Privacy Policy
Last updated : October 19, 2026
Draft version, to be reviewed by a lawyer before launch.
Mettons is online booking software for beauty professionals. It is operated by [Ton prénom et nom de famille], in Montréal (Québec) (“we”). This policy explains what personal information we collect, why, who it is shared with, how long we keep it and how to exercise your rights. It is based on Québec’s Act respecting the protection of personal information in the private sector (the “Act”), as amended by Law 25. If the French and English versions differ, the French version prevails.
This policy covers two groups of people:
| Who | Our role |
|---|---|
| Pros, meaning the businesses and self-employed professionals who subscribe to the service | We are the organization responsible for their information. |
| Pros’ clients, who book on a pro’s public page without creating an account | The pro is the responsible organization. We act as the pro’s service provider (mandatary) within the meaning of section 18.3 of the Act. |
1. Person in charge of the protection of personal information
Our person in charge of the protection of personal information (Responsable de la protection des renseignements personnels) is [Ton prénom et nom de famille]. You can reach this person at vieprivee@mettons.ca with any question, request or complaint.
2. Information we collect
If you are a pro
- Identity and sign-in: name, email address and password. The password is stored only in hashed form; we cannot read it.
- Business: business name, services and prices, mailing address, phone number, Instagram handle and photos.
- Subscription: payment status and billing history. Credit card details are entered directly with Stripe; we do not store them.
The information you choose to display on your public page (business name, services, photos, Instagram handle, etc.) is visible to anyone who visits it.
If you are a pro’s client
When you book on your pro’s page, or when your pro enters an appointment for you, the following information is recorded on the pro’s behalf:
- your name, mobile number and email address;
- your appointments (date, time, service, status and deposit, if any);
- notes your pro writes about you;
- your consent, or refusal, to receive “time to rebook” reminders, with the date and method used.
Notes may contain sensitive information, such as an allergy. Pros should record only what is needed to provide their services. [To review]
Technical information
Our servers record the technical data needed to run and secure the service (IP address, browser type, date and time of requests). We do not use any audience measurement or advertising tools.
3. Why we use this information
We use pros’ information to:
- create and manage their account;
- provide the service: booking page, calendar, reminders and deposits;
- bill the subscription;
- provide support;
- keep the service secure and prevent fraud;
- tell them about important changes to the service or our terms.
We use clients’ information only on the pro’s behalf and according to the pro’s instructions: to record the appointment, send the confirmation and reminders, let the pro manage the calendar and, if you agreed, remind you that it is time to rebook.
We do not sell any personal information. We do no targeted advertising or profiling, and we do not use your information for any other purpose without your consent, unless the law allows it.
4. Consent
By creating an account, pros consent to our processing their information for the purposes described in this policy. By booking, clients provide their information to their pro in order to get the appointment they asked for. Consent to “time to rebook” reminders is optional and asked for separately and expressly. You can withdraw your consent at any time, although this may prevent some features from working.
5. Our role regarding clients’ information
For their clients’ information, each pro is the responsible organization under the Act. We act as the pro’s mandatary, under the written mandate set out in our terms of use, in accordance with section 18.3 of the Act. We use this information only to provide the service to the pro, never for our own purposes.
If you are a client, please send any request for access, correction or deletion directly to your pro. If you write to us, we will forward your request to your pro and help them respond.
6. Text messages and emails
Appointment confirmations and reminders are transactional messages related to a booking. “Time to rebook” reminders are sent only to people who have expressly opted in, as required by Canada’s Anti-Spam Legislation (CASL). Every message identifies the pro who sends it and offers a simple way to unsubscribe: the link in the email, or replying STOP to the text.
7. Hosting and service providers
Our application servers and database are located in Canada, in Montréal. We use the following service providers, who receive only the information they need for their task:
| Provider | Role | Where data is processed |
|---|---|---|
| Supabase | Database | Canada (Canada Central region, Montréal) |
| Vercel | Application servers | Canada (Montréal region) |
| Twilio | Sending text messages | United States |
| Resend | Sending emails | United States |
| Stripe | Billing pros’ subscriptions; client deposits paid directly into the pro’s own Stripe account | United States, Canada and Ireland |
Some information may therefore be communicated outside Québec and Canada, where it is subject to local laws. Before communicating personal information outside Québec, we carry out a privacy impact assessment, as required by section 17 of the Act, and we do so only if the information will receive adequate protection. [To review] Each provider is bound by a written agreement that requires it to protect the confidentiality of the information and to use it only for the service it provides to us.
We may also communicate information when the law requires or allows it, for example to comply with a court order.
8. Cookies
We use only essential cookies: one that keeps you signed in and one that remembers your language choice. We use no audience measurement cookies, no advertising pixels and no tracking tools. If that ever changes, we will ask for your consent first, and refusing will be as easy as accepting.
9. How long we keep information
| Information | Retention period |
|---|---|
| Pros’ account and business information | While the account is active, then deleted within 30 days after it is closed |
| Clients’ information | While the pro’s account is active, or until the pro deletes it; at the end of the contract, 30 days to allow export, then deleted |
| Billing records | 6 years, as required by tax laws |
| Log of texts and emails sent | 12 months |
| Records of consent to reminders | At least 3 years, to demonstrate compliance with CASL [To review] |
| Technical data | A short period, as long as needed for security and troubleshooting |
At the end of the retention period, information is securely destroyed.
10. Security
- Communications are encrypted in transit (HTTPS).
- Access to information is limited to people who need it for their work.
- Passwords are hashed.
- We keep a register of confidentiality incidents.
When a confidentiality incident presents a risk of serious injury, the Commission d’accès à l’information du Québec and the people affected are notified. If the incident involves a pro’s client information, we notify the pro without delay and help the pro meet their obligations.
11. Your rights
Subject to the exceptions provided by law, you can:
- access the personal information about you;
- have it corrected if it is inaccurate, incomplete or ambiguous;
- ask for it to be deleted, or ask that we stop disseminating it or de-index a hyperlink attached to your name;
- withdraw your consent;
- obtain the computerized information you provided in a structured, commonly used technological format, or have it sent to an authorized organization (the right to data portability, in force since September 22, 2024).
Pros: you can export your data (CSV format) and delete your account yourself in the app. For any other request, write to vieprivee@mettons.ca.
Clients: you can stop receiving “time to rebook” reminders, or all emails from a pro, at any time using the unsubscribe link in every email, or by replying STOP to a text. For other requests, contact your pro.
We respond in writing within 30 days of receiving a request. We may ask you to confirm your identity.
If you are not satisfied with our response, you can file a complaint with the Commission d’accès à l’information du Québec: www.cai.gouv.qc.ca.
12. Minors
Pro accounts are for adults only. A person under 14 cannot book on their own: a parent or tutor must make the booking for them.
13. Changes
We may change this policy. The date of the last update appears at the top of the page. If we make an important change, we will notify pros by email before it takes effect.
14. Contact us
[Ton prénom et nom de famille], Montréal (Québec). Personal information: vieprivee@mettons.ca. Support: allo@mettons.ca.