Dernière mise à jour : July 27, 2026
1. Principle
Under section 23 of Law 25, once the purposes for which personal information was collected are fulfilled, Viabilio destroys or anonymizes it for serious and legitimate purposes. No data is kept “just in case”.
2. Retention periods
| Category | Period | Action at expiry |
|---|---|---|
| Inactive user account | 3 years after the last sign-in | Anonymization |
| Analysis reports | 5 years | Deletion |
| Viability certificates | 5 years | Deletion |
| Invoices and accounting records | 7 years | Mandatory retention |
| Security and audit logs | 2 years | Deletion |
| Consent registry | 7 years | Retention (proof) |
3. Overriding legal obligations
Some data must be kept despite a deletion request: invoices and accounting records (federal and provincial tax obligations, 6 years after the relevant tax year), proof of consent, and any data subject to ongoing legal proceedings.
4. Deletion and anonymization
At expiry, information is either permanently deleted or irreversibly anonymized (no reasonably possible re-identification), in line with generally accepted practices. Anonymized data may be kept for statistical service-improvement purposes.
5. Early deletion request
You may request deletion of your account at any time from your member area (Privacy section) or by writing to the privacy officer. We confirm the request, explain what must legally be kept, then delete or anonymize the rest.
6. Governance
The periods above are configured in the system and reviewed at least annually by the privacy officer.
Privacy officer: Jonathan Giroux — admin@viabilio.com