Information and purposes
We use your name, work email, hashed password, business name, business contact details and address to create and secure your account, verify your business address and provide the service. Account messages include email verification, support and service notices. Creating an account does not subscribe you to promotional emails.
The contact form sends your name, email, optional company name, subject and message to our contact inbox so we can respond. It does not create a moving customer record. Form values may remain temporarily in your session when a submission needs correction or a retry. Do not send passwords or unnecessary customer information.
When you subscribe, we use business billing details, subscription status and payment references to administer billing. Stripe processes payment information through its hosted pages. Demevo does not store complete payment card numbers.
Moving companies and their customers
A moving company decides which information it needs to receive and assess a moving request. Its form and customer portal identify that company and present its own privacy notice. Requests can include contact details, addresses, moving requirements, optional photos and proposal documents.
Demevo processes this information to provide the moving company’s workspace, estimates, documents and messages, under the applicable service arrangement. It is not used to subscribe customers to Demevo marketing. Contact the moving company first about a moving request. Demevo handles requests concerning its own account, website, security and billing activities.
When customer form measurement is enabled, Demevo records pseudonymous form attempts for the moving company, including visible views, starts, applicable step progress, server-confirmed submission timestamps, the published configuration version and coarse device, language and hosted or embedded categories. Measurement uses the existing functional form context and session without an additional consent prompt, analytics cookies, browser fingerprinting or a separate browser tracking identifier. Measurement records contain no form answers, names, contact details, addresses, photos, raw IP addresses, full user agents, referrer URLs or access tokens. They stay on Demevo’s hosting infrastructure and are not sent to Google Analytics. Attempt records are retained for 12 months and linked records are removed through request and account deletion. Measurement failures never prevent submitting a request. The moving company remains responsible for its customer information and privacy notice. Demevo is the service provider for this measurement. Questions about Demevo’s processing can be sent to the privacy contact identified in this policy.
Service providers and processing locations
OVH provides primary hosting in Montreal, Canada. Encrypted rolling backups are kept on the same server. We do not currently maintain a separate off-server backup, so loss of the server or its storage can also result in loss of the backups. Mailgun delivers transactional account, service, request and quote emails through SMTP. Message recipients, content, attachments and delivery metadata are processed for this purpose. Open and click tracking are disabled. Google Maps provides address and route services. Stripe handles subscription payments and billing.
Information is shared with providers as needed for their service. Depending on the service configuration and provider operations, it may be stored or processed outside Quebec or Canada and be subject to the laws of those jurisdictions. We assess applicable transfers and use contractual and security safeguards. We do not promise that all information remains in Quebec or Canada.
We may also disclose information when legally required or when necessary to protect rights and security, within the limits of applicable law.
With your permission, Google Analytics 4 receives public page views, language and marketing interactions, a pseudonymous cookie identifier and technical browser information. Google also receives your IP address during transmission. Page URLs exclude query strings and fragments. We do not send names, email addresses, form answers, account identifiers or customer request data. Advertising features and automatic form tracking are disabled. Google may process this information outside Quebec or Canada. The _ga and _ga_* cookies expire after 180 days without automatic renewal. Google Analytics event data retention is controlled by the property settings.
Cloudflare Turnstile helps protect contact, registration and final customer request submissions against automated spam. It processes IP addresses and technical browser and device signals for security. Demevo sends verification tokens to Cloudflare for validation, without form answers, names, email addresses, moving details or photos. Turnstile security checks operate independently of optional audience measurement. Processing may take place outside Quebec or Canada. If verification cannot reach Cloudflare, local spam protections and submission limits continue to apply.
Cookies and optional measurement
The essential demevo_prod_session cookie maintains your session, sign-in and form security for 60 minutes of inactivity. XSRF-TOKEN supports form security for the same period. The essential demevo_consent cookie remembers your cookie choice for 180 days.
Demevo uses essential cookies for sessions and security. With your permission, an optional cookie measures where visits come from and can link your signup to Demevo activation milestones. Refusing does not limit access to the service.
This option sends Demevo the landing page, language, source category, referring domain and an approved campaign code. Attribution lasts 30 days. Your choice lasts 180 days. After signup, measured milestones include email verification, form publication, completed setup, the first sent quote and the first paid subscription. Account-linked information is retained for 365 days after signup. With your permission, Google Analytics 4 receives public page views, language and marketing interactions, a pseudonymous cookie identifier and technical browser information. Google also receives your IP address during transmission. Page URLs exclude query strings and fragments. We do not send names, email addresses, form answers, account identifiers or customer request data. Advertising features and automatic form tracking are disabled. Google may process this information outside Quebec or Canada. The _ga and _ga_* cookies expire after 180 days without automatic renewal. Google Analytics event data retention is controlled by the property settings.
The demevo_consent cookie remembers your choice for 180 days. The demevo_attribution cookie holds an encrypted random reference, valid for 30 days without automatic extension. Optional measurement starts only after acceptance. We do not retain actions from before your permission.
Counters are grouped by day, language, page, event and placement. Choice receipts record the decision, purpose, date, expiry and notice version without IP addresses or browser histories. They are retained for 365 days. Attribution not linked to an account is deleted after 30 days. Authorized operator staff can access the report.
To withdraw permission, choose Reject all. Measurement stops and the attribution and Google Analytics cookies are deleted. If you are signed in, account-linked Demevo attribution is also removed. Withdrawal does not erase information already received by Google. Contact our privacy team for a deletion request.
Account operations and billing records remain subject to their own purposes and retention rules. Refusing optional measurement does not delete these service records. A new choice is requested for a new purpose or relevant change in recipients.
Optional acquisition data and receipts are stored in Demevo’s own database on its hosting infrastructure. They are not sent to Google Maps, Stripe, Mailgun for advertising or audience measurement. These records are hosted by OVH in Montreal, Canada, with backups in Canada. The 30, 180 and 365-day periods are Demevo defaults, not statutory retention periods.
Retention periods
Completed requests are automatically deleted, including their photos, PDFs and messages, after two calendar years without business activity. This includes accepted, declined and archived requests and requests recorded as won or lost. A meaningful edit, message, customer response, response review or quote issuance or delivery restarts the period. Viewing a request does not restart it. Future moving dates, responses awaiting review, pending sends, reviewed legal holds and applicable decision-retention periods prevent deletion. Requests without a valid moving date also require two years since closure. Reopening a request stops this cleanup. Export records you need before deletion. Historical reports retain only minimal statistical facts for counts, outcomes, quoted amounts, source categories and sending delays, without customer contact details, addresses, answers or documents. Request details are no longer available after deletion. Account closure follows its separate retention rules.
Photos have no normal 90-day expiry or 30-day expiry on closing a moving request. Existing plan storage and file restrictions apply. We warn at 80% usage and block additional uploads at the limit, including after a downgrade below current usage. We do not remove older photos to free space. Owner deletion, privacy requests and account cleanup still apply.
After confirmed paid service expiry or trial expiry, consultation and export remain available for 30 days. New collection, sending and ordinary editing stop. Billing recovery, security and privacy controls remain available. We send retrieval notices at expiry, seven days and one day before scheduled deletion. Verified renewal before deletion begins cancels expiry cleanup. Uncertain provider status does not authorize destructive cleanup.
After the retrieval deadline, ordinary retrieval ends and eligible information is purged through the deletion and recovery safeguards. Specifically justified financial, rights, decision and legal-hold records can remain with restricted access. Renewing a subscription does not cancel an explicit account deletion request. Contact support before the retrieval deadline. An operator can cancel deletion while the account remains recoverable and deletion has not begun. Billing remains unchanged. Provider cancellation and cleanup may require verified follow-up. Existing invoice balances remain due. Export before the deadline.
Necessary financial records are generally retained six years after their related year. Information used to make an individual decision is retained for at least one year where Québec or British Columbia law applies. Rights decisions are retained for one year after completion. Reviewed legal holds can require longer restricted retention. Contract evidence is kept to establish the accepted agreement and handle related rights or disputes, with the same reviewed legal-hold safeguards. Provider copies follow actual settings and legal duties. Encrypted backups follow the configured rolling retention cycle on the same server. This does not provide recovery after loss of that server. Restoration of the database and private files has been tested in an isolated environment on the same host, including replay of recorded access revocations. This does not establish recovery after loss of that host.
Account agreement acceptances and privacy acknowledgments are deleted three calendar years after account closure. An active documented legal hold or unresolved rights case defers this deletion until resolved. Shared legal document versions remain preserved. Deletion is replayed before access resumes after restoring a backup.
| Information | Retention period |
|---|---|
| Contact enquiries | 90 days after resolution |
| Ordinary technical request metrics | 90 days |
| Aggregate website counters | 365 days |
| Encrypted backups | Configured rolling cycle on the same server, without a separate off-server copy |
| Inactive moving request drafts | Configured draft deadline, 30 days by default |
| Customer photos | Two years without business activity after completion, subject to protected cases and account closure rules |
| Requests without issued proposals | Two years without business activity after completion, subject to protected cases and account closure rules |
| Issued proposals and necessary supporting records | Two years without business activity after completion, subject to protected cases and account closure rules |
| Attribution without signup | 30 days |
| Account-linked attribution | 365 days after signup |
| Cookie choice receipts | 365 days |
Security and deletion
We use safeguards appropriate to the information, including hashed passwords, access controls and restricted access to customer records. Access for support is limited to the authorized purpose. No system can guarantee absolute security.
When information is no longer needed, we delete it according to its retention rule, subject to applicable exceptions. Backup copies expire through the backup cycle. Recovery procedures must respect recorded deletions before restored information becomes accessible. An access restriction, a cancelled subscription and a deletion request are different actions.
Your rights and choices
You may request access to your personal information, correction of inaccurate information and deletion where applicable. You may also withdraw consent where processing relies on consent and request an electronic copy where the law provides that right. Some information may remain necessary to provide the service or meet a legal obligation.
We may verify your identity before acting on a request. We explain any applicable limits or refusal and respond within the deadlines required by applicable law. You can use the privacy contact below for a request or complaint. For customer moving requests, contact the moving company identified on its form or portal.
Profile provides a structured personal JSON export separately from the company archive, and tracked requests for access, correction, optional-consent withdrawal, retained-information review and complaints. We use an internal response target of 30 calendar days and record identity verification, the applicable law, the substantive response, any lawful extension and reasons and recourse for refusal. An acknowledgement does not complete a request. The privacy contact remains available without signing in, including after account closure.
Policy updates
The date and version shown on this page identify the current policy. We update it when our practices change and provide additional information or seek consent when required. Signup records the policy version presented at acceptance.
Person responsible for the protection of personal information
For any question or request concerning your personal information, contact Demevo’s person responsible for the protection of personal information.
We will respond to requests for access, correction or deletion within the deadlines required by applicable law.