What Veilleur keeps, and why

Who is responsible

The Veilleur service is operated by Operanto Technologies inc. ("Operanto"), 200-4388 rue Saint-Denis, Montréal, Quebec H2J 2L1.

Person in charge of the protection of personal information: the president of Operanto Technologies inc. Write to confidentialite@operanto.ca or by mail at the address above.

What we collect

The address of the site you check

It is needed to run the check and is kept with the report, for the history. A public website is not personal information, but we treat it with the same restraint.

Your email, if you give it

It is used to send you the report link and, under monitoring, the report of each morning. If your audit includes a month of monitoring, one email also tells you five days before it ends. Nothing else: no newsletter, no sharing, no resale. You can ask for its deletion by writing to the address below.

Your site's content

Veilleur reads public pages, and the PDFs they link to, and keeps, in the report, the excerpts the findings need: a sentence, a button label, the element that holds it. It signs in to nothing and reads nothing behind a login.

Payments

They are handled by Stripe. Veilleur never sees your card number. It receives from Stripe your email, your name, the chosen plan and the subscription status, and keeps only that, with the date of the terms accepted. If the money-back guarantee is given to you, we keep the site's address and your email for three years, so that it is used once. A payment refunded or disputed is kept the same three years, its amount, date and reason with your email, to answer a dispute and keep the accounts.

Technical logs

Like any server, ours records the IP addresses of requests, for thirty days, to limit abuse. No tracking cookies, no third-party analytics. To know whether the site is useful, Veilleur itself counts, by day, the pages viewed and the steps taken (check started, report opened, payment begun): numbers, with no IP address, no cookie, nothing that identifies you.

For how long

Free checks are deleted after 90 days. Reports of a monitored site are kept while the subscription is active, then twelve months: that is the dated proof you pay for. An audit report is kept twelve months. What is deleted also leaves the backup copies within 30 days.

Where

Veilleur's server and its database are in Canada, in Montréal. Providers that help us run the service receive some of the information and handle it outside Québec, sometimes outside Canada. The law requires us to tell you, and here is the full list.

• Cloudflare, for delivery and security, on a worldwide network: visitors' IP addresses. Cloudflare also keeps the database's backup copies (its R2 service), which may be stored outside Canada: everything the database holds, including your email address and your reports.
• Postmark, to send the emails, in the United States: your email address and the content of the message.
• Stripe, for payments, in the United States: your email and billing data. We never see your card.
• The language model that reviews the quality of the French and answers the citation tracking's questions, at Anthropic: excerpts of your site's public text, its web address, the business's name, its city and a few general questions about its trade, without your email or any account data.
• Google Fonts, for the site's typefaces, on a worldwide network: visitors' IP addresses, when each page loads.

We choose providers that contractually commit to protecting this information and not using it for anything else.

Your rights, and who answers

You can ask to see, correct or delete what Veilleur holds about you. The person in charge of personal information can be reached at confidentialite@operanto.ca. We answer within the thirty days the law provides, and usually much sooner. If our answer does not satisfy you, you can turn to Québec's Commission d'accès à l'information.

Last updated: 2026-10-21