bentops
Back to site FR Get bentops

Privacy policy

Data controller: Bronko Marketing Inc.
Effective July 29, 2026 · Last updated October 16, 2026

bentops is built to stay with you. Your work data is saved on your computer, not on our servers. This policy explains the little personal information we process, why, and the rights you have.

In short: your spaces, projects, tasks, time and notes stay on your device. We never see them. We never sell or rent your data, ever. The information we process is limited to your purchase (through Stripe), the licence and update checks, which transmit none of your content, and, only if you agree to it, measuring how our ads perform (section 7).

1. Privacy officer

In accordance with Law 25, the privacy officer at Bronko Marketing Inc. is:

Éric Fillion, Privacy officer

Email: admin@bentops.com

2. What information we process

Your data in the app (we have no access to it)

Everything you create in bentops (spaces, projects, tasks, time, meetings, notes) is saved locally on your computer. This data is not sent to us and we have no access to it.

Purchase-related information

When you buy bentops, payment is processed by Stripe. Depending on the case, the following are processed: your name, your email address, your country or province (for tax calculation) and payment information. We never store card numbers; they are handled directly by Stripe. We keep the information needed for billing and support (for example email and transaction number).

Update checks

When the app is connected to the Internet, it may query a file we host to find out whether a new version is available and show an information message. This request sends none of the content you create. Like any request on the Web, it technically exposes your IP address to the hosting service; we associate no identifier with it and do no tracking of it.

Activity detection (in the app)

To flag unlogged work time, the app reads a system value indicating how long the keyboard or mouse have been idle. It never reads the content of what you do, and this information does not leave your device. Two optional features go further and are configured separately: « Day memory » and, inside it, « Calls and messages ». Both are described below.

Activating your licence

So that a purchased licence is not shared without limit, the app checks your key with our server on activation, then periodically. What is sent: your activation key, a device fingerprint (a system identifier turned into a cryptographic fingerprint, from which we cannot recover the original serial number), the operating system (Mac or Windows), the app version, the label you give the device, and the version of the licence agreement you accepted together with the date of that acceptance, so that we can establish, if needed, that you did consent and to which version. This is used only to enforce the number of devices allowed by your licence and to help you if you change computers. No content from your work is sent with this check.

Day memory (optional, in the app)

If you turn this feature on, the app records the name of the frontmost application and how long it stays in the foreground, so you can rebuild forgotten time entries. It reads neither the contents of your windows, nor their titles, nor any web address. This log is stored locally in the app database, it is never sent to us, and it is deleted automatically after 30 days. The feature is off by default; you can turn it off at any time and erase the log immediately from Settings.

Calls and messages (optional · macOS only · inside Day memory)

This feature is coming in a future version of bentops. Inside Day memory, on macOS only (Windows has no comparable call log or message database), you will be able to separately turn on a record of your communications, to recover work time spent on the phone. The app then reads, on your computer only, the call log and the message timestamps that macOS keeps there, and, if you allow it, your contacts, so a number can be matched to a name. What is kept is the time, the duration, the direction of the call, the number and the name of the other party. The content of your messages is never read: only their timestamps are. This information is stored locally, is never sent to us, and is deleted automatically after 30 days, like the rest of Day memory. The three accesses (calls, messages, contacts) are turned on separately and are all off by default. Because this information also concerns third parties, you remain responsible for it: see the licence agreement.

Optional assistant connection (MCP)

The app can open a local bridge letting the Claude assistant (Anthropic) read and modify your bentops data at your request. This feature is off by default. If you turn it on, the data the assistant reads is sent to Anthropic, PBC, outside Quebec, to process your requests: the bridge itself is local, but Claude's model is not, so everything it reads is sent there. What becomes reachable is your spaces, projects, tasks, notes, time entries, meetings, follow-ups, typical-week blocks, imported calendar events and, if you turned it on, Day memory. A single request can return a complete list, not only the one item you are talking about. The Billing module and the Vault are not reachable through this bridge in any way: your clients' contact details, your invoices, your tax numbers and your passwords are out of its reach. If you turned on « Calls and messages », the identity of the other party is replaced by a local identifier before anything is sent, unless you expressly choose otherwise. The assistant can also rename a space, a project or a task, rewrite a time entry, change dates and remove a block from your typical week; those changes apply immediately. A dialog explains all of this and collects your consent before activation, and the date of that consent is kept. You can turn the connection off at any time in Settings: the bridge stops immediately. While the feature stays off, no data leaves your device because of it. Your bentops data stays on your device and you can view and correct it in the app at any time, without asking us, since we hold no copy of it; for information already sent to Anthropic, those rights are exercised with Anthropic, according to the settings and policy of your Claude account. Details are in the licence agreement.

3. Purposes and basis

We process this information only to:

We obtain your consent at the time of collection. Consent to any secondary purpose, where applicable, is separate and optional.

4. Third parties and transfers outside Quebec

We rely on providers to operate the service:

Some of these providers may process information outside Quebec. Before any such disclosure, we carry out a privacy impact assessment to ensure an adequate level of protection. We never sell or rent your information. The only disclosure for advertising purposes is the one described in section 7, and it happens only with your consent.

5. Retention and destruction

We keep purchase-related information for as long as necessary for the purposes above and to meet our legal, accounting and tax obligations (in particular the retention of supporting documents required by tax laws). At the end of the retention period, the information is destroyed or anonymized.

6. Your rights

Subject to the law, you have the right to:

To exercise a right, write to the privacy officer at admin@bentops.com. We respond within the time limits provided by law.

7. Cookies and tracking

The bentops app sets no cookies and contains no advertising trackers. On our website, we limit cookies to what is necessary; every privacy setting defaults to the most protective level. For audience measurement, we use Google Analytics 4 (loaded through Google Tag Manager); its cookies are set only with your consent, which you can withdraw at any time through “Manage cookies”.

Cookie-free visit counting. Separately from the above, our own servers keep a simple tally: how many pages are viewed each day, and how many times a shop poster's QR code is scanned. This tally sets no cookies, keeps no IP address, not even turned into a fingerprint, and cannot tell whether two visits come from the same person, nor reconstruct a browsing path. It runs whether or not you accept cookies, because it processes no information about you: it adds up visits, it follows no one. We use it to know how many people visit the site, and which shop poster brings people to bentops.

For advertising, we use the Meta pixel and Meta’s Conversions API (Facebook, Instagram). They tell us which ads lead to a purchase and let us show you our ads. They neither load nor send anything without your consent to the “Marketing” category. What is sent: cookie identifiers created by Meta, your IP address, your browser, the pages of our site you visit, and on a purchase, the amount along with your email address turned into a cryptographic fingerprint (hashed), never sent in plain text. We do not send your name, address or phone number.

Nothing you do inside the bentops app is sent to Meta, or to anyone else: your spaces, projects, tasks, hours and notes stay on your computer. You can withdraw your consent at any time through “Manage cookies”: the cookies involved are deleted and nothing further is sent. Withdrawal applies going forward: what has already been sent cannot be recalled.

Partner link. If you reach our site through a link from an affiliate partner or a shop, we set a first-party cookie containing a random identifier, valid for 48 hours. Its only purpose is to recognise, if you buy, which partner introduced you to bentops, so that we can pay their commission. We also record the click, with your IP address and browser turned into cryptographic fingerprints, to detect fraud. This cookie does not follow you elsewhere on the web and is never shared with a third party. This duration is deliberately short: it covers the time it takes to decide, without following you beyond that.

Where your visit came from. If you arrive through an ad, a poster QR code or a leaflet, we set a first-party cookie valid for 48 hours containing only the campaign labels: its source, medium, name and the creative involved. It contains no identifier about you: two people arriving from the same ad carry exactly the same cookie, so it cannot tell you apart. If you buy, those labels are recorded on the order, so we know which ad or poster introduced people to bentops. It does not follow your browsing elsewhere on the web and is never shared with a third party.

8. Security and incidents

We take reasonable measures to protect the information we process. We keep a register of confidentiality incidents. In the event of an incident presenting a risk of serious injury, we notify the Commission d'accès à l'information and the individuals concerned, as required by law.

9. Governance

In accordance with Law 25, Bronko Marketing Inc. maintains governance policies and practices covering the collection, use, disclosure, retention and destruction of personal information, the role of the privacy officer, the handling of complaints and the management of incidents. Detailed information about them is published on our Personal information governance page, as the law requires.

10. Contact us and file a complaint

For any question or to exercise a right, contact our privacy officer:

Bronko Marketing Inc. · privacy officer

Email: admin@bentops.com

3785, boulevard Central, Québec (Québec) G1P 3R3

If our response does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec (Quebec's Commission d'accès à l'information). For activities covered by federal law, you may also contact the Office of the Privacy Commissioner of Canada.

11. Changes to this policy

We update this policy whenever our practices change. The date of the last update appears at the top of this page, and important changes are listed below. If a change affects your rights or widens what we process, we also inform you through a notice on the site.

Licence agreement Terms of sale Privacy Refunds Governance