Privacy Policy
Last updated: 12 October 2026
This policy explains how DaxioOS Solutions Inc. collects, uses, discloses, retains and destroys personal information, and how to exercise your rights. It also serves as a summary of our governance rules, as provided for in the Act respecting the protection of personal information in the private sector (Québec).
1. Who we are
DaxioOS Solutions Inc. (NEQ 1181979767), 1150, avenue Thérèse-Lavoie-Roux, suite 003, Outremont (Québec) H2V 0C5, develops DaxioOS Tax Agent, software that helps accounting firms enter their clients’ tax slips.
This policy covers DaxioOS Tax Agent and the joindaxioos.com website. It applies to three groups of people:
- visitors to joindaxioos.com;
- users of DaxioOS Tax Agent, meaning employees of client firms, and people who contact us;
- taxpayers whose slips are processed by a firm using our software. For them, we act on behalf of the firm (section 3).
What this policy does not cover. Third-party services you use with DaxioOS, such as your tax software or our payment provider’s payment page, have their own privacy policies.
Minors. Our services are intended for professionals. We do not knowingly collect information directly from people under the age of 18. A minor taxpayer’s slips processed by a firm fall under section 3.
2. What we collect and why
We collect only what is necessary and destroy it at the end of the stated retention period.
How we collect it:
- directly from you, when you use the application, write to us or register;
- from your firm, whose administrator opens your account using your professional email address;
- automatically, through the application’s security logs and the website’s visit statistics (section 5).
You can browse joindaxioos.com without providing us with any personal information.
| Information | Purpose | Retention period |
|---|---|---|
| User account: professional email address, firm, second authentication factor | Create and secure your access | Duration of the firm’s subscription, then 30 days |
| Sign-in and security logs: date, significant actions | Protect accounts and investigate incidents | 13 months for sessions, 1 year for the security log |
| Firm billing: name, billing email address, number of taxpayers processed | Bill for the service | 7 years (tax obligations) |
| Payment method | Collect invoice payments | Processed and retained by our PCI DSS-certified payment provider; we never receive the full card number |
| Communications with us: support or sales emails | Respond to you | 3 years after the last communication |
| Sanitized application error reports | Fix technical problems | 90 days |
We do not sell any personal information, and we do not engage in targeted advertising or profiling.
3. Taxpayers’ information
When a firm processes its clients’ tax slips with DaxioOS Tax Agent, the firm is responsible for that information. DaxioOS acts only as its service provider, under a written processing agreement.
- Slips are read automatically in Canada and then are not retained.
- Neither the name nor the social insurance number read from the slips is recorded in our database. Only the extracted values (amounts, codes, dates and checked boxes) are kept for 90 days, then destroyed.
- This information is never used to train our artificial intelligence models without a written agreement with the firm.
If you are a taxpayer and wish to access your information or have it corrected, contact your accounting firm. If you write to us, we will forward your request to the firm.
4. Our providers and where information is processed
We use providers contractually bound by confidentiality and security obligations. Some are located outside Québec or Canada; before entrusting information to them, we assess the protection they offer, as required by law.
| Provider | Role | Location |
|---|---|---|
| Amazon Web Services | Database and account hosting | Montréal, Québec |
| Microsoft Azure | Reading tax slips | Toronto, Ontario |
We also use other service providers for sending sign-in emails, payments, our office tools and website hosting. Some are located in the United States. They never receive tax slips or tax data.
Tax slips and tax data are never hosted outside Canada. We may also disclose information when required by law, for example pursuant to a court order.
5. Website: cookies and statistics
The joindaxioos.com website measures its traffic (page views, general sources of visits) to improve the site. These statistics are not used to identify you or track you on other websites, and are not used for advertising purposes. You can block cookies in your browser settings.
The DaxioOS Tax Agent application and the password page at compte.joindaxioos.com do not use any analytics tools or advertising cookies.
6. Security
We protect information through measures appropriate to its sensitivity, including hosting in Canada, encryption of communications and data, mandatory second-factor authentication, strict separation of each firm’s data, limited and logged internal access, and automatic destruction according to the stated retention periods.
7. Your rights
You can ask us:
- to access the personal information we hold about you;
- to correct it if it is inaccurate, incomplete or ambiguous;
- to receive it in a structured, commonly used technological format;
- to withdraw your consent to a use that depends on it, or to stop the dissemination of information.
Write to the person in charge of the protection of personal information (section 8). We respond within 30 days and may ask you to confirm your identity. These requests are free of charge.
8. Governance, complaints and contact
Person in charge of the protection of personal information: Sarah Kettani, founder — sarah.kettani@joindaxioos.com — DaxioOS Solutions Inc., 1150, avenue Thérèse-Lavoie-Roux, suite 003, Outremont (Québec) H2V 0C5.
Our internal rules. The person in charge oversees the application of this policy. Anyone with access to information makes a written commitment to confidentiality. We maintain a retention and destruction schedule, a confidentiality incident register and a provider register. We conduct privacy impact assessments for any new project involving personal information and for any disclosure of information outside Québec.
Complaints. For any complaint, write to the person in charge; we respond in writing within 30 days. If you are not satisfied with our response, you can contact the Commission d’accès à l’information du Québec or, outside Québec, the Office of the Privacy Commissioner of Canada.
Updates. We review this policy at least once a year. The date of the last update appears at the top of the page; in the event of a significant change, we notify our users by email.