Privacy Policy

1. Who is responsible

MigiHub is developed and owned by InnuCloud Experts Inc., 2020 Trans-Canada Hwy, Dorval, Montreal, QC H9P 2N4, Canada. Contact our Privacy Officer at info@innucloud.com.

We determine the purposes of processing for our website, sales relationships, billing and account administration. For personal information managed by a customer in its MigiHub workspace, that organization generally determines the purposes and we act as its service provider or processor under the applicable agreement. This distinction determines who responds to a request.

2. Scope and sources

This policy covers our websites, platform, mobile experiences, support and related services. Customer agreements may specify additional processing conditions. Third-party websites and integrations have their own privacy notices.

Information comes from you, your organization, authorized users, connected services and technical interactions with the Service. A customer may provide information about employees, contractors, interpreters, applicants, clients and people receiving services.

3. Information we handle

• Identity and contact: name, email, phone, mailing address and organization.
• Account and professional profile: identifiers, permissions, employment details, skills, language qualifications, availability and schedules.
• Operations: CRM records, projects, bookings, assignments, language pairs, service locations, meeting links and related notes or attachments.
• Time and finance: time entries, leave, expenses, mileage, approvals, attestations and billing/payroll information configured by the customer.
• Technical and support: IP address, browser/device information, logs, security events, communications and support requests.
• Optional features: location data when enabled and authorized, or data exchanged with customer-selected integrations.

The categories actually processed depend on the features used and the customer’s configuration.

Website inquiries and applications are sent only when you select the send or submit button. The website sends your contact details, request or application text, language, source page and a submission reference to FormSubmit for email delivery to MigiHub. FormSubmit receives the submitted information and the technical connection data needed to process it. Its documentation states that submissions are retained in its archive for 30 days. MigiHub uses the information to respond to your inquiry or assess your application. Review the FormSubmit privacy notice. The website does not connect these forms to the MigiHub application database.

4. Purposes and legal grounds

We use personal information to provide and secure the Service; manage accounts and customer relationships; coordinate work and communications; support billing and authorized payroll processes; respond to support and privacy requests; investigate misuse; and meet legal obligations.

Where we act as processor, we follow the customer’s documented instructions. Where we act as controller, the applicable basis may be consent, contractual necessity, legal obligation or another basis permitted in the relevant jurisdiction. A GDPR legitimate-interest basis is not a substitute for consent where consent is required under Quebec law or electronic-marketing rules. Optional marketing choices are separate from service access.

5. Sensitive information and minors

Appointment details, accessibility needs, employment information and uploaded documents may reveal sensitive information. Provide only what is needed for the service, limit free-text details and restrict access. Sensitive-data collection requires the appropriate authorization and safeguards. Optional location access can be managed in device permissions.

MigiHub is intended for professional use. Information about children under 14 must be provided with the consent of a parent or guardian where Quebec law requires it, subject to the exception for collection manifestly for the child’s benefit. Customers must establish their authority before submitting a minor’s information.

6. Disclosure and integrations

Access is limited to authorized recipients who need the information: the customer’s users and administrators, professionals assigned to services, and service providers supporting hosting, communications, security, support or other contracted functions. Providers receive confidentiality and data-protection obligations appropriate to their role.

Customer-selected integrations receive the data needed for the enabled connection under their own terms. We may also disclose information where law requires it, to protect rights and safety, or in a corporate transaction subject to appropriate protections. We do not sell customer personal information.

7. Processing locations and transfers

The location and access arrangements for a customer deployment are described in its agreement and service documentation. A Canadian hosting location does not, by itself, determine where every integration, remote-support activity or onward transfer occurs.

Before a relevant cross-border disclosure, we assess the applicable requirements and safeguards, including a privacy impact assessment where Quebec law requires one and an applicable adequacy decision or contractual transfer mechanism for international transfers. See International Transfers & DPF.

8. Retention and deletion

Information is retained only for the purposes and periods justified by the service, documented customer instructions and legal, accounting or dispute requirements. Account records generally follow the account lifecycle; support and operational records follow the applicable schedule, which may include a 12–24 month period. Financial and payroll records follow applicable legal retention duties.

Return and deletion of customer data are governed by the applicable agreement and DPA. Protected backups may persist until their scheduled overwrite; retained legal records remain access-restricted. Contact us for the schedule applicable to your deployment.

9. Safeguards and incidents

Safeguards include access restrictions, encryption, auditability, backups, vulnerability management and personnel confidentiality controls. Their scope depends on the service and configuration. See Security & Reliability.

When a confidentiality or personal-data incident occurs, we assess, contain and investigate it, document the event and make legally required notifications. Where we process customer data, we notify the responsible customer without undue delay as required by the DPA. A customer determines its own reporting duties with our assistance.

10. Website choices and communications

Our Cookie Policy describes this website’s storage, external-media and Google Ads choices. Optional videos load only after an applicable choice. The booking button opens Microsoft Bookings separately. Third-party pages apply their own notices.

Newsletter signup asks only for your email address. When you select Subscribe, we send the address, language, consent statement and version, submission time, source page and reference through FormSubmit for email delivery to MigiHub. We use this information to manage your signup and permission for MigiHub news and product updates. To withdraw your newsletter permission, email sales@migihub.com.

Marketing communications require an appropriate permission or other lawful basis. Use the unsubscribe method in a message or contact us. Operational notices are assessed separately and must not be used to hide marketing.

11. Rights, requests and complaints

Depending on the applicable law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, or request cessation of dissemination or de-indexation where Quebec law provides it. Rights have legal conditions and exceptions.

Email info@innucloud.com with the organization and request type. Avoid sending identity documents or sensitive records in the first email. We may verify identity proportionately and will respond within the applicable legal timeframe. For organization-managed data, contact its administrator first; we can route the request and assist. You may complain to the competent privacy authority, including Quebec’s Commission d’accès à l’information where applicable.

12. Updates and contact

Material changes to this policy are communicated through appropriate channels before taking effect where required. The revision date identifies the current public version. Postal requests may be addressed to the Privacy Officer at the InnuCloud address above. This notice does not replace an organization’s own employee or client privacy notice.