Privacy Policy
This policy explains how ellr ("we") handles personal information when you use our websites, applications (including Ellr Timesheet / QuickBooks Online), and related services. It applies to users in Quebec and elsewhere in Canada, subject to applicable law.
1. Controller
ellr is the organization responsible for the personal information it collects in connection with its products and services. You can reach us at hello@ellr.ca.
2. Information we collect
Identity and contact details: name, email address, and other account information you provide.
Usage data: technical logs, IP address, device type, pages viewed, and application events needed for operation and security.
Service-related business data: depending on the product, timesheet, employee, customer, or project information synced via QuickBooks Online or entered in our apps.
Integration tokens and metadata: OAuth tokens and technical identifiers required to maintain the QuickBooks Online connection, stored securely.
3. How we use information
To provide, maintain, and improve our services (authentication, sync, support).
To protect security, prevent fraud, and diagnose incidents.
To communicate about the service, important updates, and support.
To meet legal obligations and respond to lawful requests from competent authorities.
4. Sharing and processors
We do not sell your personal information.
We may use hosting, email, analytics, and infrastructure providers (for example SiteGround, Vercel, Intuit/QuickBooks) solely to operate the service.
Data sent to QuickBooks Online is processed under Intuit's terms. You remain responsible for the permissions you grant in your QuickBooks company.
5. Retention
We retain information as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce our agreements.
When an account is closed or an integration is disconnected, we delete or anonymize data according to our operational procedures, subject to legal retention requirements.
6. Your rights
Under applicable law (including Quebec Law 25), you may request access to, correction of, or deletion of your personal information, subject to statutory exceptions.
You may also withdraw certain non-essential consents and lodge a complaint with the Commission d'accès à l'information du Québec or another competent authority.
7. Security
We implement reasonable technical and organizational measures (token encryption, access controls, HTTPS) to protect your information.
No system is perfectly secure. Report suspected incidents to hello@ellr.ca.
8. Changes
We may update this policy. The date at the top shows the current version. For material changes, we may notify you through the service or by email.
For privacy questions, contact us at hello@ellr.ca.