Privacy policy.
What Yoseri Business collects, why, where it lives and for how long. A policy is judged by its limits: they are written here, not implied.
Governing law: Québec, Canada · Law 25 · PIPEDA · GDPR for companies established in France, Belgium, Switzerland, Spain or the United Kingdom
1 · Who this policy is for
Yoseri Business is a management console for shops, restaurants, tradespeople and service businesses, published by Yoseri, Montréal (Québec). This policy applies to two distinct situations.
- Your account data: the identity of the people who log in to the console and the employee portal, your company profile, its billing. For this data, Yoseri decides the purposes: Yoseri is responsible for it.
- The data you entrust to the console: your sales, your stock, your schedules, your payroll, and above all the personal information of your customers and your employees. For this data, your company decides the purposes. Yoseri processes it on your behalf, following your instructions, and does nothing else with it.
2 · What is collected
Three families, and nothing else.
- Account identity: name, email, language, role in the company, clock-in PIN (stored in unreadable form), the company’s country and tax profile, billing details.
- Operating data that you enter or that arises from your activity: tickets, register sessions and Z closings, orders, bookings, products and recipes, stock and receiving, schedules, clock-ins, tips, pre-payroll, invoices, bank statements imported or received through Plaid, customers, employees, documents, messages.
- Technical logs: timestamps, device type, connection address, errors, and the log of sensitive actions (who corrected a stock level, refunded a ticket, viewed a health file).
No advertising identifier, no third-party pixel, no address book read from the device.
3 · Why
To run the service your company asked for: taking payments, scheduling, counting, filing, paying, and answering a support email. The logs serve security, incident detection and the logging required by Law 25. Subscription billing serves to bill you. No advertising purpose, no resale, no commercial profiling.
Your data is not used to train any model, neither ours nor a third party’s. The console’s artificial intelligence features handle one request at a time, within your plan’s quota, and keep nothing from it to learn.
4 · Your customers’ and employees’ data
Your company is responsible for the personal information of its customers and employees, within the meaning of Law 25 and, where applicable, the GDPR. Yoseri is your service provider: it hosts, displays, computes and backs it up for you, under contract, with no right of secondary use.
- The owner of the account decides who has access to what. The roles and capabilities they grant (see the numbers, see salaries, see health files, export, and so on) are checked by the server on every request. Amounts a person is not allowed to see are absent from the response, not replaced by zero.
- A customer’s health file (allergies, treatments, medical history) is protected by a dedicated capability, never inferred from a menu section. Every view is logged: who, when, which file.
- Requests from individuals (access, correction, deletion, withdrawal of consent) addressed to your company are handled in the Law 25 and GDPR screen in Settings: designated officer, published policy, request tracking, incident register.
- The communications you send (SMS, email, WhatsApp) go out under your name. The console checks the consent required by CASL before a marketing SMS and sends none between 9 p.m. and 9 a.m. Consent remains your responsibility.
- The link with an employee’s personal Yoseri app only exists if they ask for it, with their consent: only their net pay and validated tips pass from your console to their app.
5 · What does not leave
Yoseri does not sell, rent or hand over the data of your company, your customers or your employees to a third party, in any form, including aggregated. Data is partitioned per company from the database session onward: a query never sees the company next door.
6 · Subcontractors
The console and its backups are hosted in Canada, with no replication outside the country. The providers below receive only what their function requires, under contract, with no right of secondary use. They are involved only if your company turns on the corresponding feature.
| Provider | Function | What it receives |
|---|---|---|
| Stripe | Payments, Stripe Connect, Stripe Terminal, Tap to Pay, subscription billing | Amounts, payment references, merchant account details. Yoseri neither sees nor stores a full card number. |
| Square, Clover, Moneris | Linked payment terminals | Amount to collect, card reference returned by the terminal. |
| Twilio | SMS (receipts, reminders, campaigns) | Recipient’s number, text of the message. |
| Resend | Transactional and marketing email | Recipient’s address, content of the email. |
| Plaid | Read-only bank connection | Your bank credentials stay with Plaid and your institution; Yoseri receives the transactions. |
| Meta | WhatsApp, with your company’s number | Number and messages exchanged on that channel. |
| Apple, Google | Loyalty card in Apple Wallet and Google Wallet | The card identifier and its points balance; never the customer’s record. |
Some of these providers operate their services outside Canada. The up-to-date list of names is provided on request at vieprivee@yoseri.com.
7 · Retention
- Your company’s data lives as long as your account lives, including on the free Discovery plan.
- Technical logs are erased after 90 days. The log of sensitive actions and the incident register are kept for as long as Law 25 requires.
- The fiscal ledger (chained Z closings, signed archives) and billing records are kept for as long as the tax law of your country requires; you can export the archive at any time.
- After the account is closed: deletion, then removal from backups within 30 days, except for what tax law requires to be kept.
8 · Security
AES-256 encryption at rest, TLS 1.3 in transit, restricted and logged internal access. Sensitive actions require a capability checked by the server; clock-in on a tablet is done by PIN, locked for 30 seconds after five failed attempts. Z closings enter a ledger chained with SHA-256, verifiable with a public key, archived and signed every month and every year.
In the event of an incident presenting a serious risk, we notify your company without waiting for resolution, so that it can in turn inform the people concerned and the Commission d’accès à l’information du Québec, or the competent authority in its country. The incident is recorded in your console’s register.
9 · Your rights, and those of individuals
Your company can at any time access its data, correct it, export it (CSV, PDF or Excel from every report, accounting export, fiscal ledger archive) and close its account. Any other request receives a reply within 30 days.
Your customers and employees exercise their rights (access, correction, deletion, withdrawal of consent, portability, complaint to the Commission d’accès à l’information du Québec or the authority in their country) with your company, which handles them in the console. If such a request reaches us directly, we forward it to your company and help you respond.
10 · Contact us
Privacy Officer, Yoseri, Montréal (Québec): vieprivee@yoseri.com. For any other question: support@yoseri.com.
See also the terms of use and the security and compliance page.