Legal

Privacy Policy

Last updated: March 3, 2026

1. Introduction

BI Linker ("we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act respecting the protection of personal information in the private sector (Law 25 / formerly Bill 64).

Privacy Officer: The person responsible for the protection of personal information at BI Linker can be reached at support@bi-linker.com.

2. Information We Collect

We collect the following categories of information:

  • Account information: Your name, email address, and password when you register for an account.
  • Billing information: Payment details processed securely by our third-party payment processor. We do not store your full card number.
  • WooCommerce API credentials: Your store URL, Consumer Key, and Consumer Secret. These are stored encrypted at rest and used solely to read your store data.
  • Store data: Orders, customer records, and product information retrieved from your WooCommerce store via the REST API. This data is stored in a secure data warehouse that is accessible only by you. BI Linker staff do not access your store data except when strictly required for incident management. Such access is restricted, logged, and limited to authorized personnel only.
  • Usage data: Log data such as IP address, browser type, pages visited, and timestamps, collected automatically for security and analytics purposes.
  • Cookies: We use essential cookies to maintain your session. Analytics cookies are only set with your explicit consent (see section 10).

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process transactions and send billing-related communications.
  • Sync your WooCommerce data to Microsoft Power BI as requested.
  • Send transactional emails (account confirmation, sync reports, important service updates).
  • Respond to support requests and communications.
  • Detect and prevent fraud, abuse, and security incidents.
  • Analyse aggregate usage to improve the Service.

We do not sell, rent, or trade your personal information to third parties.

4. Data Sharing

We share your information only in the following limited circumstances:

  • Service providers: We work with trusted third-party vendors (e.g., payment processors, cloud infrastructure providers, transactional email services) who process data on our behalf and are contractually bound to protect it.
  • Microsoft Power BI: Your store data is transmitted to your designated Power BI workspace as part of the core service.
  • Legal compliance: We may disclose information if required by law, court order, or to protect our legal rights.

5. International Data Transfers

To deliver the Service, your data is transferred to and processed by Microsoft Corporation in connection with Microsoft Power BI. Microsoft operates data centres globally, including outside of Quebec and Canada. By using the Service, you acknowledge that your store data will be transmitted to your designated Microsoft Power BI workspace, which may be hosted outside Quebec.

We have assessed the privacy risks associated with this transfer as required under Law 25. Microsoft maintains appropriate contractual, organizational, and technical safeguards consistent with applicable privacy standards. For more information, see Microsoft's Privacy and Data Protection documentation.

6. Data Retention

We retain your account information for as long as your account is active. Upon cancellation, your account data is retained for 30 days before permanent deletion, giving you time to retrieve any records. Your WooCommerce API credentials are deleted immediately upon account closure.

7. Data Security

We implement industry-standard security measures including:

  • Encryption of API credentials at rest using AES-256.
  • HTTPS/TLS for all data in transit.
  • Read-only access scope for your WooCommerce store (we never write to your store).
  • Regular security reviews and access controls.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Breach Notification

In the event of a confidentiality incident (data breach) that presents a risk of serious injury to individuals, we will notify the affected individuals and the Commission d'accès à l'information du Québec (CAI) as soon as reasonably possible, in accordance with Law 25 and applicable Canadian privacy legislation. We maintain an internal incident register to record all confidentiality incidents.

9. Your Rights

Under PIPEDA and Quebec's Law 25, you have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion / erasure: Request deletion of your personal information, subject to legal obligations requiring us to retain certain records.
  • De-indexation: Request that we cease distributing personal information about you, or de-index any hyperlink associated with your name, where such distribution causes harm or contravenes the law.
  • Data portability: Request your personal information in a structured, commonly used, machine-readable format (e.g., CSV or JSON). We will fulfil portability requests within 30 days of receipt.
  • Withdrawal of consent: Withdraw consent to data processing at any time, subject to legal or contractual restrictions. Withdrawal may require termination of the Service.

To exercise any of these rights, contact our Privacy Officer at support@bi-linker.com. We will respond within 30 days of receiving your request.

10. Cookies

We use the following types of cookies:

  • Essential cookies: Required for the Service to function (e.g., session tokens). These do not require your consent.
  • Analytics cookies: Help us understand how users interact with the site (e.g., page views, referral sources). Data is aggregated and anonymized. These cookies are only set after you provide explicit consent via our cookie consent banner.

You may withdraw your consent to analytics cookies at any time by updating your preferences through the cookie settings banner, or by clearing cookies via your browser settings. Disabling essential cookies may affect the functionality of the Service.

11. Third-Party Links

Our Service may contain links to third-party websites (e.g., WooCommerce, Microsoft). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice within the Service. Continued use of the Service after updates constitutes acceptance of the revised policy.

13. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact our Privacy Officer:
support@bi-linker.com
We respond within 30 days of receiving your request.