Privacy

Last Updated: September 2026 | Governing Law: Quebec, Canada

1. Who We Are

Brutus is operated by IRONFEL ("we", "us", "our"). This policy explains what personal information we handle, why, where it is stored, and your rights under Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's PIPEDA.

2. Person Responsible for Privacy

Privacy Officer, IRONFEL
ironfelsupport@gmail.com
Contact this person with any privacy question, request, or complaint.

3. Information We Handle

• Account information: when you sign in with Microsoft, we receive and store your email address and a Microsoft account identifier.
• Saved templates: the column names and validation rules you choose to save.
• Usage records: for each validation run, we record counts (rows, checks, errors), the time it took, and the column names and rules applied. We never record the values inside your cells.
• Billing information: your plan, subscription status, billing dates, and the reference numbers Stripe gives us. Your card details and billing address are collected and stored by Stripe, never by Brutus.
• Uploaded files and results: held temporarily in server memory and an encrypted cache only to run the validation you request. They are deleted automatically within 30 minutes and are never stored in our database.
• Technical data: standard server logs (such as timestamps, errors, and security events) used to operate and protect the Service.

4. Why We Use It

Only to provide the Service, manage your account, plan, and billing, operate and secure the Service, and meet our legal obligations. We do not sell, rent, or share your personal information for marketing, and we do not use your files to train AI.

5. Cookies

We use only the cookies needed to keep you signed in and run your session. We do not use advertising or tracking cookies.

6. Service Providers and Where Data Is Stored

• Cloud hosting provider: hosting, database, and the temporary file cache, in Canada (Quebec).
• Sign-in provider: account sign-in. Sign-in data may be processed outside Quebec and Canada.
• Payment processor: payments. Billing data may be processed outside Quebec and Canada, including in the United States.

These providers only handle information as needed to deliver their services to us and are required to protect it. When information is processed outside Quebec, it may be subject to the laws of that place.

7. How Long We Keep It

• Uploaded files and results: deleted automatically within 30 minutes.
• Account information, templates, and usage records: until you delete your account.
• Billing records: 6 years, as required by Canadian tax law, even after your account is deleted.
• Server logs: kept for a limited time, then deleted.

8. Consent and Age

By using Brutus, you consent to the handling described in this policy. You must be at least 18 years old to use Brutus. You are responsible for having the right to upload any file that contains other people's personal information. Do not upload the prohibited data listed in our Terms of Service.

9. Your Rights

You may ask to access, correct, or delete your personal information, to receive a copy of it in a common format, or to withdraw your consent. You can delete your account from the Account page or by emailing the Privacy Officer. We will respond within 30 days.

If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec.

10. Security

We use reasonable safeguards, including secure sign-in, encrypted connections, and short-lived handling of file content. No system is perfectly secure.

11. Privacy Incidents

If a privacy incident creates a risk of serious injury, we will notify the people affected and the Commission d'accès à l'information du Québec, as required by law.

12. Changes

We may update this policy. Changes will be posted on this page with a new "Last Updated" date, and important changes will be emailed to you.

13. Contact

Privacy Officer, IRONFEL
ironfelsupport@gmail.com