The short version
- We collect what it takes to run Fopsis: your account details, the business data you bring in, and basic technical logs. Card details go to Stripe, never to us.
- We never sell personal information, use no advertising or tracking cookies, and send your data to no outside AI service.
- Your data is used only for your workspace. It never trains anything for anyone else.
- Where it is: our hosting provider's servers in the United States, with daily checked backups.
- How long: while your account is open; a closed account is erased after 30 days; a workspace whose plan ended is kept 12 months, with warnings.
- Your rights: access, correction, deletion, portability and more — write to our Privacy Officer at privacy@forecastproai.com; we answer within 30 days.
This summary is here to help you read the document; the full text below is what applies.
Fopsis (“Fopsis”, “we”, “us”) respects your privacy. This Privacy Policy explains what personal information we collect, why, how we use and share it, how we protect it, and the rights you have. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Québec’s Act respecting the protection of personal information in the private sector (as amended by Law 25), and, where applicable, the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA).
1. Scope
This Policy applies to personal information we process through our websites, applications and the Service. For business data you upload about your own customers or contacts (“Customer Data”), you are the party responsible for that information (the controller); we process it on your behalf as described in our Terms of Service and Section 7 below.
2. Who We Are & Privacy Officer
Fopsis, located in Montréal, Québec, Canada, is responsible for the personal information it holds. As required by Québec law, we have designated a person responsible for the protection of personal information:
The Privacy Officer
Email: privacy@forecastproai.com
You may contact the Privacy Officer to ask questions or exercise your rights (see Section 11).
3. Information We Collect
We collect the following categories of information:
| Category | Examples |
|---|---|
| Account information | Your name, email address, and a securely hashed password. |
| Organization & team | Organization name, team members you invite, roles, invitation status. |
| Business / Customer Data | Company, brand, product, supplier and SKU records, sales history and inventory figures you upload or enter, and Forecasts generated from them. |
| Billing information | Subscription plan, billing status, and transaction identifiers. Card details are collected and stored by Stripe, not by us. |
| Integration data | Access tokens and data exchanged with services you connect (e.g. Shopify), used only to provide the integration. |
| Usage & technical data | Log data, IP address, browser/device type, pages viewed, and actions taken, collected to operate and secure the Service. |
| Support requests | What you write to us from Ask Fopsis in the app, with the page you were on and the question the help could not answer, and our replies. Kept with your account and erased with it. |
| Cookies | Session and functional cookies described in our Cookie Policy. |
4. How We Use Information
We use personal information to:
- create and administer your Account and Organization;
- provide the Service, including generating Forecasts and analytics from your data;
- process payments, manage Subscriptions, and send billing communications;
- secure the Service, prevent fraud and abuse, and enforce our Terms;
- provide customer support and respond to your requests;
- send service and administrative messages, and (with any required consent) product updates;
- maintain, troubleshoot, and improve the Service; and
- comply with legal obligations.
5. Our Legal Bases (Consent & Purposes)
Depending on the information and applicable law, we rely on: your consent (which you may withdraw at any time); the performance of our contract with you (to deliver the Service you request); our legitimate interests in operating, securing and improving the Service (balanced against your rights); and compliance with legal obligations. We collect only the personal information necessary for the purposes identified above and, in accordance with Québec law, we do not use it for new, incompatible purposes without your consent unless the law permits.
6. Forecasting & Automated Processing
The Service generates Forecasts and recommendations using statistical and machine-learning methods applied to the business data you provide. This processing analyzes your business metrics (such as sales and inventory) — it does not make decisions that produce legal or similarly significant effects about individuals, and it does not profile individuals. You remain in control of, and responsible for, any decisions you make using Forecasts. If we ever introduce automated decision-making about individuals, we will inform you and provide the disclosures required by applicable law, including Québec Law 25.
Our AI commitments. The forecasting models, including the AI blend, run inside Fopsis and are built from each Organization’s own data, for that Organization only. Your data is never used to train a model for anyone else, never shared with another customer, and never sent to a third-party artificial-intelligence service.
8. International Data Transfers
Your information is stored on our hosting provider’s servers in the United States, and our payment processor may process billing information in the United States and elsewhere. The laws of those places may differ from yours. Before personal information is communicated outside Québec, Québec law requires an assessment of the privacy factors involved; we carry out that assessment, and we rely on contractual safeguards with our providers so that your information receives adequate protection, consistent with PIPEDA, Québec Law 25 and, where applicable, the GDPR.
9. Data Retention
We keep personal information only as long as it is needed for the purposes above:
| Situation | What happens |
|---|---|
| Your account is open | We keep your information to provide the Service. The workspace owner can export the workspace’s data at any time. |
| You close your account | Access ends at once. The account can be restored for 30 days (we remind you 7 days before the end); then your Organization’s data is erased. |
| Your plan ends, account not closed | Data is kept 12 months and can still be exported. We warn the owner 30 and 7 days before erasure, and never erase sooner than 30 days after the first warning. |
| Backups | Daily copies are kept 14 days and weekly copies 8 weeks, so erased data leaves our backups within 8 weeks. |
| Billing records | Held by Stripe, which keeps them as financial regulations require. |
We may keep information longer only where the law requires it or to resolve a dispute, and then only for that purpose.
10. How We Protect Information
We use technical and organizational measures appropriate to the sensitivity of the information, including encryption in transit (HTTPS/TLS), hashed passwords, optional two-factor authentication, encrypted storage of the credentials of services you connect, access controls and tenancy isolation between Organizations, session-security protections, login-abuse throttling, and daily integrity-checked backups. Our Security Overview lists what we do and what we do not yet do. No method of transmission or storage is completely secure; while we work to protect your information, we cannot guarantee absolute security. If a breach of confidentiality presents a risk of serious injury, we will notify affected individuals and the relevant authorities as required by law (including the Commission d’accès à l’information in Québec).
11. Your Privacy Rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you and know how it is used and to whom it has been disclosed;
- Rectify information that is inaccurate, incomplete or out of date;
- Withdraw consent or object to certain processing;
- Delete personal information, subject to legal exceptions;
- Portability — receive certain computerized personal information in a structured, commonly used technological format (a Québec Law 25 right, effective 2024);
- De-indexing / cessation of dissemination in the limited circumstances provided by law;
- Be informed about automated processing where it applies (see Section 6).
To exercise any right, contact our Privacy Officer at privacy@forecastproai.com. We will respond within the timeframe required by law (generally 30 days under PIPEDA and Québec law). We may need to verify your identity first. Much of your account and business data can also be viewed, corrected or exported directly within the Service.
Complaints. If you are not satisfied with our response, you may contact the Commission d’accès à l’information du Québec (CAI) or the Office of the Privacy Commissioner of Canada (OPC).
12. EU/UK & California Residents
EU/UK (GDPR). If you are in the EU or UK, you also have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your local supervisory authority. Our legal bases are described in Section 5.
California (CCPA/CPRA). If you are a California resident, you have the right to know, delete, and correct your personal information, and to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under the CCPA, and we do not discriminate against you for exercising your rights.
14. Children’s Privacy
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.
15. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will provide notice (for example, by email or an in-app notice) and update the “Last updated” date above. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
16. Contact Us
For privacy questions or to exercise your rights, contact:
The Privacy Officer — Fopsis
Montréal, Québec, Canada
Privacy: privacy@forecastproai.com · General: support@forecastproai.com
Fopsis · Montréal, Québec, Canada
Questions about this document? Contact support@forecastproai.com.