CA Trusted Canadian solution · Developed in Canada, operated in private data centers in Quebec
Login
Free trial

PRIVACY POLICY

Last updated: October 7, 2026

Thank you for visiting www.secure-exchanges.com (the “Website”), operated by Secure Exchanges Inc. (“Secure Exchanges”).

For the purposes of this privacy policy (“Privacy Policy”), any reference to Secure Exchanges is deemed to include its affiliates (including all subsidiaries), divisions, and other companies within its group, its suppliers and licensors, as well as its employees, officers, directors, shareholders, agents, subcontractors, and other representatives.

Secure Exchanges (hereinafter also referred to as “we,” “our,” "our") takes its responsibility to protect your personal information seriously and has prepared this Privacy Policy to explain its practices regarding the collection, use, disclosure, sharing, and management of the personal information you submit on our website, when using our software, or in connection with a transaction conducted on our website. Our Privacy Policy also describes the measures we take to protect the security of personal information, as well as how you can access, modify, or delete your personal information. In addition to this Privacy Policy, your use of this website is also subject to (i) our Terms of Use and (ii) any other terms of use that may be communicated by Secure Exchanges from time to time.

If you do not agree to comply with these terms and conditions regarding the collection, use, disclosure, sharing, and management of personal information set forth in this Privacy Policy, please do not use this website and immediately cease using it.

DEFINITIONS

"Authorized Employees" means Secure Exchanges employees or stakeholders who need to know or otherwise access personal information to enable Secure Exchanges to provide website services.

"Authorized Persons" means (i) Authorized Employees; and (ii) Secure Exchanges’ contractors, agents, subcontractors, and auditors who need to know or otherwise access personal information to enable Secure Exchanges to provide the website’s services.

"Secure Messages" means the content of a message sent using the website or the software, including but not limited to messages sent through the web portal, through any API or SDK, add-ons, plugins, and/or extensions operated or developed by Secure Exchanges.

"Personal Information" means information provided to Secure Exchanges by or at the direction of a user, or to which Secure Exchanges has been granted access by or at the direction of the user, that:

  1. identifies or can be used to identify an individual, including, without limitation, names, signatures, addresses, phone numbers, email addresses, and other unique identifiers; or

"Security Breach" means (i) any act or omission that materially compromises either the security, confidentiality, or integrity of personal information, or the physical, technical, administrative, or organizational safeguards implemented by Secure that relate to the protection of the security, confidentiality, or integrity of personal information.

PERSONAL INFORMATION COLLECTED

You may choose to provide us with personal information when you visit our website. For example, you may be asked to provide personal information when you send a message using our website or when you initiate a relationship with us through any means provided on the site, including your last name, first name, email address, and cell phone number, as well as any personal information that may be contained in messages or in any attachments included in messages you send or exchange using the products and services offered by Secure Exchanges.

Other personal information is automatically collected when you visit the website, including your IP address.

With regard to the content of messages sent or exchanged while using the products and services offered by Secure Exchanges, the content that the sender chooses to encrypt (the message body and its attachments, or the attachments only) is encrypted at the source, and Secure Exchanges therefore does not have access to personal information other than the email address, the cell phone number, the IP address, and/or any personal information provided by the sender and/or the recipient, and/or any personal information included in the “subject” field of any message. This information is protected in transit between our applications and our servers by a post-quantum encryption layer added to the TLS protocol (see the section “Security of Personal Information”).

All encrypted content is destroyed after a maximum of 30 days or any other retention period specified by the sender.

We use the personal information described above for legitimate purposes, which are detailed in the following section.

Although your credit card and billing information (including your mailing address) may be requested via a link accessible on the website, this information will only be shared with the payment service provider (e.g., PayPal) to complete the transaction. Secure Exchanges does not obtain or retain your credit card number.

COLLECTION AND USE OF PERSONAL INFORMATION

We collect the personal information you provide when you use other features of our website or when you use the software offered by Secure Exchanges, including when you engage in the following activities:

  1. Sending a message via the website
  2. Using a form provided by the website
  3. Signing up for an account, making a purchase, or filling out a form on our website;
  4. Using the connectors offered by Secure Exchanges (e.g., connectors with Outlook, Thunderbird, Office 365, and SDK);
  5. Subscribing to our mailing list, newsletter, and email communications to receive our latest news; and/or
  6. Contacting us to ask a question, submit a comment, or file a complaint (customer service).

In general, the personal information collected is used to administer the website, as well as to manage the software licenses offered by Secure Exchanges, including to provide information about updates and upgrades. To help you better understand how your personal information will be used, below is a more detailed explanation of how your personal information will be used in connection with specific activities.

Sending a message using our website. Our website offers the ability to send secure messages. Therefore, we will use the personal information collected to send the message.

Using the connectors offered by Secure Exchanges (e.g., connectors for Outlook, Thunderbird, Office 365, and SDK). The website allows you to download software components offered by Secure Exchanges, including connectors for Outlook, Thunderbird, Office 365, and SDK. We will use the personal information collected before, during, and after the software download to activate your Secure Exchanges software license and to subsequently administer the software, which includes providing usage information, updates, and upgrades made available by Secure Exchanges.

Make a purchase or fill out a form on our website. Our website allows you to request information about the products and services offered by Secure Exchanges and to purchase software products offered by Secure Exchanges. Accordingly, we will use the personal information collected to process your request, to complete your transaction using the payment services offered by PayPal, and, where applicable, to provide you with the information you may have requested or the products you have ordered.

Sign up for our mailing list, newsletter, and email communications. From time to time, we may collect personal information to send you emails containing our latest news, products, services, or promotions, as well as those of third parties with whom we are affiliated. You may unsubscribe from our mailing list at any time by following the instructions provided at the end of each email. You can also unsubscribe from our mailing list by following the instructions in the “Contact Us” section below. Your request will be processed within the timeframes required by law.

Contact us to ask a question, submit a comment, or file a complaint (customer service). If you choose to send us an electronic feedback form or send us your comments, questions, or feedback via email, we collect certain personal information along with your comments, suggestions, and feedback. This personal information is used to respond to your comments, questions, or feedback. We may also retain this information to assist you in the future. We may also use your comments, suggestions, and feedback to monitor and/or improve our products, services, and website.

Customer Relationship Management (CRM) Database. When you participate in any of the activities mentioned above, we collect the personal information you provide to complete and update our customer relationship management database. In this context, the personal information collected is used to manage customer relationships, generate mailing lists, follow up with potential customers, and create internal reports on the relationships between Secure Exchanges and its customers in order to monitor and/or improve our product and service offerings and our website.

INFORMATION COLLECTED ON THE WEBSITE

Cookies and Other Technologies. Our website uses a technology called “cookies.” A cookie is a tiny piece of data that our website may send to your browser, which may then be stored on your hard drive so that we can identify you as an authorized user of our products. The information stored by our authentication cookies is encrypted, and only Secure Exchanges can read its contents to identify authorized users. You can configure your web browser to notify you when you receive a cookie or to block certain cookies. However, if you decide not to accept cookies from our website, you may not be able to take full advantage of all the features of our website. Non-essential cookies are only placed with your consent, which is obtained through the consent banner on our website. You can change your preferences at any time using the “Change My Consent” feature.

A professional web analytics service. We may also use third parties, including Google, to:

  1. Use the following Google Analytics features: generating reports based on impressions recorded on the Google Display Network (a service that allows you to place ads on various news sites, blogs, and other niche sites) to attract more potential customers; integration with DoubleClick Campaign Manager (a management tool that includes a suite of features used for advertising, as well as targeting and tracking advertising campaigns on websites and related mobile devices, and generating Google Analytics reports on users’ demographics and interests);
  2. Collect, analyze, and/or aggregate your personal information (such as IP address, gender, age, and user interests), as well as generate Google Analytics reports on user demographics and interests, to help us understand how visitors interact with our website and to improve our products and website.

These features are not active on the website pages related to composing and sending secure messages.

Companies that engage in remarketing may combine the use of first-party cookies (such as Google Analytics cookies, for example) and third-party cookies (such as DoubleClick cookies) to (i) collect personal information, (ii) inform, optimize, and serve ads based on your previous visits to our website, and (iii) determine the relationship between visits recorded on our website and ad impressions, other uses of advertising services, and interactions with those ad impressions and advertising services. To measure the effectiveness of our ads, these companies may also use tracking tags or web beacons to report certain information regarding your visits to our website and to websites that link to or advertise our site. If you wish, you can disable Google Analytics for display ads. You can also customize ads on the Google Display Network. Visit https://www.google.com/settings/ads to set your preferences.

Google Tag Manager, Meta, and LinkedIn. Our website also uses Google Tag Manager, a tool used to manage the tags described in this section, as well as the Meta (Facebook) pixel and the LinkedIn Insight tag. These last two tags may be used to measure the effectiveness of our advertising campaigns on these platforms and to display our ads on them to people who have visited our website. They may collect, among other things, your IP address, cookie identifiers, and browsing data, such as the pages you’ve visited. Meta and LinkedIn process this data in accordance with their own privacy policies and may process it outside of Quebec, including in the United States.

DISCLOSURE OF PERSONAL INFORMATION

Principle. Unless otherwise specified in this Privacy Policy, we will not disclose, exchange, rent, sell, or transfer your personal information without your consent. Access to your personal information is limited to Authorized Persons.

Exceptions. We may transfer your unencrypted personal information to which we have access:

  1. to the following service providers, who act on our behalf, receive only the information necessary to perform their assigned functions, and are not authorized to use or disclose it for their own marketing or other purposes:
    1. Google, for audience measurement and advertising on our website as described in the section “Information Collected on the Website” (IP address and browsing data);
    2. PayPal, for processing credit card payments (card and billing information);
    3. Zoho, for customer relationship management (name, contact information, and relationship history);
    4. Twilio and Telnyx, for sending text messages (mobile phone number and text message content).

    These providers may process this information in Canada, the United States, or abroad. Under no circumstances do they receive the content of secure messages or signed documents.

  2. to entities, organizations, and authorities for legal purposes. In other words, our service providers and we may disclose your personal information in response to a search warrant or any other legally valid investigation or order, or to an investigative agency in the event of a breach of an agreement or a violation of the law, or as required or permitted by applicable law. We may also disclose personal information when necessary to establish, exercise, or defend legal claims and to prevent actual or suspected loss or harm to persons or property; and/or
  3. to another entity in connection with a merger or sale involving all or part of our company, or in connection with a corporate reorganization, sale of shares, or any other change in control of the company. In such cases, we may transfer your personal information to a third party as part of the transaction.

As mentioned above, the content of messages sent or exchanged while using the products and services offered by Secure Exchanges is, to the extent chosen by the sender, encrypted at the source and is decrypted only by the recipient. Consequently, Secure Exchanges is unable to access the encrypted content and has access only to the personal information included in the email subject line, as well as the email addresses, cell phone numbers, and IP addresses of the sender and recipient.

LINKS TO THIRD PARTIES

Our website may contain links to other sites that Secure Exchanges does not own or operate. In addition, links to our website may appear on third-party websites on which we advertise. Except as provided herein, we will not provide any of your personal information to these third parties without your consent. We provide links to third-party websites for the user’s convenience. These links do not constitute an endorsement or reference to the linked websites. The linked websites have separate and independent privacy policies, notices, and terms of use, which we recommend you read carefully. We have no control over these websites and, therefore, assume no responsibility for how the organizations operating these linked websites may collect, use, or disclose, secure, and process your personal information.

SECURITY OF PERSONAL INFORMATION

We have implemented and enforce administrative, technical, and physical measures designed to protect the personal information in our custody and control from unauthorized access, use, alteration, and disclosure.

We have personal information retention processes in place designed to ensure that we do not retain our customers’ personal information for longer than is necessary for the purposes mentioned above or to meet legal requirements.

Secure Exchanges must comply with the privacy policy set forth in this agreement in its collection, receipt, transmission, storage, disposal, use, and disclosure of such personal information and shall be liable for any unauthorized collection, receipt, transmission, access, storage, disposal, use, or disclosure of personal information under its control or in its possession by any party.

In recognition of the foregoing, Secure Exchanges agrees and undertakes to:

  1. keep and maintain all personal information in the strictest confidence, taking the necessary precautions to prevent any unauthorized access, use, or disclosure;
  2. use and disclose personal information solely and exclusively for the purposes for which the personal information, or access thereto, is provided in accordance with this Privacy Policy, and not to use, sell, rent, transfer, distribute, or disclose or otherwise make available personal information for Secure Exchanges’ own purposes or for the benefit of any person other than the user, in each case without the user’s prior written consent; and
  3. not to disclose, directly or indirectly, personal information to any person other than its Authorized Persons without the user’s explicit written consent, unless and to the extent required by government authorities or otherwise, to the extent expressly required, by applicable law.

At a minimum, Secure Exchanges’ safeguards for personal information must include

  1. restricting access to personal information to authorized employees;
  2. securing business facilities, data centers, servers, backup systems, and computer hardware;
  3. implementing security measures for networks, applications, devices, databases, and platforms;
  4. securing the transmission, storage, and disposal of information;
  5. implementing authentication and access controls within media, applications, operating systems, and equipment;
  6. encrypting, at the source using the AES 256-bit algorithm, the content that the sender chooses to encrypt and signed documents, without Secure Exchanges being able to retrieve or access the keys;
  7. strictly separating personal information from Secure Exchanges’ information or that of its other clients so that personal information is not commingled with other types of information;
  8. implementing appropriate procedures and practices regarding personnel security and integrity, including, but not limited to, conducting background checks in accordance with applicable law;
  9. providing appropriate training on privacy and information security to Secure Exchanges’ employees;
  10. encrypting communications between Secure Exchanges’ client applications—including the web portal and plug-ins—and its servers using a post-quantum encryption layer (ML-KEM, NIST FIPS 203 standard) added to the TLS protocol. This layer protects the metadata that Secure Exchanges must decrypt to provide the service, thereby reducing the risk that communications intercepted today could be decrypted later using a quantum computer.

PROCEDURE IN THE EVENT OF A SECURITY BREACH

Secure Exchanges agrees to:

  1. to provide users with the name and contact information of a Secure Exchanges employee who will be available to assist a user in addressing obligations related to a security breach;
  2. notify any user of a security breach as soon as possible, within a reasonable amount of time after Secure Exchanges becomes aware of said security breach; and
  3. notifying the customer of any security breach by any available means of communication.

Secure Exchanges is committed to doing its best to remedy any security breach as quickly as possible.

SECURITY COMPLIANCE AUDIT

Secure Exchanges may periodically conduct on-site audits of information technology and information security controls for all facilities, including, but not limited to, obtaining a network vulnerability assessment performed by a recognized third-party audit firm, based on industry best practices.

ACCESS TO YOUR PERSONAL INFORMATION

You have the right to access your personal information in our custody and under our control, to update it, and to correct any inaccuracies therein, subject to certain exceptions provided by law. You may request to access, update, and correct inaccuracies in the personal information we have in our custody or control by sending us an email or writing to us at the contact information provided below. We may request certain personal information for the purpose of verifying the identity of any person wishing to access or update their personal information record.

CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be updated periodically to reflect changes in applicable laws or in our practices regarding personal information. The revised Privacy Policy will be posted on this website. We will process personal information in accordance with the Privacy Policy in effect at the time we collect your information, unless you consent to it being processed differently.

WITHDRAWAL OF YOUR CONSENT TO THE RETENTION, USE, AND DISCLOSURE

You may withdraw your consent to the retention, use, or disclosure of your personal information at any time by contacting us as indicated below in the “Contact Us” section. However, if you withdraw your consent, we may not be able to respond to your requests, process your inquiries, or provide you with any assistance regarding the website.

CONTACT US

If you have any comments or questions about how we use your personal information, or if you wish to access, review, update, or correct the personal information we hold, please contact us as described below.

Attn: Support
Phone: 1-800-955-3872
Mailing Address: PO Box 1002, Succ. Saint-Nicéphore, Drummondville (QC), Canada, J2A 0B1
Email: support@secure-exchanges.com

Subscribe to the Secure Exchanges newsletter

Captcha