Last updated: September 26, 2026
Who we are. DELVIO Ltd., 116 Chemin de la Sablière, Mont-Tremblant, Quebec J8E 1N6, Canada.
Person in charge of the protection of personal information: info@delvioltd.com.
1. DELVIO Connector
The Connector is a private, internal tool. It connects only to DELVIO's own QuickBooks Online company.
- What it accesses: DELVIO's accounting records in QuickBooks Online, for example the chart of accounts, transactions, invoices, bills, customer and vendor names and contact details, and financial reports. These records may include personal information about DELVIO's clients, suppliers and contacts.
- Why: to help DELVIO keep its books, review its accounts and prepare financial reports. We do not use this information for any other purpose.
- How it is processed: the Connector and DELVIO's AI assistant both run in-house, on DELVIO-owned computers in our office in Mont-Tremblant, Quebec. The data is stored on an encrypted disk. The Connector contacts Intuit's QuickBooks Online service only when DELVIO staff ask the assistant a question. QuickBooks data is not sent to any outside AI service.
- What we store: we keep no separate database or copy of QuickBooks data. We store only the connection tokens and the QuickBooks company ID, in a file restricted to authorized administrators, plus a technical error log (time, type of request, Intuit's transaction ID and Intuit's error message, which can occasionally quote part of a record). The log rotates automatically and is capped at about 15 MB.
- Who receives it: the data stays within DELVIO, apart from Intuit, which hosts QuickBooks Online. Intuit's systems may be located outside Quebec and Canada. We do not sell this information or use it for advertising.
- Retention: connection tokens are deleted when the Connector is disconnected. Error-log entries are overwritten as the log rotates.
2. Our website (delvioltd.com)
- Contact form: when you use the form on our Contact page, we collect your name, email address, company (optional) and message, only to answer your request. The form runs on DELVIO's own web server and is delivered to us through DELVIO's own email server, both on DELVIO-owned equipment in Quebec. We keep these messages only as long as needed to handle your request and our business relationship, and we don't use them for marketing without your consent.
- Google Analytics (only if you accept): with your consent, we use Google Analytics (property G-4F4PRJBLKG), a service of Google LLC, to measure how visitors use the site: pages viewed, approximate location derived from your IP address, device and browser type, and referring site. This information is processed by Google, which may be outside Quebec and Canada, and we use it only in aggregate to improve the site.
- Cookies and your choice: Google Analytics is off by default. It loads, and sets its cookies (for example
_gaand_ga_4F4PRJBLKG, which last up to 2 years), only if you click Accept in our cookie banner. If you click Decline, or make no choice, no analytics cookies are set and the site works normally. You can change your choice at any time through the Cookie settings link at the bottom of every page. We do not use advertising cookies.
3. Your rights
Under Quebec law, you may:
- ask whether we hold personal information about you, get access to it, and have it corrected;
- ask for the information you gave us in a structured, commonly used technological format;
- withdraw your consent to our use or communication of your information;
- ask us to stop disseminating information about you, or to de-index a link to it, in the cases the law allows;
- ask what information we hold about you, who within DELVIO has access to it, and how long we keep it.
To make a request or a complaint, contact the person in charge above. We answer within 30 days. If you are not satisfied with our answer, you may contact the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).
4. How we protect personal information
- Roles: the President is our person in charge of the protection of personal information and approves our privacy practices. Only authorized personnel can access personal information, and only when they need it for their work.
- Retention and destruction: we keep personal information only as long as needed for the purpose it was collected for, or as the law requires (for example, accounting records), and then destroy it securely or anonymize it.
- Complaints: complaints go to the person in charge, who reviews them and replies in writing.
- Incidents: if a confidentiality incident occurs, we take steps to reduce the risk, keep a record of it and notify the Commission and the people affected when the law requires it.
5. Changes
If we change this policy, we will post the new version here with a new date and, if the change is significant, a notice on our website.