Privacy policy

Cobreo is responsible for personal information processed through cobreo.ca.

Email: contact@cobreo.ca

Website: https://cobreo.ca

We may collect: identity and contact details (name, email, phone, company) when you submit a form; the content of your messages or diagnostic answers; technical browsing data (IP address, device type, pages viewed) via cookies or analytics tools if you consent; and information needed to securely operate our internal tools.

We use your data to respond to inquiries, deliver our services, improve the site and our processes, maintain security, meet legal obligations, and — only with consent when required — measure audience or send relevant communications.

Depending on context, processing relies on your consent, steps toward or performance of a contract, or our legitimate interests (security, service improvement), in line with applicable law.

We keep data only as long as needed for the purposes described, then delete or anonymize it unless a legal obligation requires otherwise.

We do not sell your personal information. We may share it with providers that help us host the site, send email, or run our infrastructure (e.g. hosting, database, messaging), only as needed and under appropriate confidentiality commitments.

Some providers may be located outside Quebec or Canada; when that happens, we take reasonable steps to protect your data.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or withdrawal of consent. To exercise your rights: contact@cobreo.ca.

You may also file a complaint with the Commission d’accès à l’information du Québec or another competent authority.

The Cobreo application (app.cobreo.ca) is separate from the cobreo.ca website. A client organization may connect one or more of its own mailboxes, Gmail or Outlook.

Cobreo requests read access and send access. With Gmail, the permissions are openid, the account email address, https://www.googleapis.com/auth/gmail.readonly, and https://www.googleapis.com/auth/gmail.send. With Outlook, the permissions are Mail.Read and Mail.Send. Cobreo does not request permission to modify, label, or delete messages.

Cobreo reads each mailbox to display, on the record of a person already registered in that organization, a message in which a participant — other than one of those mailboxes — has exactly that person’s email address. The record shows the date, the participants, the subject, and the text. A message that matches no one is not copied into Cobreo and remains in the mailbox.

A person in the organization may reply from the record. When several mailboxes are connected, that person chooses the sending address. Cobreo sends only that text, from that address. Cobreo does not send a message on its own initiative.

This data is used only for these functions, which are visible in the application. Cobreo does not sell it, does not use it for advertising, and does not disclose it to third parties, except to the providers that host the application, for security, or if the law requires it.

Use of data obtained through Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Cobreo staff do not read these messages, except if the organization asks for help, if security requires it, or if the law requires it.

Disconnecting a mailbox stops further reads and further sends from that address. Messages already placed on a record remain that organization’s data. A request for access, correction, or deletion is made to contact@cobreo.ca.

Application data is hosted in Canada (Montreal region).

See our Cookie policy for categories and how to manage your choices.

We may update this policy. The date at the top shows the current version. For material changes, we will adjust the on-site notice as needed.