Your data, and what protects it.

What protects your data

Encrypted connections

Every connection is encrypted. Passwords are stored scrambled, never in plain text, and the keys of the services you connect are encrypted and never sent to the browser.

Kept separate per business

Every piece of data is filed under its business’s name, and at every software update an automatic check looks for any request to the database that would leave the business out.

One access per employee

Each employee has their own access.

Two-step sign-in

Turn on a one-time code with Microsoft or Google Authenticator: a stolen password is no longer enough. Repeated password guesses are blocked automatically.

Every change is recorded

Every change made in the dashboard is written to a log: who (the signed-in person, or “business link”), what (the action, without its content) and when.

Backed up every night

Every night, a copy of the database is made and encrypted before it leaves our servers. It is kept 30 days, then deleted automatically.

An emergency stop

If something goes wrong, we can stop the AI agents on the phone and in the chat, or texts and the confirmations, reminders and newsletters e-mailed to your clients, in one move while we fix the problem.

No AI training

The AI providers that process your conversations are bound by contract not to use them to train their models. Nothing is sold, and nothing is used for other businesses’ ads.

Text, not audio

We don’t keep audio recordings of your calls — only the written transcript, in your dashboard.

Cards stay at Stripe

Payments go through Stripe: we never see card numbers.

Where your data is

On managed cloud servers in the United States — not in Canada: we say so plainly. The backup copies are kept in North America, encrypted before they leave, and the company that stores them cannot read them. For this transfer outside Québec, we have done the assessment that Law 25 requires.

Every provider that processes your data, and what it receives, is named in our privacy policy. Need your data to stay in Canada? Tell us before you sign: it is a hosting decision we can discuss.

Who can see it

You, and the employees you give access to. At Zen Solutions, nobody looks at them without your permission, even for support.

Your data is yours

Download them whenever you like, in one click: Business settings → Your data → “Download all my data”. You get a ZIP file: your clients, appointments, quotes, invoices, employees and finances, as tables that open in Excel, with your photos and documents. Passwords and access keys are never in it.

Leaving? Ask for your account and your data to be deleted at any time, at privacy@zen-solutions.net.

If an incident touches your data

We tell you without delay, with what we know, and we help you meet your own obligations: assess the risk, then notify the Commission d’accès à l’information and the people concerned when that is required.

Every incident is written in our confidentiality incident register — even when there is no risk of serious injury — and stays there at least five years.

A question?

The person responsible for the protection of personal information at Zen Solutions is Mathieu Payment: privacy@zen-solutions.net.

The detail, in legal terms: Privacy policy · Terms of service.