plain text;
• system access restricted to authorized personnel with strong authentication;
• application monitoring and access logs.

11. Confidentiality incidents

If a confidentiality incident posing a serious risk of harm to you occurs, we will:

• inform you without undue delay;
• notify the Commission d'accès à l'information;
• maintain an internal record of the incident, as required by law.

12. Information regarding children

Our application is not intended for individuals under the age of 14. If you are a parent or guardian and believe your child has provided us with information, please contact us, and we will delete the account without delay.

13. Changes to this policy

We may update this policy to reflect changes in our service or the law. The update date is listed at the top of the document. In the event of a significant change, we will notify you via email or an in-app notification.

14. How to contact us

For any questions, requests to exercise your rights, or complaints:

• Email : support@lamainverte.ca
• Responsible person : Alexandre Toulemonde