Havréo
Privacy Policy
Last updated: October 17, 2026 · Version 0
Technologies Domo MTL inc. operates havréo.
1. Who we are and what this policy covers
1.1 Who we are.
havréo is a platform operated by Technologies Domo MTL inc. ("havréo", "we", "us"), a company incorporated in Québec, with its head office at 800 rue du Square-Victoria, Montréal (Québec) H3C0B4 Canada. havréo allows users of the Plaform ("Clients") to book and benefit from household and personal services from independent service providers ("Service Providers").
1.2 Why this policy exists.
This policy explains, in plain language, what personal information we collect, why we collect it, how we use and share it, how long we keep it, and what rights you have. It is published in accordance with the Act respecting the protection of personal information in the private sector (Québec) and applies with our Terms of Service.
1.3 What it covers.
This policy applies to personal information we collect through the havréo mobile application and website (the "Platform"), and when you contact us. It applies to Clients, Service Providers, applicants who wish to become Service Providers, and visitors to our website.
1.4 What it does not cover.
Third-party websites and services linked from the Platform, such as an app store or a payment processor's own website, have their own privacy policies.
1.5 Personal information.
In this policy, "personal information" means any information that concerns a natural person and allows that person to be identified, directly or indirectly.
1.6 Person in charge of the protection of personal information (Privacy Officer). Our Privacy Officer is responsible for our compliance with this policy and with privacy laws. You may contact them with any question, request or complaint:
- Francis Azar, Chief Legal Officer
- Technologies Domo MTL inc., 800 rue du Square-Victoria, Montréal (Québec) H3C 0B4 Canada
- Email: privacy@havreo.com
- Phone: +1 (438) 544-4363
2. Personal information we collect and how we collect it
We collect only the personal information needed for the purposes described in section 3. What we collect depends on whether you are a Client, a Service Provider or a visitor.
2.1 Information you provide to us
| Category | Examples | Who |
|---|---|---|
| Identity and contact | Name, email address, phone number, password, profile photo | All users |
| Demographic information | Date of birth, age | All users |
| Residence | Address, unit number, building type (apartment or condominium), access instructions (door code, concierge, parking) | Clients |
| Household and family | Number and age of children, pets and their needs, household preferences | Clients |
| Information about children | Child's name, age and, if you choose to provide it, allergies, medical or special needs relevant to the Service | Clients (parents or legal guardians) |
| Payment information | Payment card number, expiry date and security code, collected and processed by our payment processor | Clients |
| Professional information | Services offered, experience, certifications, insurance, rates, availability, service area, business number, GST/QST numbers | Service Providers |
| Verification information | Proof of identity, background check results provided by a third-party verification provider | Service Providers |
| Payout and tax information | Bank account details for payouts and tax identification numbers, social insurance number, date of birth, address, or any information legally required. | Service Providers |
| Content and communications | Messages and photos exchanged through the Platform, reviews and ratings, conversations with the havréo Assistant, photos submitted with a complaint, communications with our support team | All users |
| Survey and contest information | Answers to surveys, entries to contests | Users who choose to participate |
2.2 Information collected automatically
When you use the Platform, our servers automatically record technical information: device and browser type, IP address, pages viewed, and date and time of use. If you enable push notifications, we also receive a device token. We use essential technologies only (see section 4.2).
2.3 Information from other sources
- Other users. A Client may give us information about the members of their household, such as children. A Client who does so confirms that they have the authority to provide it as having parental authority or being the tutor.
- Sign-in services. If you sign in with your Google account, we receive your name, email address and profile photo.
- Address services. When you enter your address, it is sent to Google Maps to suggest and validate it.
- Payment processor. We receive confirmation of payments, the last four digits and type of card, and fraud indicators. We do not receive or store your full card number.
- Verification providers. For Service Providers, we receive the results of identity and background checks they have consented to.
2.4 You can limit what you share.
Fields marked as optional can be left blank.
3. Why we use your information, and your consent
3.1 Purposes.
We use personal information only for the following purposes:
| Purpose | What it means in practice |
|---|---|
| Providing the Services | Creating and managing your account, matching Clients with Service Providers, managing Bookings, sending confirmations and reminders, allowing Clients and Service Providers to communicate |
| Payments and payouts | Processing Client payments, refunds and chargebacks, paying Service Providers, issuing receipts |
| Safety and trust | Verifying the identity of users, carrying out the verifications described on the Platform, handling incidents and complaints, preventing fraud and misuse |
| Personalization and recommendations | We may suggesting Services and Service Providers that match your needs, location, household and history on the Platform (see section 4.1) |
| Customer support | Answering your questions, resolving problems and disputes |
| Improving and developing the Platform | Analyzing how the Platform is used, fixing errors, testing and developing new features and services |
| Marketing and communications | Sending you news, offers and promotions about havréo, with your consent (see section 4.3) |
| Surveys and contests | Measuring satisfaction and running contests you choose to enter |
| Legal obligations and protection of rights | Complying with tax, accounting and other legal obligations, responding to lawful requests from authorities, enforcing our Terms of Service and defending legal claims. Havréo has to report Service Provider information to the CRA and Revenu Québec under the digital platform reporting rules. |
3.2 Your consent.
We collect your personal information from you, with your consent, unless the law allows otherwise. When you provide information after being informed of the purposes described in this policy, you consent to its use and communication for those purposes.
3.3 New purposes.
We will not use your information for a purpose other than the one for which it was collected unless you consent to it or the law allows it, for example where the new purpose is consistent with the original one or the information is de-identified and used for study, research or statistics.
3.4 Sensitive information.
Some information is sensitive because of its nature or context, such as health information about a child, information about your family situation, background check results and precise location. We ask for your express consent before collecting or using sensitive information, and we use it only for the specific Booking or purpose for which you provided it.
3.5 Children.
The Platform is intended for adults 18 years of age or older. We do not knowingly collect personal information directly from children. Information about a child under 14 is collected only from the child's parent or legal guardian, with their consent, and only as needed for the requested Service. If we learn that we have collected information about a child without that consent, we will delete it.
3.6 Withdrawing your consent.
You may withdraw your consent at any time, for all or some purposes, by contacting our Privacy Officer. Withdrawal does not affect what was done before it. If you withdraw consent to information that is needed to provide a Service, we may no longer be able to provide it, and we will tell you so.
4. Technology, cookies, recommendations and marketing
4.1 Privacy by default.
The Platform does not use features by default that locate you or create a profile of you, and uses essential cookies only. If we add such features, they will be turned off by default and we will update this policy.
4.2 Cookies and similar technologies.
We use only essential cookies and browser storage, which keep you signed in, secure the Platform and, if you enable them, allow push notifications. The Platform cannot work without them. We do not use analytics or advertising cookies.
4.3 Marketing.
We might send promotional messages. Before doing so, we will first ask for your separate consent, and each message will include a way to unsubscribe. We will still send you messages needed for your account and Bookings. We do not sell your personal information.
4.4 Automated decisions.
We might use automated systems to help detect fraud and safety risks, and to rank Service Providers in search results. If a decision about you is based exclusively on automated processing, we will inform you, and on request we will tell you what personal information was used, the main factors that led to the decision, and your right to have the information corrected. You may submit your comments to a member of our staff who can review the decision.
Our payment processor uses automated tools to detect fraud, which may result in a payment being declined.
4.5 Artificial intelligence.
We may use artificial intelligence tools to help write Service descriptions, answer support questions or improve recommendations. When we use your information to develop or train these tools, we use de-identified or anonymized information whenever possible.
The Platform offers Clients the havréo Assistant, an optional conversational assistant powered by Google's Gemini artificial intelligence model. It helps you find Services, Service Providers, availabilities and your Bookings, and can prepare a payment page that you complete yourself. To answer you, we send Google your messages, your recent conversation history and the information the assistant looks up, such as Service Providers' names and ratings, prices, time slots and your Bookings. We do not send your access notes, unit number, private messages, receipts or payment information. Google processes this information outside Québec. We keep your conversations for 30 days, and you can delete them at any time. Please do not enter health information or other sensitive information in the assistant.
5. Who we share your information with
We share personal information only as described below. We do not sell or rent it.
5.1 Between Clients and Service Providers.
To perform a Booking, we share with the Service Provider the Client's first name, address, access instructions, the details of the Services requested and, where relevant, more specifications (such as, children or pets concerned). We share with the Client the Service Provider's first name, profile, photo, ratings and verification status. This information may be used only to perform or receive the booked Services.
Clients and Service Providers can exchange messages and photos through the Platform. A Client can contact any approved Service Provider serving their area; a Service Provider can contact only Clients who have booked with them. Your household notes and access instructions are shown to the Service Provider after they accept a Booking.
When you review a Service Provider, the Service Provider sees your name with your rating, comment and tags. Your rating appears on the Service Provider's public profile without your name; your comment and tags appear there only if you choose to publish them.
5.2 Within havréo.
Only employees and contractors who need information to perform their duties have access to it, for example customer support, safety and trust, and finance teams.
5.3 Our service suppliers.
We use service suppliers who process personal information on our behalf, under a written contract that requires them to protect it, use it only to perform their mandate, and destroy it at the end of the contract:
| Category | Supplier | Location |
|---|---|---|
| Cloud hosting, databases and file storage | Google Cloud Platform | Canada (Montréal region) |
| Sign-in and push notifications | Google (Firebase) | United States |
| Address autocomplete and validation | Google Maps Platform | United States |
| Artificial intelligence (havréo Assistant) | Google (Gemini API) | United States |
| Payment processing | Stripe | United States |
| Transactional emails | Resend | United States |
| Internal alerts | Slack | United States |
| Identity and criminal record checks | Trustii | Canada |
An up-to-date list is available on request from our Privacy Officer.
5.4 When the law requires or allows it.
We may communicate personal information without your consent where the law allows it, for example to a public body or police force that needs it to carry out its duties, to a lawyer representing us, to collect a debt, or to prevent an act of violence where there is a serious risk of death or serious bodily injury. We communicate Service Providers’ identification, tax and payout information to the Canada Revenue Agency and Revenu Québec as required by digital platform reporting rules and other requirements.
5.5 Business transactions.
If we consider a merger, financing, sale of assets or similar transactions, we may communicate information needed to conclude it, under an agreement that limits its use to that purpose and requires its protection.
5.6 Communication outside Québec.
Some of our service suppliers store or process information outside Québec. Before communicating information outside Québec, we conduct a privacy impact assessment that considers the sensitivity of the information, the purposes for which it will be used, the protection measures that will apply, including contractual ones, and the legal framework of the place where it is sent. We communicate it only if the assessment shows that it will receive adequate protection. Information held outside Québec may be subject to the laws of that place, including access by its authorities.
6. How long we keep your information and how we protect it
6.1 Retention.
We keep personal information only as long as needed for the purposes for which it was collected, or as required by law:
| Information | Retention period |
|---|---|
| Account and profile information | While your account is active, then 12 months after it is closed |
| Booking, payment and payout records | 7 years after the end of the year concerned, to meet tax and accounting obligations |
| Messages and reviews | Messages: 36 months after the last message in the conversation. havréo Assistant conversations: 30 days, or earlier if you delete them. Or longer if needed for a complaint or dispute |
| Information about children, including health information | Household notes: until you change or delete them, or close your account. Service details: same as Booking records. |
| Background check results | For as long as the Service Provider's account is active, and no longer than one year after it is closed (unless any other legal requirement). |
| Marketing preferences and consents | As long as needed to prove your consent or withdrawal |
When the retention period ends, we destroy the information or anonymize it so that it irreversibly no longer allows you to be identified, in accordance with the law.
6.2 Security measures.
We use security measures appropriate to the sensitivity of the information, including:
- Technological: encryption of data in transit and at rest, access controls based on job duties, multi-factor authentication for our staff, logging and monitoring of access;
- Organizational: confidentiality commitments, contracts with our service suppliers, privacy impact assessments for new projects;
- Physical: restricted access to our premises and equipment.
No method of transmission or storage is completely secure, but we work continuously to protect your information. You must keep your password confidential and contact us immediately if you suspect unauthorized access to your account.
6.3 Confidentiality incidents.
If a confidentiality incident occurs, we take reasonable measures to reduce the risk of harm and prevent a recurrence. If the incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the persons concerned. We keep a register of all confidentiality incidents.
7. Your rights, complaints and changes to this policy
7.1 Your rights.
Subject to the exceptions provided by law, you have the right to:
- Access the personal information we hold about you and obtain a copy;
- Rectify information that is inaccurate, incomplete or ambiguous, and have information deleted if it is outdated, not justified by the purpose of the file, or was collected in violation of the law;
- Portability: receive the personal information you provided to us in a structured, commonly used technological format, or have it transferred to a person or organization you designate;
- Withdraw your consent to the use or communication of your information (section 3.6);
- Ask us to stop disseminating your information, or to de-index a hyperlink attached to your name that gives access to it, where its dissemination causes you serious injury or contravenes the law;
- Be informed about automated decisions made about you (section 4.4);
- Know which persons within havréo have access to your information, how long it is kept, and the contact details of our Privacy Officer.
7.2 How to exercise your rights.
Many of these rights can be exercised by sending a written request to our Privacy Officer (section 1.6). We may ask you to confirm your identity before responding. We respond within 30 days of receiving your request. Access is free of charge, but reasonable fees may be charged for the transcription, reproduction or transmission of information; we will tell you the amount in advance. If we refuse a request, we will explain why.
7.3 Complaints.
If you believe that we have not respected your privacy rights, you may file a complaint with our Privacy Officer. We will acknowledge receipt, examine your complaint and respond in writing within 30 days. If you are not satisfied with our response, you may contact the Commission d’accès à l’information.
7.4 Changes to this policy.
We may update this policy, for example when we add new features or the law changes. We will publish the new version on the Platform and notify you by email or in-app message at least 30 days before any material changes takes effect, with a summary of what is changing. If a change requires your consent, we will ask for it. The date at the top of this policy shows when it was last updated. Previous versions are available on request.
7.5 Contact us. For any question about this policy or our privacy practices, contact our Privacy Officer at privacy@havreo.com or Technologies Domo MTL inc., 800 rue du Square-Victoria Montréal (Québec) H3C0B4 Canada.