Privacy Policy

Effective date: October 22, 2026

This Policy explains how LPBB Technologie incorporated ("LPBB") collects, uses, shares, and retains information through lpbb.ca and SmartRack, including the Clover application listed as SmartRackESL. It describes processing performed for merchants and does not replace the privacy notices merchants must provide to their customers or personnel.

1. Roles and scope

For website visitors, account administration, security, and LPBB's own business operations, LPBB determines why and how personal information is processed. For merchant data processed only to deliver SmartRack, the merchant generally determines the purposes and LPBB acts as its service provider or processor, subject to the applicable agreement and law.

2. Information we collect

  • Account and business information, such as name, business email, organization, role, stores, and support communications.
  • Service and device information, such as authentication events, IP address, browser/device details, audit activity, diagnostics, and display status.
  • Clover connection information, including merchant ID, connection/store mapping, OAuth access and refresh tokens, authorization status, and webhook event identifiers.
  • Clover inventory/catalog information needed by SmartRack, such as item ID, name, alternate name, SKU or item code, price, availability/hidden status, and modification time.
  • Website form submissions and newsletter preferences.

3. Clover permissions and excluded data

SmartRackESL uses Read Inventory permission. Catalog data is received through the Clover API after the merchant authorizes access; inventory webhook events identify the merchant and changed items so SmartRack can retrieve the updated catalog records. The current integration does not request payments, orders, customers, or employee permissions and does not retrieve payment-card data, bank details, transaction history, customer lists, or employee records from Clover. SmartRack account-user names and email addresses come from the SmartRack account or an invitation, rather than Clover employee records.

Imported catalog records are used to provide the merchant's requested synchronization and display service, not for independent advertising, profiling, or sale. If additional Clover permissions become necessary, we will update the disclosures and obtain the applicable authorization before using them.

4. How information is used

  • Authenticate users and administer accounts, organizations, stores, roles, and integrations.
  • Import Clover catalog data and keep SmartRack products, prices, promotions, and connected displays synchronized.
  • Receive and process Clover inventory webhook events.
  • Operate, secure, troubleshoot, support, and measure the service.
  • Respond to inquiries and send requested service or marketing communications.
  • Comply with law, enforce agreements, and prevent fraud, abuse, or security incidents.

5. Legal grounds

Depending on the context and applicable law, processing is based on performing a contract, the merchant's instructions, consent, legal obligations, and LPBB's legitimate interests in operating and securing the service. Consent may be withdrawn where it is the applicable basis.

6. Disclosure and subprocessors

LPBB does not sell personal information or share it for cross-context behavioral advertising. Authorized merchant users can access information permitted by their role and store access. Amazon Web Services hosts SmartRack infrastructure, authentication, databases, and operational processing. Selected display providers, including Minew for compatible ESLs, receive the product fields and device identifiers needed to publish the merchant's display content; they are not given Clover OAuth tokens.

Service providers may process information under instructions and appropriate confidentiality and security obligations. Information may also be disclosed to professional advisers, authorities where legally required, or a business successor subject to appropriate protections. Clover independently handles its authorization pages and services under its own privacy notice. hCaptcha handles browser and security signals on LPBB forms where it is displayed, as described in the Cookie Policy.

7. Security

LPBB uses access controls, tenant scoping, encrypted transport, restricted secrets, logging, and encryption for Clover OAuth tokens. Access tokens are used only to call authorized Clover APIs. No method of storage or transmission is completely secure, and merchants should promptly report suspected compromise.

8. Retention, revocation, and deletion

Account and imported catalog records are retained while needed to provide the merchant's service or until a verified deletion request is handled. Operational logs and security records are retained for their operational, security, contractual, or legal purpose. Any limited retention needed for legal obligations or disputes is restricted to that purpose; backup copies are subject to their backup lifecycle. We do not promise that uninstalling the app immediately erases all stored copies.

Uninstall or revoke SmartRackESL in Clover to withdraw future authorized API access. Contact brian.bernier@lpbb.ca to request removal of stored connection credentials, imported catalog records, or the SmartRack account. We verify the requester's authority and explain applicable exceptions when responding. Revocation and deletion are separate actions: imported products and content already published to devices can remain until separately removed or replaced.

9. International processing

LPBB is based in Canada and uses providers that may process information in Canada, the United States, or other jurisdictions. Information may therefore be subject to the laws and lawful access requests of those jurisdictions. LPBB uses contractual and other safeguards where required.

10. Your choices and rights

Subject to applicable law, individuals may request access, correction, deletion, restriction, portability, or withdrawal of consent, and may object to certain processing. Contact brian.bernier@lpbb.ca for information LPBB controls. For information processed on a merchant's behalf, contact the merchant; LPBB assists the merchant with requests as required. We may verify identity and authority before disclosing or changing information. You may also raise a complaint with the competent privacy authority.

Merchants can revoke SmartRackESL in Clover and can contact LPBB for assistance with removal of previously imported information. A Clover-related privacy request concerning information Clover controls should be directed to Clover under its Privacy Notice.

11. Cookies

The website uses cookies and similar technologies as described in the Cookie Policy. Where required, optional technologies are used only after consent. SmartRack authentication and security storage necessary to provide the service cannot be disabled without affecting functionality.

12. Children

SmartRack is a business service and is not directed to children. LPBB does not knowingly collect personal information from children through SmartRack.

13. Changes and contact

LPBB Technologie incorporated is the provider of SmartRack and SmartRackESL. Send privacy questions, complaints, or rights requests to brian.bernier@lpbb.ca or use the contact form on lpbb.ca. Identify the organization and request without sending passwords, Clover tokens, or payment-card information. LPBB will date Policy revisions and communicate material changes when required.