Date and version — Version 2.0 — updated September 6, 2026
1. Principle
Under section 23 of Law 25, once the purposes for which personal information was collected are fulfilled, Viabilio destroys or anonymizes it for serious and legitimate purposes. No data is kept “just in case”.
2. Retention periods
| Category | Period | Action at expiry |
|---|---|---|
| Invoices and accounting records | 6 years | Mandatory retention (tax) |
| Account data (profile, email, authentication) | Life of the account, then deletion or anonymization | Deletion or anonymization |
| Projects, assessments and viability reports | Life of the account or until you delete them | Deletion |
| Démo mode (no account) | Session only | No permanent retention |
| Security and audit logs | 2 years | Deletion |
| Consent registry | 6 years (proof) | Retention (proof) |
3. Overriding legal obligations
Some data must be kept despite a deletion request: invoices and accounting records (federal and provincial tax obligations, 6 years), proof of consent, and any data subject to ongoing legal proceedings.
4. Deletion and anonymization
At expiry, information is either permanently deleted or irreversibly anonymized (no reasonably possible re-identification), in line with generally accepted practices. Anonymized data may be kept for statistical service-improvement purposes.
5. Early deletion request
You may request deletion of your account at any time from your member area (Privacy section) or by writing to the privacy officer. We confirm the request, explain what must legally be kept, then delete or anonymize the rest.
6. Governance
The periods above are configured in the system and reviewed at least annually by the privacy officer.
Privacy officer: Jonathan Giroux — admin@viabilio.com