Last updated: July 2026

Privacy Policy

This Privacy Policy explains how Cloudtric Inc. ("Cloudtric", "we", "us", or "our") collects, uses, discloses, and protects personal information in connection with faManager, our cloud-based fixed asset management software available at famanager.ca (the "Service").

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By creating an account or using the Service, you agree to the practices described in this Policy.

1. Who This Policy Applies To

This Policy applies to the individuals who register for and use faManager (account holders and invited users) and to visitors of our website. faManager is a business tool. The fixed asset records you enter are your business data; where those records contain personal information (for example, if you name an individual an asset is assigned to), you are responsible for having the right to provide that information to us, and we process it on your behalf as described below.

2. Information We Collect

We collect only the information we need to provide and secure the Service.

• Account information. Your name and email address, the password you choose (stored only as a secure one-way hash — we never store or see your actual password), and, if you choose to provide it, a phone number (stored encrypted).
• Company and asset data. The company profile you create (company name, fiscal year settings, and an optional logo) and the fixed asset records you enter — descriptions, acquisition costs and dates, categories, locations, custom fields, notes, and any images or documents you attach.
• Authentication and security data. Records of sign-in activity (date and time, IP address, browser/user-agent, and whether the attempt succeeded), active session records, and — if you enable two-factor authentication — your authenticator secret (stored encrypted) and backup recovery codes (stored as one-way hashes).
• Payment information. Subscription payments are processed by our payment provider, Stripe. Your full card number is entered directly on Stripe's secure checkout and is not stored or processed on our servers. We retain a Stripe customer identifier and your subscription and billing status.
• Integration data (only if you connect it). If you choose to sign in with Microsoft, we receive your email address and a Microsoft account identifier. If you connect QuickBooks Online to export journal entries, we store the access tokens for that connection (encrypted) and your QuickBooks company identifier.
• Communications. If you contact us or request a demo, we collect the name, email address, and message content you submit.
• Technical data. The strictly necessary cookies and standard server logs needed to operate and secure the Service, and — only if you accept them — the analytics cookies described in Section 3.

3. Cookies

faManager uses strictly necessary cookies to operate the Service: a session cookie that keeps you signed in, a security token that protects forms against cross-site request forgery, and a small cookie that indicates whether you have an active app session. These cookies are configured with the HttpOnly, Secure, and SameSite protections where applicable.

Our public website also uses Google Analytics 4 to understand how visitors find and use the site so we can improve it. Google Analytics runs only if you accept analytics cookies in the notice shown on your first visit; if you decline, it is not loaded and no analytics cookies are set. When enabled, it sets cookies and collects usage information such as the pages you view, approximate location (derived from your IP address), and your device and browser type. We do not use this information to advertise to you, and we do not sell your information or share it with advertisers. You can change your choice at any time by clearing our cookies, and you may additionally install Google's opt-out browser add-on.

4. How We Use Your Information

We use personal information to:

1. Provide and operate the Service — account management, asset tracking, depreciation calculation, reporting, and journal-entry generation;
2. Authenticate you and protect your account, including session management, two-factor authentication, rate limiting, and detecting and preventing fraud or abuse;
3. Process your subscription payments and manage billing (through Stripe);
4. Send you service-related email, such as email verification, password resets, billing notices, and security alerts;
5. Provide the optional integrations you enable (Microsoft sign-in, QuickBooks Online export);
6. Respond to your support requests; and
7. Meet our legal, regulatory, and audit obligations.

We send commercial or promotional email only where permitted by Canada's Anti-Spam Legislation (CASL), and every such message includes a way to unsubscribe. We do not use your information for automated decision-making that produces legal effects about you.

5. How Your Information Is Shared

We do not sell your personal information. We share it only in the following limited circumstances:

• Service providers (sub-processors). We use a small number of trusted providers to operate the Service, and share only the information each needs to perform its function: Stripe (payment processing), our email delivery provider (currently Amazon Simple Email Service, for sending the service email described above), Google (Google Analytics, for the website usage measurement described in Section 3), and — only where you enable them — Microsoft (single sign-on) and Intuit / QuickBooks Online (journal-entry export). These providers are bound to protect the information and use it only to provide their service to us. Some of these providers may process data outside Canada (see Section 6).
• Legal and safety reasons. Where required or permitted by law — for example, to comply with a subpoena, court order, or lawful request, or to protect the rights, property, or safety of Cloudtric, our users, or the public.
• Business transfers. If Cloudtric or the faManager business is sold or transferred, personal information may be transferred to the successor, subject to this Policy or an equivalent standard of protection.
• With your consent. For any other purpose you specifically agree to.

6. Where Your Information Is Stored

Your account information and your fixed asset and company records are stored on servers located in Canada, and our backups of that data are also kept in Canada.

Certain limited processing necessarily involves the service providers named in Section 5, some of which operate outside Canada: payment details you enter are processed by Stripe, the email address and content of service messages are handled by our email delivery provider to deliver them to you, and website usage data is processed by Google Analytics. Your fixed asset records themselves are not sent to these providers. Where information is processed outside Canada, it may be subject to the laws of the country in which it is processed.

7. How We Protect Your Information

We use technical and organizational safeguards appropriate to the sensitivity of the information, including:

• Encryption of data in transit using HTTPS/TLS;
• Encryption at rest of sensitive fields — phone numbers, two-factor authentication secrets, and integration tokens are encrypted using AES-256-GCM;
• Passwords stored only as secure one-way hashes; verification and reset tokens stored only as hashes;
• Database access exclusively through parameterized queries, and per-account access controls that keep each company's data separate;
• Session protections, two-factor authentication, rate limiting, and audit logging;
• Consent-gated support access: our support team can sign in to your account only after you explicitly grant time-limited access (revocable at any time), and every such access is recorded in your account's login history.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach of security safeguards involving your personal information that poses a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.

8. How Long We Keep Your Information

We keep your personal information for as long as your account is active and as needed to provide the Service. When you delete an asset, company, or account, the affected records are removed from active use and then permanently deleted in accordance with our retention schedule. We may retain certain records for longer where required to meet legal, tax, audit, or security obligations (for example, billing records and security logs), after which they are securely destroyed.

9. Your Privacy Rights

Subject to the exceptions permitted by law, you have the right to:

1. Access the personal information we hold about you;
2. Ask us to correct information that is inaccurate or incomplete;
3. Withdraw your consent to our collection, use, or disclosure of your information (noting that doing so may prevent us from continuing to provide the Service); and
4. Make a complaint about our handling of your information.

To exercise any of these rights, contact our Privacy Officer using the details in Section 12. We will respond within 30 days, or advise you if we need more time. We may ask you to verify your identity before acting on a request. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

10. Children's Privacy

faManager is a business tool intended for use by adults. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of majority in their province or territory of residence.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will change the "Last updated" date above, and for material changes we will provide notice through the Service or by email. Your continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.

12. Contact Us

For questions, requests, or complaints about this Policy or your personal information, contact our Privacy Officer:

Cloudtric Inc.
Attention: Bradley Adams, Privacy Officer
E-mail: support@cloudtric.ca