Privacy Policy

1. Overview

NexFortis IT Solutions (17756968 Canada Inc.) ("we", "us", "our") is committed to protecting the privacy of our customers. This Privacy Policy describes how we collect, use, store, and protect your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect and how we use it

2. Information We Collect

• Account information: Name, email address, phone number (optional) when you create an account or place an order.
• QuickBooks files: .QBM files uploaded for conversion or data services. These files may contain financial data, customer/vendor names, transaction records, and other business information.
• Payment information: Payment is processed by Stripe. We do not store credit card numbers or payment details on our servers.
• Waitlist signups: Email address and product interest when you join a waitlist for Coming Soon products.
• Support tickets: Information you provide when submitting support requests.

3. How We Use Your Information

• Service delivery: To process your orders, perform conversions, and deliver results.
• Communication: To send order confirmations, delivery notifications, and respond to support requests.
• Waitlist notifications: To notify you when products you've signed up for become available.
• Service improvement: To improve our services and troubleshoot technical issues.

How we protect your data

4. Data Retention

• QuickBooks file retention: All uploaded and converted files are permanently deleted within 7 days of delivery.
• Account data: Retained while your account is active. You may request deletion at any time.
• Waitlist data: Retained until the product launches and you are notified, or until you unsubscribe.
• Order records: Retained for tax and accounting purposes as required by Canadian law.

5. Data Sharing

We do not sell, trade, or share your personal information with third parties, except:

• Payment processing: Stripe processes payments on our behalf and has its own privacy policy.
• Legal requirements: If required by Canadian law, court order, or regulatory authority.

6. Data Security

• All file uploads are encrypted using 256-bit SSL/TLS during transit.
• Files are stored on access-controlled systems during processing.
• Access to customer data is restricted to authorized personnel only.
• Customer files are permanently deleted within 7 days of service completion.

7. Cookies and analytics

Our site uses two distinct cookie postures depending on where you are.

On public marketing pages (the home page, service catalog, FAQ, the QuickBooks Migration Guide at /qbm-guide, service detail pages at /service/..., category pages at /category/..., and ad landing pages at /landing/...), we use Google Analytics 4 (GA4) with advertising features enabled. This includes remarketing audiences and ad measurement, allowing us to show relevant ads on Google services and partner sites to people who have visited our marketing pages. Cookies set on these pages include analytics cookies (storing a Google Analytics client identifier) and advertising cookies used by Google for remarketing and ad personalization. Data is sent to Google as a data sub-processor. IP addresses are anonymized before being sent to Google. For more information, see Google’s data practices.

On customer portal and authenticated pages (/portal, /order, /order/:id, /subscription, /ticket/:id, and any /admin route), we use only essential cookies for authentication and session management, plus analytics cookies for measuring portal usage. We do not enable advertising cookies on these pages. The QuickBooks files you upload, their metadata, and the contents of your account dashboards are never shared with Google or any other third party for advertising purposes.

Analytics events from public marketing pages are retained in Google Analytics for 14 months. You can decline cookie usage by clicking Decline on the cookie banner the first time you visit each of our hosts (you will be asked separately on nexfortis.com and qb.nexfortis.com because consent is stored per origin). After that initial choice you can clear site data in your browser to be re-prompted, or opt out of personalized advertising at adssettings.google.com.

Your rights, updates, and contact

8. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Withdraw consent for the use of your information
• Request deletion of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Contact

For privacy-related questions or to exercise your PIPEDA rights, contact us at support@nexfortis.com.

NexFortis IT Solutions
Ontario, Canada