NutraSoft food manufacturing ERP software

NutraSoft Privacy Policy

Learn how we collect, use, and protect your personal information when you use our food manufacturing software.

Last Updated: August 12, 2026

What information do we collect?

This privacy policy (“Policy”) describes how Informatique Merkaz inc. (NutraSoft) collects, uses and shares personal information of users of www.nutrasoft.ca (the “Site”), of the NutraSoft web platform, and of the NutraSoft ERP mobile application for Android and iOS (together, the “Services”). It also applies to any messages you send to the Company by email, text or any other electronic messaging method. This Policy does not apply to websites that post different statements.

Informatique Merkaz inc. (NutraSoft) is committed to protecting the online privacy of its customers. We recognize the need to safeguard the professional and personal information entrusted to it by its customers, in an appropriate manner.

We get several different types of information about you in a range of ways:

Information You Give Us

We may collect personally identifying information such as your name, postal address, email address, phone number, username, password, demographic information (such as your gender and occupation) as well as other information you directly give us on our Site. We may also collect information from any messages you send to us, details about transactions you make on the Site, and your search queries on the Site.

Information We Get From Others

We may get information about you from other sources. We may add this to information we get from this Site.

Information Automatically Collected

We automatically log information about you and your computer. For example, when visiting our Site, we log your computer operating system type, browser type, browser language, the website you visited before browsing to our Site, pages you viewed, how long you spent on a page, access times and information about your use of and actions on our Site.

Cookies and Similar Technologies

We log information using cookies and similar technologies, including browser local storage. A cookie is a small data file a website stores on your device; we use both session cookies, which expire once you close your browser, and persistent cookies, which stay until they expire or you delete them. On this Site they fall into three groups. Strictly necessary cookies load the pages, remember your language, keep your session secure and record the cookie choice you make; they cannot be switched off. Analytics cookies let us count visits and see which pages help and which ones confuse, through Google Analytics 4 and through Contentsquare (formerly Hotjar), which also records session replays and heatmaps showing how pages are scrolled and clicked; the Contentsquare tag does not load at all unless you allow analytics. Marketing cookies let us measure which campaigns bring people here and show you NutraSoft content on other sites, through tags we host in Google Tag Manager. Separately, we load HubSpot to run our contact forms and demo booking, and Help Scout to run the support chat window; both set their own cookies for those purposes. None of this is used to identify you personally, and we do not sell the information it produces.

Who and What This Policy Covers

This Policy applies to www.nutrasoft.ca (the “Site”), to the NutraSoft web platform, and to the NutraSoft ERP mobile application for Android and iOS (together, the “Services”). It also applies to any message you send us by email, text or other electronic means. It does not apply to websites that post a different statement.

Informatique Merkaz Inc. (NutraSoft), located in Quebec, Canada, is the business responsible for the Services. Our Privacy Officer can be reached using the contact details at the end of this Policy.

When we act on behalf of your employer

Most people who use the mobile application do so as an employee of a NutraSoft customer. For the production, inventory, shipping and receiving records created through the Services, your employer decides what is collected and why, and NutraSoft processes that information on their instructions as a service provider. If you want those records corrected or deleted, ask your organisation’s NutraSoft administrator first — we will assist them, but we act on their instructions. For the information we collect for our own purposes — account and billing records, support correspondence, and Site analytics — NutraSoft is the responsible party and this Policy governs directly.

Use of Personal Information

We use the information we collect from you to provide our food manufacturing software services and improve your experience. Specifically, we use your information to:

  • Provide and maintain our services
  • Process your transactions and manage your account
  • Communicate with you about our services
  • Provide customer support
  • Improve our services and develop new features
  • Comply with legal obligations
  • Protect against fraud and abuse

We may use your information in the following ways:

Service Provision

  • To provide you with information, products or services that you request from us.
  • To provide you with alerts, newsletters, and other information that may be of interest to you.
  • To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
  • To request feedback and contact you about your use of our Site.

Legal Compliance

  • To enforce or apply our terms of service agreements, including for billing and collection purposes.
  • To protect the rights and property of the Company, our agents, customers, and others.
  • To comply with applicable laws and regulations.

Sharing of Personal Information

We respect your privacy and do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy.

We do not sell your personal information and we do not share it with advertisers. We may publish aggregated or de-identified statistics about how the Services are used; that information cannot be linked back to any individual.

We may share your personal information:

Service Providers

  • With trusted third-party service providers who assist us in operating our website and providing our services.
  • These service providers are contractually obligated to keep your information confidential and secure.
  • They may only use your information to perform specific services for us.

Legal Requirements

  • When required by law or to comply with legal processes.
  • To protect our rights, property, or safety, or that of our users.
  • To prevent fraud or other illegal activities.

Business Transfers

  • In connection with a merger, acquisition, or sale of all or part of our business.
  • We may share information to protect the rights and property of Informatique Merkaz inc. (NutraSoft), our agents, customers, and others. This includes enforcing our agreements, policies, and terms of use.

Where Your Information Is Processed

NutraSoft is based in Quebec, Canada. Some of the service providers we rely on process information outside Quebec and outside Canada, including in the United States. The providers that may handle personal information on our behalf are:

Service providers

  • Google LLC — speech recognition on Android devices. When you run a voice session, your speech audio is transmitted to Google and processed under Google’s own privacy policy in order to produce a text transcript.
  • Apple Inc. — speech recognition on iOS devices, on the same basis.
  • OpenAI, L.L.C. — interpreting your voice commands and answering production questions. Receives the text of your command together with the production context needed to answer it.
  • ElevenLabs Inc. — generating the synthesized voice that reads answers back to you. Receives the text to be spoken.
  • Expo (650 Industries, Inc.) — delivering application updates. Receives technical device and version information, not account information.
  • Our cloud hosting, database and email providers — operating the Services and sending service messages.

Before entrusting personal information to a provider outside Quebec, we assess whether it will receive adequate protection, taking into account the sensitivity of the information, the purposes for which it is to be used, the protections the provider has in place and the legal framework of the country concerned, as required by Quebec’s Act respecting the protection of personal information in the private sector. Each provider is bound by a written agreement that limits it to processing the information on our behalf and requires it to protect it. For transfers out of the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses.

You may write to support@nutrasoft.ca to ask about a specific transfer or to request details of the safeguards in place.

How Long We Keep Your Information

We keep personal information only as long as we need it for the purpose we collected it for, and then delete it or render it anonymous. In practice:

  • Account and profile information — for as long as your account is active, and up to 12 months after it is closed.
  • Session tokens stored on your device — until you sign out or uninstall the application, whichever happens first.
  • Voice command transcripts — no longer than 30 days, and used only to operate and troubleshoot the voice features.
  • Synthesized audio replies — played once and deleted from your device immediately afterwards; they are not stored on our servers.
  • Production, inventory, shipping and receiving records — retained by your organisation for as long as its own food-safety and traceability obligations require, which in Canada and the United States is commonly two years or more.
  • Support correspondence — 24 months from the date the matter is closed.
  • Billing and tax records — for the period required by Canadian tax law, currently six years.

Where a longer period is required by law, or where information is needed to establish, exercise or defend a legal claim, we keep it for that period and no longer.

How We Protect Your Information

We maintain administrative, technical and physical safeguards designed to protect personal information against loss, theft, and unauthorised access, disclosure, copying, use or modification. These include:

  • Encryption of all traffic between the application and our servers using TLS.
  • Storage of session tokens in the operating system’s protected keystore — the iOS Keychain or the Android Keystore — rather than in ordinary application storage. We do not store your password on your device.
  • Role-based access controls, so that each person sees only what their role requires.
  • Limiting employee access to customer information to those who need it to perform their work.
  • Periodic review of our service providers and of the permissions the application requests.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your information and to review our safeguards as the Services change.

If something goes wrong

We maintain a register of confidentiality incidents. Where an incident involving your personal information presents a risk of serious injury, we will notify you and the Commission d’accès à l’information du Québec promptly, together with any other regulator we are required to inform, including the Office of the Privacy Commissioner of Canada where Canadian federal law applies.

Information Choices and Changes

You have several choices regarding your personal information:

Email Communications

Our marketing emails tell you how to "opt-out." If you opt out, we may still send you non-marketing emails. Non-marketing emails include emails about your accounts and our business dealings with you.

Account Information

You may correct, amend, or delete inaccurate information at any time by logging into your account or contacting us directly.

Cookie Preferences

The first time you visit, a banner asks you to choose. Analytics and marketing cookies stay switched off until you accept them, refusing takes a single click and is offered as prominently as accepting, and nothing optional is set while you have not answered. You can change or withdraw your choice at any time from the Cookie preferences link at the bottom of every page: it reopens the same panel, with a switch for analytics and a switch for marketing, and strictly necessary cookies listed without one because the Site cannot run without them. A withdrawal applies immediately to the tags that read your choice live, and from your next page load for a tag that was already running in the page. We record what you chose and when, as Quebec law requires. You can also block or delete cookies in your browser settings, but that applies to every site you visit and may stop parts of the Services from working, so the banner is the better place to control this Site.

Contact Information

We welcome your comments or questions about this privacy policy. You may also contact us at support@nutrasoft.ca

NutraSoft Privacy Officer

Email: support@nutrasoft.ca
Phone: 1-888-775-5730
Address: Informatique Merkaz Inc., Quebec, Canada

Changes to this Privacy Policy

We may change this privacy policy from time to time. If we make any changes, we will change the Last Updated date above. We encourage you to review this policy periodically to stay informed about how we protect your information.

If we make material changes to this policy, we will notify you by email or by posting a notice on our website before the changes take effect. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information:

Right to Access

You have the right to request access to the personal information we hold about you.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

Right to Erasure

You have the right to request deletion of your personal information in certain circumstances.

Right to Data Portability

You have the right to request your personal information in a structured, commonly used format.

Right to Object

You have the right to object to certain types of processing of your personal information.

Right to Withdraw Consent

Where we rely on your consent, you may withdraw it at any time. Changing your cookie choice from the Cookie preferences link at the bottom of every page, revoking a device permission and unsubscribing from marketing email all take effect immediately.

Right to Cessation of Dissemination

If you are a Quebec resident, you may ask us to cease disseminating personal information about you, or to de-index a link giving access to it, where the dissemination contravenes the law or a court order.

Sale and Sharing of Personal Information

We do not sell your personal information. On the Site, advertising and remarketing tags run only while you have marketing cookies switched on, and stop when you switch them off; if you never accept them, nothing is shared for advertising purposes. The mobile application contains no advertising, no third-party analytics and no cross-app tracking, and we do not collect device advertising identifiers.

Right to Complain

If you are not satisfied with how we have handled your information, you may complain to the Commission d’accès à l’information du Québec, to the Office of the Privacy Commissioner of Canada, or, if you are in the European Economic Area or the United Kingdom, to your local supervisory authority.

To exercise any of these rights, please contact us at support@nutrasoft.ca. We will respond to your request within 30 days.

Children’s Privacy

The Services are business tools intended for use by adults in a workplace. They are not directed to children, and accounts cannot be created from inside the mobile application. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, write to support@nutrasoft.ca and we will delete it.

Artificial Intelligence Features

The Services include optional AI features, principally the hands-free voice assistant in the mobile application. This section explains what those features send, and to whom.

What is sent

When you speak a command or ask a question, your speech is first converted to text by the speech recognition service built into your device’s operating system. That text is then sent to our servers together with the context needed to answer it — for a production question this includes the production order, its batch numbers and dates, and the ingredients and quantities involved. Our servers pass that to OpenAI to interpret, and pass the answer to ElevenLabs to be spoken aloud. We do not include your name, email address or account identifiers in these requests.

Your business information

Because the assistant answers questions about your production runs, recipe and ingredient information forms part of what is sent to our AI providers. If your formulations are confidential, please take this into account before enabling voice features for your team. Voice and AI features are enabled per organisation and can be switched off by your NutraSoft administrator at any time.

Not used to train models

Our agreements with these providers prohibit them from using data sent through our account to train their models. They act as our processors and may retain data only briefly, to deliver the service and to monitor for abuse, as their terms require.

No automated decisions about you

The assistant records and suggests; it does not make decisions about you. No decision producing legal effects or similarly significant effects for you is made by automated processing alone. If that ever changes we will tell you beforehand, and you will be able to request a human review of the decision and to present your observations.

NutraSoft Mobile Application

This section describes how the NutraSoft mobile application (available on the Apple App Store and Google Play Store) handles personal data. The mobile app is a companion tool for users with an existing NutraSoft ERP license; accounts are provisioned by your organization's license administrator on our web platform and cannot be created from inside the app.

Microphone and Voice Recordings

The mobile app requests microphone access only when you actively start a hands-free voice assistant session for production, shipping, reception, or inventory tasks. It does not listen in the background and does not record when no session is running. Microphone access can be revoked at any time from your device's system settings and is not required to use the rest of the app.

Speech-to-text transcription is performed by the speech recognition service built into your device's operating system — Google on Android, Apple on iOS. During an active voice session, your speech audio is transmitted to and processed by that provider, under their own privacy policy, in order to produce a text transcript. NutraSoft does not receive, store, or retain the raw audio at any point.

Once your speech has been converted to text, that text is sent to our backend, which acts as a proxy for two third-party processors: OpenAI, used to interpret your commands and answer production-related questions, and ElevenLabs, used to generate the synthesized voice that speaks responses back to you. We do not include your name, email address, or account identifiers in these requests. Both providers act as our data processors under written agreements and do not use your data to train their models on our account. Synthesized audio replies are played once and deleted from your device immediately afterwards.

Authentication and Local Storage

Your session token is stored on your device using the iOS Keychain or Android Keystore via Expo SecureStore. We do not store passwords on the device, and tokens are wiped automatically when you sign out.

Account Management and Deletion

Because the mobile app does not offer self-service sign-up, account deletion is handled by your license administrator or by our support team. For full details on how to request deletion and what data is removed or retained, see our Account Deletion page.

Tracking, Analytics, and Advertising

The mobile app does not include third-party analytics, advertising SDKs, or cross-app tracking. We do not collect device advertising identifiers (IDFA / AAID) and we do not share any data with advertising networks.

Permissions Summary

The mobile app requests the following device permissions:

  • Camera — used only to scan product and lot barcodes. Images are decoded on your device and are never stored, saved to your photo library, or transmitted to us.
  • Microphone — used only while a voice assistant session you started is running. See the section above for how that audio is handled.
  • Internet — required to communicate with the NutraSoft backend.
  • Vibration / Haptics — used for tactile feedback in the user interface.

This privacy policy was last updated on August 12, 2026, and is effective as of that date.