Privacy policy

This policy explains what personal information Unicorn Express collects, why, and what your rights are, in accordance with Québec's Act respecting the protection of personal information in the private sector (Law 25).

1. What we collect

• Your account: your email, your first name or name (optional), your profile photo (optional), your preferred language and your password (stored encrypted, never in plain text).
• Your content: the ideas you save, your favorites and the generated plans.
• Your purchases: the history of your payments and credits. Card numbers are handled by our payment provider; we never see them.
• Your messages: what you send us through the contact form.
• Usage statistics: anonymized events (e.g. "a plan was generated") without your name or email.
• Visit statistics, if you accept them: with Google Analytics, pages viewed, where you came from, device type and approximate location, tied to a pseudonymous identifier (see section 4).

2. Why

To create and secure your account, generate and store your ideas and plans, process your payments, answer your questions, prevent abuse and improve the service. We don't sell your information and we don't use it for targeted advertising.

3. Abuse prevention

To keep welcome credits free for everyone, we limit how many accounts can receive them from the same connection. To do so, we store your IP address in hashed form: a one-way fingerprint, computed with a secret key, that lets us recognize the same address without being able to recover the address itself. Your plain IP address is never recorded. We also check that your email doesn't come from a disposable address service, and an anti-robot test (Cloudflare Turnstile) protects the sign-up form.

4. Cookies

We use essential cookies (your sign-in session, your cookie choice, an idea waiting to be saved). Only with your consent, we also use Google Analytics to measure site traffic; it's off by default and you can withdraw your consent at any time with the Manage cookies link at the bottom of every page. The details are in our cookie policy.

5. Who has access

Only the members of our team who need it, and our providers, who process data on our behalf and according to our instructions: hosting and database, payments, anti-robot protection, AI plan generation (the text of your idea is sent to the AI provider to write the plan) and audience measurement (Google Analytics, if you accepted it). Some of these providers may store data outside Québec; in that case we assess that the protection offered is adequate, as Law 25 requires.

6. How long

As long as your account exists. When you delete it, your ideas, plans and credits are erased. Invoices and payment records are kept for the time required by tax laws (generally six years). Ideas saved by a visitor without an account are erased after 7 days. Google Analytics visit statistics are kept for 14 months.

7. Your rights

At any time, you can:

• access the information we hold about you and get a copy;
• have it corrected if it's inaccurate;
• have it deleted (most of it directly from My account);
• withdraw your consent and ask for the portability of your data in a structured format.

To exercise these rights, write to our privacy officer (below). We reply within 30 days. If you're not satisfied, you can file a complaint with the Commission d'accès à l'information du Québec.

8. Person in charge of the protection of personal information

[NAME] · [EMAIL]

9. Changes

If we change this policy in a significant way, we'll notify you by email or in the app before it takes effect.