Privacy policy
Version of 5 November 2026. This text is under legal review; items marked “to be completed” will be specified. In case of discrepancy, the French version prevails.
This policy explains what personal information 9350-5840 Québec inc., doing business as BRAVUM (“BRAVUM”, “we”) collects through www.bravumrepair.com and the B Repair service, why, how long we keep it and how to exercise your rights. It is based on Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Person in charge of the protection of personal information
Hedi Battini is the person in charge of the protection of personal information at BRAVUM. For any question, request or complaint: support-brepair@bravum.ca.
2. Two different roles
- On the sales website (www.bravumrepair.com), BRAVUM decides how information is used: it is responsible for it.
- In the B Repair application, each registered shop is responsible for its own customers' information (name, phone, email, devices, repairs, photos). BRAVUM hosts and processes it on the shop's behalf, according to its instructions, and does not use it for any other purpose. A shop's customer who wishes to exercise their rights should first contact that shop; we will help it respond.
3. Information collected and purposes
| Situation | Information | Why |
|---|---|---|
| Contact form | name, email, phone (optional), subject, message, language | to answer your request |
| Trial sign-up | name, email, shop name, chosen plan | to create and manage your trial account and write to you about it |
| Paid subscription | Stripe customer and subscription identifiers, payment status, invoices | to bill the service and keep accounts |
| Application accounts | name, email, role, password (stored with irreversible encryption), second factor if enabled, login log | to give access to the service and secure it |
| Shop data | customers, repairs, devices (including serial number or IMEI), photos, voice notes, messages, stock | to provide the service to the shop |
| Technical operation | IP address, date and time, pages requested, errors | security (limiting abuse), troubleshooting |
We do not sell any personal information. We use no targeted advertising, no audience measurement tool and no profiling. We only collect what is needed for the purposes above.
4. Consent
By sending the contact form or creating an account, you consent to the use described for that purpose. You may withdraw your consent at any time by writing to us; this may prevent us from continuing the service that depends on it (for example, the account).
5. Providers that process information for us
- OVH Hosting Inc. (OVHcloud), Montréal, Canada: hosting of the website and application server.
- Stripe: subscription payments. Card data is entered at Stripe; BRAVUM neither sees nor stores it.
- Twilio SendGrid: sending emails (replies, repair updates); [TO BE COMPLETED BY HEDI: update if email goes through another provider, e.g. the bravum.ca mail server].
- Twilio: sending repair-tracking text messages, when the shop enables this channel.
- Unsplash: some illustration photographs are loaded from images.unsplash.com, which then receives the visitor's IP address.
Some of these providers (Stripe, Twilio, SendGrid, Unsplash) may process information outside Québec, including in the United States. Before any communication outside Québec, we assess the protection offered and bind them by contract to adequate protection. [TO BE COMPLETED BY HEDI: confirm that contracts and assessments are in place]
6. Retention periods
- Contact form messages: at most 24 months after the last exchange.
- Trial account not converted to a subscription: at most 12 months after the end of the trial.
- Account and data of a subscribed shop: during the subscription, then deleted within 30 days after the account is closed, unless the law requires otherwise.
- Invoices and accounting records: 6 years, as required by tax laws.
- Technical logs: the limited time needed for security and troubleshooting.
[TO BE COMPLETED BY HEDI: validate these periods]
7. Security
Encrypted connections (HTTPS), passwords stored with irreversible encryption, role-based access, isolation of each shop's data checked by automated tests, daily backups. No measure is infallible: we promptly fix any reported vulnerability.
8. Confidentiality incidents
In the event of a confidentiality incident (unauthorized access, use or disclosure, loss), we take steps to reduce the risk, keep a register of incidents and, if the incident presents a risk of serious injury, notify the Commission d'accès à l'information du Québec and the persons concerned, as required by law.
9. Your rights
You may request access to your information, its correction, the withdrawal of your consent, the deletion of your information or de-indexation, and obtain a copy of your computerized information in a structured, commonly used technological format. Write to support-brepair@bravum.ca; we answer within 30 days. To delete a B Repair application account: store.bravumrepair.com/suppression-compte.html.
If you are not satisfied with our answer, you may contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
10. Cookies and local storage
See the cookie policy.
11. B Repair mobile apps
The B Repair apps (in preparation) show the same service as store.bravumrepair.com. They add no advertising and no cross-app tracking. The camera is only used to photograph a device for a ticket or scan a label; the microphone, only to record a voice note; notifications, if you accept them, use a technical device identifier.
12. Changes
We will publish any change to this policy here, with its date. For a significant change, we will inform account holders by email.