Legal Notice
Last updated: 2026-10-18
Identification
Les Agents Maximus inc.
Quebec, Canada
Email: lacompagniemaximus@protonmail.com
Privacy officer: Maxime Tremblay
Privacy officer email: lacompagniemaximus@protonmail.com
Privacy Policy
Les Agents Maximus inc. is committed to protecting the personal information of its users in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25).
Information Collected
Maximus Account
When creating an account, we collect your email address, username, and password (stored in encrypted form). This information is managed by our identity provider Logto, hosted on our servers in Quebec.
Session Data
When logged in, a secure session cookie is used to maintain your connection. This cookie does not contain any personal data in plain text.
Usage Data (Analytics)
We use Umami, a privacy-friendly analytics tool hosted on our servers in Quebec. Umami does not use cookies, does not collect IP addresses, and cannot identify individual visitors. The data collected (pages visited, browser, operating system) is aggregated and anonymous.
Email Communications
Transactional emails go through Resend (see the "Hosting and Subprocessors" section), which receives the recipient's address and the content of each message. For your Maximus Account, this is a 6-digit verification code, sent at sign-up, at sign-in by code and at password reset. After a purchase, this is the confirmation email, which contains the license key (which itself carries your email address), the product and its edition, the price paid, our contact details, and links to the downloads and to the terms of sale. These emails contain neither your name nor your card details.
Contact Form
When you contact us by email, your information is used solely to respond to your inquiry.
Feedback and Suggestions
When you submit feedback through the feedback widget, we collect your message text and, only with your explicit consent, navigation context (page visited, language, theme, screen size, browser, previous page). If you are logged in, your account identifier is associated with the feedback. Your IP address is irreversibly hashed (HMAC-SHA256) for abuse protection and is never stored in plain text.
Purchase data
When you buy a license, we retain your email address, the product purchased, the amount, and the Stripe payment identifier; if you are logged in to your Maximus Account, the license is also linked to that account's identifier. Payment takes place on a page hosted by Stripe: card details are processed there by Stripe and never transmitted to us. What we transmit to Stripe as soon as you start a purchase (your email address and your account identifier if you are logged in, no personal information otherwise) is detailed in the "Hosting and Subprocessors" section. This transfer outside Quebec was the subject of a privacy impact assessment (PIA).
License activation (Simpl-Résultat)
When you activate a license in Simpl-Résultat, the application sends our license server, hosted in Quebec, the license key, an identifier of the computer and the name of that computer. The key contains your email address, the product, the edition and its validity dates, so the server can link each request to your purchase. Of the identifier, the server keeps only a fingerprint specific to Simpl-Résultat, computed from the system's identifier: since version 0.16, the application computes it before sending; when the system identifier itself reaches the server (a version earlier than 0.16, or the deactivation of a computer activated with such a version), the server computes the fingerprint on receipt and never records that identifier. This fingerprint is pseudonymous, not anonymous: it stays linked to your license, and anyone who already knows your computer's system identifier can compute it again. The server records this information with the date of the computer's first activation and of its most recent one; it records nothing about your use of the application. This information is used to enforce the number of computers your license allows, stated in the product's annex to the terms of sale, and to show the list of your computers: when you open that list, or when an activation exceeds that number, the application requests it from the server by sending the product and the key. When you deactivate a computer, or remove the key from an activated computer ("Remove the key" button of the License card, since version 0.17), the application sends the product, the key and the computer's identifier, and the server, if it responds, marks that computer as inactive. A key removed while the server does not respond leaves the computer, but the computer stays active on the server.
License check (Simpl-Résultat)
At startup and when a key is entered, at most once every 24 hours for the same key, the application checks with the server that the stored license has not been revoked. Without a stored key, no request is sent. The application sends only the product and the key; since the key contains your email address, the server can link the check to your purchase. A revoked key, for example after a refund, switches the application to the free edition, and it keeps being checked once every 24 hours for as long as it stays stored, so that a correction made on our side is picked up. The "Remove the key" button of the License card ends these checks, as does storing another key or uninstalling the application. This is how version 0.17 works; version 0.16 checks the license only at startup and has no such button, and earlier versions do not check it. If the server does not respond, nothing changes in the application. The server keeps no record of these checks, apart from the fingerprint of the IP address described below and the server logs (see "Data Retention"). To limit the number of requests, the license server keeps, for every request from the application, a fingerprint of your IP address computed with a secret key, never the address itself. This fingerprint is pseudonymous, not anonymous: whoever holds the server's key can compute it again from a given address. It is used for a one-minute window and deleted at the latest one day after that window ends.
Local Storage
The theme preference (light/dark) is saved locally in your browser (localStorage) and is not transmitted to our servers.
Purposes of Collection
- • Authentication and management of your account
- • Providing and improving our services
- • Processing purchases, delivering licenses, and meeting accounting and tax obligations
- • License activation and checks: number of computers allowed per license, revocation of a refunded license and pick-up of a correction, protection of the license server against abuse
- • Transactional communications (account verification, sign-in by code, password reset, purchase confirmation and license key delivery)
- • Anonymous analysis of website traffic
- • Responding to your support requests
Hosting and Subprocessors
Your personal information is processed by the following subprocessors:
- • Logto (identity provider) — hosted on our OVH Canada server, located in Beauharnois, Quebec
- • OVH Canada — server hosting (Beauharnois, Quebec, Canada)
- • Vercel Inc. — showcase website hosting (United States). No personal information is stored on Vercel; only static website content is hosted there
- • Resend (Plus Five Five, Inc., doing business as Resend, San Francisco, California) — delivery of the transactional emails described under "Email Communications". Resend stores its data in the United States and sends our emails from Amazon Web Services in Virginia (United States). This transfer outside Quebec was the subject of a privacy impact assessment (PIA).
- • Stripe (Stripe Payments Canada, Ltd.; information processed in the United States by Stripe, LLC) — payment processing and receipt issuance, on a payment page hosted by Stripe. If you are logged in to your Maximus Account, we transmit to Stripe, as soon as you start a purchase and even if you do not complete it, your email address, which is prefilled and locked on the payment page, and your account identifier, which is used to link the license to that account. If you are not logged in, we transmit no personal information to Stripe: you enter your email directly on its page. In both cases, card details are handled directly by Stripe. This information may be transferred, processed and stored outside Canada and, as a result, may be subject to disclosure there as the law requires; this transfer is governed by Stripe's services agreement and its data processing agreement.
- • Umami (analytics) — hosted on our OVH Canada server, located in Beauharnois, Quebec. No personal data collected
Link, Stripe's digital wallet
On its payment page, Stripe offers Link, an optional service that saves your payment information for your next purchases: you can pay without using it. Link recognizes a person who is already enrolled by their email address, their phone number or a cookie in their browser, even if they enrolled with another merchant, then sends them a one-time passcode before filling in their information for them. The email address tied to the purchase, the one you enter or the one we transmit to Stripe if you are logged in, may be used for that recognition. The information saved in Link (name, contact details, address, payment method) is collected and kept by Stripe on its own behalf, not as a subprocessor acting for us: Stripe is responsible for it, and your rights over that information are exercised with Stripe, under Link's privacy policy (link.com/privacy) and Stripe's (stripe.com/privacy). When you pay with Link, Stripe shares information about the transaction with us, including your name and contact details; we use it only for that purchase and its follow-up (license delivery, support, refund, accounting obligations).
We never sell, rent, or share your personal information for advertising or commercial purposes.
Data Retention
- • Account data: retained as long as your account is active. Deleted within 30 days of account deletion.
- • Server logs: retained for a maximum of 90 days, then automatically deleted.
- • Analytics data: retained for 24 months (anonymous and aggregated data, with no possible identification).
- • Contact emails: retained for as long as necessary to process your request.
- • Purchase records (email, amount, payment identifier): retained for approximately 6 years in accordance with accounting and tax obligations (CRA and Revenu Québec).
- • License activations (fingerprint of the identifier and name of the computer, dates): kept while the computer is activated and the license is valid, then deleted 30 days after the computer is deactivated, the license is revoked or the license expires, and at the latest 31 days after.
- • IP addresses of requests to the license server: never kept as such. Their pseudonymous fingerprint, used to limit the number of requests over a one-minute window, is deleted at the latest one day after that window ends.
- • Backup copies: kept for at most 30 days, encrypted as soon as they leave our server; erased data remains in them until they are rotated out, and is not accessed except to check that they can be restored.
Your Rights
Under Law 25, you have the following rights:
- • Right of access — Obtain a copy of the personal information we hold about you.
- • Right of rectification — Have inaccurate or incomplete information corrected.
- • Right of deletion — Request the deletion of your personal information and your account.
- • Right to portability — Receive your information in a structured, commonly used format.
- • Withdrawal of consent — Withdraw your consent to the collection of your information at any time.
To exercise your rights, contact our privacy officer at lacompagniemaximus@protonmail.com. We will respond within 30 days.
Privacy Incidents
In the event of a privacy incident involving your personal information, we commit to notifying the Commission d'accès à l'information du Québec (CAI) and the affected individuals in accordance with Law 25, as promptly as possible.
Changes
We may update this policy periodically. In case of a substantial change, users with an account will be notified by email. The last update date is indicated at the top of this page and every change is recorded in the history below.
Change history
- — Retention: added how long backup copies are kept (at most 30 days) and what happens to erased data in those copies.
- — Licenses and emails: added the information Simpl-Résultat sends when a license is activated, when it is checked and when the key is removed, the pseudonymous fingerprint of IP addresses the license server keeps, and the matching retention periods; Resend is named as the transactional email provider, with where it processes data (United States) and the content of each email, which corrects the statement that it only received the email address.
- — Payment: clarified what is transmitted to Stripe, including the Maximus Account identifier when a purchase is started while logged in, and which Stripe entities receive it; added Link, the digital wallet Stripe offers on its payment page; distinguished the cookies of this website from those of the payment page hosted by Stripe; added this history.
- — Named the legal entity, Les Agents Maximus inc., in the identification, the privacy policy, the terms of use and the intellectual property notice.
- — Added purchase data: information retained when a license is bought, disclosure to Stripe, sale purpose and retention of purchase records.
- — Added the feedback and suggestions collected through the feedback widget.
- — Rewrote the privacy policy under Law 25 (information collected, purposes, subprocessors, retention, rights, cookies, incidents) and added the terms of use of the Maximus Account.
- — First publication of the legal notice.
Terms of Use
These terms govern the use of the Maximus Account and associated services offered by Les Agents Maximus inc. By creating an account, you agree to these terms.
Purpose of the Service
The Maximus Account is an optional user account providing access to the applications and services of the La Compagnie Maximus ecosystem, including cross-device synchronization and centralized data management.
Account Creation and Management
You must provide accurate information when registering. You are responsible for the confidentiality of your login credentials. You must promptly inform us of any unauthorized use of your account.
User Obligations
You agree to use the services in compliance with applicable laws and these terms. Any abusive, fraudulent, or rights-infringing use is prohibited.
Data Ownership
Your data belongs to you. Les Agents Maximus inc. does not acquire any ownership rights over the content you create or store through our services. You retain all rights to your data at all times.
Limitation of Liability
Services are provided "as is." Les Agents Maximus inc. strives to ensure service availability and reliability but cannot guarantee uninterrupted operation. Our liability is limited to the amount of fees paid for the service in the preceding 12 months.
Termination
You may delete your account at any time. Deletion results in the erasure of your personal information within 30 days, in accordance with our privacy policy. We reserve the right to suspend or terminate an account in case of violation of these terms, after notification.
Applicable Law
These terms are governed by the laws of Quebec and applicable federal laws of Canada. Any dispute shall be submitted to the competent courts of the district of Quebec.
Changes to Terms
We may modify these terms. Substantial changes will be communicated by email to account holders at least 30 days before they take effect.
Intellectual Property
The content of this website (text, images, logo) is the property of Les Agents Maximus inc.
Any unauthorized reproduction is prohibited.