Your Privacy Matters
OCSAPP Inc. ("OCSAPP," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the OCSAPP platform at ocsapp.ca (the "Platform"), and describes your rights under applicable Canadian and Quebec privacy law.
OCSAPP Inc. is a corporation federally incorporated under the Canada Business Corporations Act on November 26, 2023 (Corporation No. 1750354-7; Quebec enterprise number (NEQ) 1181584997), with its registered office at 300 Rue Pradier, Laval, Quebec H7H 2W9.
2.1 Information You Provide
2.2 Business Information (Sellers, Suppliers, Business Clients, Drivers)
2.3 Automatically Collected Information
3.1 To Provide the Platform
3.2 To Improve the Platform - analyze usage patterns and trends; develop new features and services.
3.3 Marketing and Communications - send promotional emails, with your CASL-compliant consent; provide personalized recommendations and service-related announcements.
3.4 Security, Fraud Prevention, and Legal Compliance - detect and prevent fraudulent transactions and monitor for suspicious activity; enforce OCSAPP's Terms of Service and Role-Specific Agreements; comply with legal obligations, including tax and corporate record-keeping requirements.
4.1 With Sellers, Suppliers, and Drivers - when you place an order, we share the information necessary to fulfill it: your name, delivery address, contact information, and order details, with the relevant Seller or Supplier and the assigned ODA driver.
4.2 With Service Providers - payment processors (currently Stripe and PayPal); cloud hosting providers (currently AWS); email service and analytics providers.
4.3 Legal Requirements - we may disclose information where required by law, to comply with a legal process or government request, to enforce our Terms of Service, or to protect our rights, property, or safety, or that of another User.
4.4 Business Transfers - in the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner, subject to the same protections described in this Policy.
We implement security measures appropriate to the sensitivity of the information we hold, including SSL/TLS encryption for data in transit, encrypted storage, PCI DSS-compliant payment processing, access controls, and regular security review.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Section 11 describes what happens if a security incident occurs despite these measures.
6.1 Access, Correction, and Portability
6.2 Marketing Opt-Out - unsubscribe from promotional emails via the link in each email; update your communication preferences in your account settings.
6.3 Account Deletion - you may request account deletion by contacting privacy@ocsapp.ca. We may retain certain information after deletion for legal, tax, and accounting purposes as described in Section 12; a deleted account cannot be recovered.
6.4 Automated Decisions - where a decision significantly affecting you is made exclusively by automated means, you have the rights described in Section 10.
6.5 Right to File a Complaint - if you believe we have not respected your privacy rights, you may contact our Privacy Officer (Section 13) or file a complaint with the Commission d'acces a l'information du Quebec (CAI), the provincial regulator responsible for enforcing Law 25.
6.6 Do Not Track - the Platform does not currently respond to "Do Not Track" browser signals.
7.1 What Cookies We Use
OCSAPP does not currently use third-party analytics or advertising cookies. If this changes, this section and OCSAPP's Cookie Policy will be updated before any such cookies are deployed. See the full cookie inventory at ocsapp.ca/cookies.
7.2 Managing Cookies - you can control cookies through your browser settings. Disabling non-essential cookies may affect some Platform functionality, but will not prevent you from using core features.
The Platform is not intended for individuals under the age of majority in Quebec (18 years old) as a Buyer, consistent with the Buyer Terms of Service. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact privacy@ocsapp.ca immediately and we will take steps to remove it.
9.1 OCSAPP's own infrastructure and hosting are based in Canada. However, certain third-party service providers we rely on may process personal information outside Canada, including in the United States:
| Provider | Purpose | Location of Processing |
|---|---|---|
| Stripe | Payment processing | May process data in the United States |
| PayPal | Payment processing (alternative method) | May process data in the United States |
| AWS (Amazon Web Services) | Cloud hosting | Hosted in a Canadian AWS region where available |
9.2 Where information is processed outside Canada, it may be accessible to the courts, law enforcement, and national security authorities of that jurisdiction under its laws. We select service providers that maintain appropriate contractual and technical safeguards.
10.1 OCSAPP uses an automated process to determine fault on certain claims - for example, whether a shortage, damage, or delivery discrepancy originated with a Seller or Supplier before pickup, or occurred in transit - using photo and scan evidence collected at pickup and delivery (the "Dynamic Chargeback" mechanism described in OCSAPP's Returns & Refund Policy). Where this determination results in a deduction from a Seller's, Supplier's, or Driver's payout, this is a decision made exclusively by automated means that may significantly affect you.
10.2 Where this applies to you, you have the right to: request an explanation of the factors and criteria used to reach the determination; submit observations or additional evidence for consideration; and request that a human reviewer examine the determination, through the dispute process already described in your Role-Specific Agreement (typically a 5-business-day window from the determination).
10.3 OCSAPP does not use automated decision-making to determine platform access, account eligibility, or pricing on an individualized basis - those are governed by the fixed, published terms in your Role-Specific Agreement.
11.1 If a confidentiality incident occurs that presents a risk of serious injury to you - including unauthorized access, use, or disclosure of your personal information - we will notify the Commission d'acces a l'information (CAI) and you, without undue delay, describing the nature of the incident, the information involved, and the steps taken to address it.
11.2 OCSAPP maintains an internal register of confidentiality incidents, whether or not a given incident meets the threshold for notification, as required by Law 25.
We retain personal information only as long as necessary to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements.
| Category | Retention Period |
|---|---|
| Account information | Duration of active account, plus 7 years after closure |
| Transaction and payment records | 7 years (tax and accounting requirements) |
| Marketing data | Until you opt out, plus 30 days |
| Confidentiality incident register | Retained on an ongoing basis, per Section 11.2 |
13.1 OCSAPP has designated a Privacy Officer responsible for overseeing compliance with this Policy, handling access and correction requests, and coordinating breach notification under Section 11.
Privacy Contact
Privacy Officer: privacy@ocsapp.ca
General Support: info@ocsapp.ca - 514-746-3789
Registered Office: 300 Rue Pradier, Laval, Quebec H7H 2W9
The Platform may contain links to third-party websites. OCSAPP is not responsible for the privacy practices of external sites, and encourages you to review their privacy policies before providing any information.
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date and, where required by law, disclosed to you directly with reasonable advance notice. Continued use of the Platform after a change takes effect constitutes acceptance, except where applicable law requires your affirmative consent.
This Privacy Policy is intended to comply with:
17.1 By creating an account or using the Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy, to the extent consent is the applicable legal basis for a given use.
17.2 Where Law 25 requires a more specific or express form of consent for a particular use (for example, certain marketing communications or the use of sensitive information), we will seek that consent separately, rather than relying on this general acknowledgment alone.
