1. Who we are
Masko Développement inc., doing business as Masko, is a Quebec joint-stock company registered under NEQ 1 180 759 152 (Registraire des entreprises du Québec) and Federal Business Number 79629 7448 (Canada Revenue Agency). We build custom applications and widgets for Quebec SMBs.
Personal Information Protection Officer (PIPO): Pisimw Quoquochi, executive. Reach them at contact@masko.ca or by mail at the company address (516 rue du Coteau, La Tuque (Quebec) G9X 2A6).
2. What information is collected
Depending on the tool used, the following may be collected:
- Reservation widget: full name, phone number, email address (optional — it's what carries the confirmation and the reminder), free-text notes (allergies, occasion, etc.), reservation date and time.
- Site contact form: name, email address, message.
- No ad-tracking cookies, no cross-site analytics tools. The widget uses browser local storage (localStorage) to remember your details between visits — you alone can access it and clear it whenever you want.
3. Why this information is collected
- Process your reservation at the restaurant you chose.
- Send you an email reminder on the day of your reservation.
- Let the restaurant reach you in case of unforeseen issues.
- Reply to your contact request.
No data is used for advertising purposes or resold to third parties.
4. Where your information is stored
Reservation data is stored in the restaurant's Supabase database, never on our servers. This is a non-negotiable architectural rule at Masko: end-client data belongs to the restaurant, not to us.
The restaurant is responsible for the retention, security and lifetime of your data per its own policy. That policy is shown at reservation time or available on the restaurant's site.
Server location depends on the restaurant's account configuration. This information is available on written request.
5. Who can access your information
- The restaurant serving you and its authorized staff.
- Technical providers chosen by the restaurant (e.g. Twilio for texts, Resend or SendGrid for emails), strictly to the extent necessary to send the message.
- Masko, only within a technical support mandate requested by the restaurant, and never without its prior written authorization.
6. How long your information is kept
Retention time is set by the restaurant's policy. As a rule of thumb, a reservation is usually kept for twelve months after the visit to help the restaurant identify regulars and improve service. After that, data is anonymized or deleted.
7. Your rights (Quebec Law 25)
You have the right, at any time and free of charge, to:
- Access the personal information the restaurant holds about you.
- Correct any inaccurate, incomplete or ambiguous information.
- Request deletion of your information ("right to be forgotten"), unless legally required to retain it.
- Withdraw your consent at any time — this ends future collection but doesn't erase data already used for a lawful purpose.
- File a complaint with Quebec's Access to Information Commission if you believe a breach has occurred.
To exercise one of these rights, first contact the restaurant directly. If it doesn't respond or your request concerns a Masko tool, write to contact@masko.ca. We reply within thirty days, the maximum period set by Quebec's Law 25.
8. Security
Masko applies reasonable industry-standard security measures: encryption in transit (HTTPS), strong authentication for administrator accounts, least-privilege principle. No system is infallible; in case of a confidentiality incident, we notify affected persons and the Access to Information Commission per articles 3.5 et seq. of the Law.
9. Children and minors
Our tools are not intended for persons under 14 acting alone. A reservation made in a child's name is presumed to be made by an authorized parent or guardian.
10. Changes to this policy
We may update this policy to reflect technical, legal or service changes. The last update date is shown at the top of the page. Any substantive change will be announced to active clients by email before taking effect.
11. If you write to us from masko.ca
The sections above describe the tools Masko deploys for its clients. This one describes what happens when we are the ones receiving your information: this site's contact form, the form on the "Yours" page, and the conversational assistant.
What we collect — your first and last name, your email, your company name, whatever you write, and your phone number if you choose to give it. Nothing else. Every required field exists to answer you; none exists to profile you.
Where it goes — this site is hosted on Vercel and its code runs in the Montreal region. Two processes do leave Canada, and we would rather write it down than let you guess:
- Emails sent from this site go through Resend, an American company, with Web3Forms (also American) as a fallback if Resend is unavailable.
- The conversational assistant: what you write to it is sent to Anthropic, in the United States, to produce the answer. Don't write anything there you wouldn't hand to an American service.
For how long — a request received by email stays in our mailbox long enough to answer you and follow through on the project, then is deleted on request. The conversation with the assistant is not stored in any database: it lives in memory for the length of the exchange and is erased after thirty minutes of inactivity.
Your rights — the same as in section 7, exercised directly with us. Write to contact@masko.ca to access, correct or delete what we hold about you.
A question about this policy? Write to contact@masko.ca. You'll reach the person responsible, not a service desk.