Privacy Policy

Veloce ERP and the Veloce mobile app · Effective November 10, 2026

Veloce ERP is management software for automotive dealership groups (our “customers”). The Veloce mobile app lets those customers' employees record their working time. This policy explains what personal information is collected, why, and how it is protected, in accordance with Québec's Act respecting the protection of personal information in the private sector and Canada's PIPEDA. The French version prevails.

1. Who is responsible

Your employer decides which information is processed for payroll and is responsible for it under the law. Veloce ERP processes it on the employer's behalf, following its instructions, and for no other purpose. To exercise your rights, contact your employer first; you can also reach our privacy officer (section 10).

2. Information collected by the mobile app

• Account: e-mail address and the link to your employee file (name, employee number), provided by your employer.
• Punches: date and time of each punch in and out, the phone's time when a punch is made offline, and the company concerned.
• Location: GPS coordinates and accuracy, read once at the moment of the punch, to check that you are at the workplace when your employer requires it. The app does not track your movements.
• Device and security: device name (for your list of signed-in devices), IP address and browser or device type at sign-in, for security.

The camera is used only to scan the sign-in QR code given by your manager; no image is stored or sent. Face ID / fingerprint are checked by the phone's operating system: Veloce never receives biometric data, only the result (success or failure).

3. Information processed in Veloce ERP

For payroll preparation, your employer may record or import from its dealer management system (DMS) and Acomba: identity, work and personal contact details, birth date, employment, department, pay rates, hours worked, absences, time and vacation banks, commissions and pay amounts.

4. Use

• Compute hours and prepare payroll;
• check the location of a punch when the employer requires it;
• protect accounts (sign-in, lockout, abuse detection) and keep an audit log of changes;
• send account e-mails (invitation, password reset).

No decision is based exclusively on automated processing: computed hours are reviewed and approved by your employer.

5. Disclosure

Information is never sold, rented or used for advertising. It is shared only with your employer and with our technical service providers, bound by contract:

• Google Cloud (hosting and database, Montréal region, Canada);
• Resend (account e-mails);
• Apple and Google (app distribution).

It may also be disclosed where required by law.

6. Retention

Punches and payroll data are kept as long as your employer must keep its payroll records (at least six years under tax and labour laws). A mobile session expires after 30 days of inactivity and at most after 180 days. When a customer's contract ends, its data is deleted or anonymized as agreed.

7. Security

Encrypted communications (HTTPS), data encrypted at rest, hashed passwords (argon2id), session tokens kept in the phone's secure storage, strict data isolation between customers, role-based and logged access.

8. Your rights

You may request access to your information, its correction, or withdraw consent to location (a punch may then be refused if your employer requires location; it can grant you an exemption). You can turn off location, camera or biometrics at any time in the phone's settings. To have your app account deleted, ask your employer or write to us; payroll data is nevertheless kept for the legal period. You may file a complaint with the Commission d'accès à l'information du Québec.

9. Children

Veloce is intended for our customers' employees and is not directed at children.

10. Contact

Privacy Officer, Veloce ERP
E-mail: support@veloce-erp.com

11. Changes

Any change to this policy is published on this page with its effective date.