Privacy Policy — Pourboires Québec
Last updated: November 4, 2026 · Version française
Publisher: Marchand M.C INC. (doing business as MC Paiement / Aura Paiements), 3 Place Ville Marie, Suite 400, Montréal, Québec, Canada. Contact: info@mcpaiement.com.
What the app does: Pourboires Québec reads a merchant's orders, payments, employees and shifts from Clover (read-only) to calculate, for each pay period and employee, the tips to declare and the tips the employer must allocate under Revenu Québec's 8% rule, and to produce the tip register, a payroll report and an annual summary.
Data we read from Clover (read-only): merchant name and time zone; employee names, roles and shift times; orders (order type, employee, amounts) and payments and refunds (amount, tax, tip, tender type). We never receive card numbers, expiry dates or CVV codes, and we read no customer data.
Data entered by the merchant: each employee's category, cash tips not recorded in Clover, and tip-pool amounts, entered by the merchant from the employees' declarations.
Purpose: producing the merchant's tip records and payroll figures. Employee names and tip amounts are personal information about the merchant's employees; we process them only on the merchant's behalf and for this purpose. We do not sell or share the data with anyone other than our hosting provider.
What we store and for how long: Clover OAuth tokens (encrypted at rest); app settings; a cache of the period's normalized sales (amounts, dates, employee IDs), refreshed at most every 15 minutes; and the figures of each pay period the merchant closes, kept for six years so the merchant can answer a Revenu Québec audit, unless the merchant asks us to delete them earlier. Technical logs are kept 60 days.
Hosting and security: servers in Toronto, Canada (DigitalOcean). All traffic uses HTTPS. Server access is limited to MC Paiement staff with SSH keys.
Deletion and your rights: uninstalling the app in Clover stops all processing. On request to info@mcpaiement.com, all of a merchant's data is deleted within 30 days (export your reports first). Merchants and their employees may request access, correction or deletion. Québec's Law 25 and PIPEDA apply. Privacy officer: Mehdi Charrier, Executive Director.