Privacy Policy

1. Who We Are and the Scope of This Policy

The Oui Solutions platform is operated by 1NE INC., a legal person constituted in Québec and registered in the Québec enterprise register under Québec enterprise number (NEQ) 1181834244, with its address at 1600 Boulevard Le Corbusier, Bureau 99, Suite 1010, Laval, Quebec H7S 1Y9, Canada. In this document, “Oui Solutions”, “we”, “us” and “our” refer to 1NE INC., which operates the platform under the name Oui Solutions.

Oui Solutions operates a bilingual online marketplace, available at app.ouisolutions.ca, that connects clients who post automation and software projects with approved partner service providers who quote on and deliver those projects. The platform is operated from Québec, Canada.

This Policy applies to all personal information we collect through the application, whether you use it as a client, as a partner, or as a visitor creating an account. Personal information means any information that relates to a natural person and allows that person to be identified.

This Policy does not cover the practices of third-party websites or services that we do not operate, even where we link to them. Where a service provider processes personal information on our behalf, its role is described in section 8.

2. Person Responsible for the Protection of Personal Information

The person responsible for the protection of personal information within 1NE INC. is Adam Taha, Founder. The person responsible ensures compliance with this Policy and with applicable privacy legislation, and handles requests for access, rectification and deletion as well as privacy questions and complaints.

You may reach the person responsible at contact@ouisolutions.ca. We will acknowledge and process your request as described in section 12.

3. Personal Information We Collect

We collect only the personal information we need to operate the marketplace. This includes:

Account information: your email address, your name and your password, which we store only in hashed form. If you sign in with Google, we receive your Google account identity (your name and email address, together with basic Google profile details such as your profile picture, where provided) instead of a password.

Profile information: for clients, company and contact information you provide; for partners, the business profile information submitted during partner onboarding, which is reviewed by an administrator as part of partner approval.

Project and quote content: project titles and descriptions, quotes and counter-offers, negotiation messages, files you upload, deliverables, and reviews posted after project completion.

Payment records: amounts, dates, milestone status and Stripe payment references relating to your transactions. Card numbers and full payment card data never reach our servers; they are collected and processed directly by Stripe, our payment processor.

Support correspondence: messages you exchange with us at contact@ouisolutions.ca.

Technical and security data: like most online services, our infrastructure processes your IP address and standard browser information when you use the application, in particular to protect the platform against abuse. IP addresses (and, for some operations, your account identifier) are used as short-lived counters by our rate-limiting service and expire automatically.

Technical monitoring telemetry: when an error occurs in the application, and for a small sample of ordinary requests used for performance monitoring, limited technical diagnostic data (such as error details, page and request identifiers and timing information) is sent to our self-hosted error-monitoring service. Error reports are scrubbed of identifying fields before they are sent, and the service is configured not to collect personal information by default. We do not use marketing analytics tools or advertising trackers of any kind.

4. Contact form (this site)

When you fill out the contact form on this site, we collect your name, your email address, your company name (optional), the role you selected (client or partner) and your message. Providing this information is voluntary.

This information is used solely to answer and follow up on your request. It is transmitted to our request-management tool and deleted no later than 12 months after your request has been handled.

5. Audience measurement (this site)

This site uses Vercel Web Analytics, an audience-measurement tool that uses no cookies and no advertising identifier. We measure page views and certain clicks in aggregate (for example the “Get started” button, with the selected role) in order to improve the site. No individual profile is built.

6. How We Use Your Information and Our Legal Bases

We use personal information for the following purposes: to create and manage your account and authenticate you; to operate the marketplace, including publishing projects, partner approval, quoting and turn-based negotiation, milestone payments, recording the partner’s share of payments, reviews, and handling of payment anomalies, refunds and disputes by our administrators; to communicate with you about your account, your projects and your transactions; to maintain the security and integrity of the platform, including preventing fraud and enforcing our Terms of Service; and to comply with our legal obligations, including financial record-keeping and responding to lawful requests from authorities.

We rely on the following legal bases: your consent, which you give when you accept the Terms of Service and this Privacy Policy at signup (or when you continue with Google sign-in after being shown the corresponding notice); the performance of the contract between you and Oui Solutions; and compliance with legal obligations to which we are subject.

We do not sell personal information, and we do not use it for advertising or for purposes unrelated to those described above. If we ever needed to use your personal information for a new purpose not covered by this Policy, we would seek your consent first unless the law permits otherwise.

7. Visibility of Information Within the Marketplace

The marketplace works by making certain information visible to other users. Projects posted by clients are public within the platform: while a project is open for quotes, it is visible to approved partners, and the partners with whom a negotiation took place retain access to it afterwards. When a partner quotes on a project and a negotiation takes place, the client and the partner see each other’s relevant profile information, quotes, counter-offers and negotiation messages. After a project is completed, reviews posted by the parties are visible on the platform.

Please keep in mind that any personal information you choose to include in free-text fields, such as project descriptions, messages or reviews, will be visible to the other party or, in the case of public project content, to approved partners on the marketplace. We encourage you to include only the information necessary for your project.

8. Service Providers, Hosting and Processing Outside Québec

We use a small number of service providers to operate the platform. Each provider processes personal information only to provide its service to us:

Supabase provides our database, authentication and file storage. Our primary data is hosted in Canada, in the ca-central-1 region.

Vercel provides application hosting and content delivery. Vercel may process requests outside Canada at its network edge.

Stripe provides payment processing. Stripe collects and processes payment card data directly, so card numbers never reach our servers. Stripe may process payment data outside Québec and outside Canada.

GlitchTip is a self-hosted error-monitoring service operated by us. It receives the technical monitoring telemetry described in section 5; error reports are scrubbed of identifying fields before they are sent, and the service is configured not to collect personal information by default.

Upstash provides the in-memory data store used for rate limiting, which protects the platform against abuse. It processes short-lived counters keyed by IP address or account identifier and may process this data outside Canada.

Our primary data at rest is located in Canada. However, as described above, some processing by Vercel, Stripe and Upstash may occur outside Québec and outside Canada. Before communicating personal information outside Québec, we assess the privacy protections it will receive, taking into account the sensitivity of the information, the purposes of the processing and the legal framework applicable in the destination jurisdiction, so that it receives protection consistent with applicable Québec law.

We may also disclose personal information where required or permitted by law, for example to comply with a court order or a lawful request from a competent authority.

9. Cookies

The application itself sets only cookies that are necessary for it to function. These are: authentication and session cookies, which keep you signed in securely; a signed profile-cache cookie, which lets the application display your profile without repeated database lookups; and a language-preference cookie, which remembers whether you use the platform in French or in English. In addition, on payment pages, Stripe, our payment processor, sets its own cookies (such as __stripe_mid and __stripe_sid), which are necessary for payment processing and fraud prevention and are governed by Stripe’s privacy policy. The application also stores your display-theme preference (light or dark) in your browser’s local storage; that information stays on your device and is not transmitted to us.

These cookies are strictly necessary for the application, payments and your language choice to work. We do not use advertising cookies or analytics cookies and, apart from Stripe’s payment and fraud-prevention cookies described above, we do not use any third-party tracking technologies. You can delete cookies through your browser settings, but the application will not function properly without its essential cookies.

10. Security of Personal Information

We protect personal information with security measures that are reasonable given its sensitivity, its intended use, its quantity, its distribution and its medium. These measures include encryption of data in transit, storage of passwords in hashed form only, role-based access controls limiting who can see what within the platform, administrator review of sensitive operations such as partner approval, deliverable review and payment anomalies, and the exclusion of payment card data from our systems entirely, since cards are processed directly by Stripe.

When your account is deleted, your active sessions are revoked immediately. No system is perfectly secure, but we are committed to maintaining safeguards proportionate to the information we hold and to addressing confidentiality incidents as described in section 14.

11. Retention and Deletion of Your Account

We retain your personal information for as long as your account is active and as needed for the purposes described in this Policy.

You can delete your account yourself at any time from the Settings area of the application. What happens next depends on whether your account has a payment history:

If your account has no payment history, we erase it completely: your account, your profile, your content and your uploaded files are deleted.

If your account has a payment history, we anonymize it: the personal information in your profile is erased; all free text you authored, including messages, proposals, project descriptions, reviews and file-name metadata, is redacted; and your uploaded files are deleted. However, transaction and ledger records relating to your payments are retained, because we are required to keep financial records to meet our legal obligations, and the underlying project, quote, negotiation and review records that anchor those financial records are kept in redacted, de-identified form (for example, amounts, dates, statuses and numeric ratings remain, attributed to a deleted user). In plain terms: we retain the transaction records required by law, and everything that identifies you in free text is erased or redacted.

In both cases, your active sessions are revoked when the deletion is carried out.

12. Your Rights

Subject to the exceptions provided by law, you have the following rights over your personal information:

Access: you may ask us to confirm what personal information we hold about you and to give you access to it.

Rectification: you may ask us to correct personal information that is inaccurate, incomplete or equivocal. You can also update much of your profile information directly in the application.

Withdrawal of consent: you may withdraw your consent to our collection and use of your personal information. Because most of the information we process is necessary to provide the service, withdrawing consent will generally mean closing your account, with the deletion or anonymization consequences described in section 11.

Deletion: you may delete your account yourself from Settings, as described in section 11, or ask us to do so.

To exercise any of these rights, contact the person responsible for the protection of personal information at contact@ouisolutions.ca. We will verify your identity before acting on a request and will respond within thirty (30) days of receiving it, as provided by law.

If you are not satisfied with how we handle your request or with our privacy practices, you may file a complaint with the Commission d’accès à l’information du Québec (CAI), the authority that oversees the protection of personal information in Québec.

13. No Automated Decision-Making

We do not make any decision about you based exclusively on automated processing of your personal information that produces legal effects or otherwise significantly affects you. In particular, partner approval is a decision made by a human administrator, and payment anomalies, refunds and disputes are reviewed and decided by human administrators.

14. Confidentiality Incidents

A confidentiality incident is any access to, use of or communication of personal information not authorized by law, or the loss of personal information or any other breach of its protection.

If a confidentiality incident occurs, we will take reasonable measures to reduce the risk of injury and to prevent similar incidents. We keep a register of confidentiality incidents as required by law. If an incident presents a risk of serious injury, we will promptly notify the Commission d’accès à l’information du Québec and the affected persons, as required by Law 25.

15. Minors

The Oui Solutions marketplace is intended for businesses and professionals. It is not directed at minors, and in particular it is not directed at persons under 14 years of age. We do not knowingly collect personal information from a minor under 14 without the consent of the person having parental authority or of the tutor. If you believe that a minor has provided us with personal information, please contact us at contact@ouisolutions.ca and we will delete it.

16. Changes to This Policy

We may update this Policy from time to time, for example to reflect changes to the platform, to our service providers or to applicable law. When we do, we will publish the updated version in the application and revise the “Last updated” date at the top of this Policy. For material changes, we will give you notice by appropriate means, such as a notice in the application. Your continued use of the platform after an updated Policy takes effect constitutes acceptance of the updated Policy; if you do not agree, you may close your account as described in section 11.

17. Contact Us

For any question about this Policy, to exercise your rights, or to make a privacy complaint, contact the person responsible for the protection of personal information at contact@ouisolutions.ca. We respond to privacy requests within the time limits provided by law.

You may also write to us by mail at 1600 Boulevard Le Corbusier, Bureau 99, Suite 1010, Laval, Quebec H7S 1Y9, Canada.

You may also contact the Commission d’accès à l’information du Québec if you wish to exercise a recourse concerning the protection of your personal information.

This Policy is published in French and in English. The French version is the reference version.