Scope and commitment
This policy applies to the Oxy Finance desktop application for Windows, published by Oxygen DW, and to support communications directly related to it. It supplements the general Oxygen DW privacy policy and prevails for processing performed within Oxy Finance if the two differ.
Oxy Finance is designed for privacy by default. Personal and financial information entered in the application remains on the user’s computer and under the user’s control. Oxygen DW does not receive it, remotely access it, sell it, rent it, publish it, or use it for advertising, profiling or marketing.
Privacy officer
Oxygen DW is accountable for personal information it actually holds, including information voluntarily submitted for support. The management of Oxygen DW performs the role of Privacy Officer.
Contact: Oxygen DW, 142 rue Berthiaume, Saint-Jean-sur-Richelieu, Quebec J2Y 1E8, Canada · admin@oxygendw.com · +1 514 703-0294. Requests for access or correction, withdrawals of consent and privacy complaints may be directed to the Privacy Officer.
Information processed locally
Depending on the features used, Oxy Finance may process on the device: identity and contact details; business information; GST and QST numbers; customer and supplier records; accounts and balances; income, expenses, budgets, invoices, payments, subscriptions and investments; categories, notes, dates and payment methods; receipts, logos and other attachments; settings, preferences and backups.
This information may be sensitive because it describes financial circumstances or relates to third parties. It is entered, imported, changed and deleted at the user’s direction solely to provide financial-management features. Users should not enter information that is unnecessary.
Information the application does not collect
As described for this version, Oxy Finance does not upload the financial database to Oxygen DW servers; synchronize transactions with an Oxygen DW cloud; connect to banks, cards, credit agencies or brokerage platforms; access banking passwords; activate the camera, microphone, contacts or location; or include an advertising network or data-sale mechanism.
Investment values are entered manually. Documents and exports are not sent to anyone by Oxygen DW. This policy will be updated before any feature that materially changes these practices is enabled.
Purposes and necessity
Local processing is limited to completing actions requested by the user: recording and classifying transactions; calculating totals and balances; preparing invoices, dashboards and reports; managing customers, suppliers, taxes and investments; restoring a backup; exporting or printing documents; and applying preferences.
Oxy Finance limits fields and access to information reasonably necessary for these functions. Oxygen DW does not reuse local information to determine creditworthiness, make automated decisions about a person, create a commercial profile or train an artificial-intelligence model.
Consent and third-party information
The user chooses what to enter and initiates backup, import and export operations. Those actions indicate the user’s intention to use the information only for the functional purposes described here. Users should understand the nature of sensitive information before entering it.
A user who records information about a customer, supplier, employee or other person is responsible for having valid authority or another lawful basis, limiting collection, respecting that person’s rights and using generated documents lawfully. Oxygen DW does not become the holder of information merely because its software processes it locally.
Local storage, backups and exports
Application data is stored in the user’s Windows environment. Backup copies, CSV or PDF files, invoices and other exports are created only at the user’s request and in a location selected by the user. That may be a local drive, removable media, network folder or folder synchronized by a third-party service.
Oxygen DW does not control those locations. If OneDrive, Dropbox, Google Drive or another synchronized folder is selected, that provider may process the file under its own terms. Users should review access sharing, encryption and processing locations before storing a backup there.
Disclosure, publication and sale
Oxygen DW does not disclose, publish or sell locally stored financial data because it has no access to it. The application does not publish information online or send it to advertisers, data brokers or commercial partners.
A disclosure can result only from a separate user action—such as voluntarily attaching a screenshot, database or report to a support request—or from the user’s use of an external sending, sharing, backup or printing tool. A legal demand received by Oxygen DW can reach only information Oxygen DW actually holds.
Microsoft Store, purchases and licensing
Microsoft may administer downloads, updates, purchases, subscriptions and entitlement validation. It may process account identifiers, transaction data, technical information and diagnostics under its own privacy statement. Oxygen DW does not receive full payment-card numbers and does not control processing independently performed by Microsoft.
Financial records created inside Oxy Finance are not transmitted by the application to Microsoft for publication, advertising or commercial analytics. This policy does not replace the Microsoft Privacy Statement.
Technical support and voluntary communications
A person contacting Oxygen DW may provide a name, email address, telephone number, message, Windows and application versions, and any files they choose to attach. Oxygen DW uses this information to authenticate and answer the request, troubleshoot, follow up, prevent abuse and meet legal obligations.
Never send a complete database, bank statement, card number, social insurance number, password or identity document unless it is expressly requested, demonstrably necessary and an appropriate channel has been agreed upon. Redact irrelevant information before sending a screenshot or document. Oxygen DW will request only what is reasonably necessary.
Retention and deletion
Local data remains on the device until the user changes or deletes it, uninstalls the application or deletes the relevant files. Uninstalling may not remove backups and exports stored elsewhere; users must locate and securely destroy them when no longer needed.
Support information is kept only as long as needed to handle the request, maintain a reasonable service history, protect security, prevent fraud and meet applicable limitation or retention periods. It is then reasonably destroyed or anonymized, subject to backup rotation and legal holds.
Security and user responsibilities
Oxygen DW applies administrative and technical safeguards proportionate to the information it holds. No device or storage method is risk-free. Local storage reduces transfers, but protection also depends on the computer and the user’s choices.
Users should protect Windows with a password or Windows Hello, enable device encryption where available, install updates, use antivirus and firewall protection, limit administrator accounts, lock the screen, encrypt backups, control shared folders and securely erase transferred devices or media. Users are responsible for access granted to other people using the same PC and for recipients of exports.
Privacy incidents
If Oxygen DW has reason to believe an incident affects personal information it holds, it will take reasonable steps to reduce harm and prevent recurrence. Where required, it will assess the risk of serious harm, notify affected persons and the Commission d’accès à l’information du Québec, and maintain an incident register.
The user must respond promptly to loss, theft or compromise of a computer or backup under the user’s exclusive control, including disconnecting synchronized services, changing access credentials and notifying affected persons or institutions when appropriate. Oxygen DW can explain application file locations but cannot remotely erase local data.
Individual rights
A person may ask Oxygen DW to confirm whether it holds personal information about them, provide access, correct inaccurate, incomplete or ambiguous information, or delete it where applicable law provides that right. A person may withdraw consent for future processing, ask how information has been used or disclosed, and submit a complaint.
For information present only in Oxy Finance, users exercise control directly through viewing, correction, export and deletion features. Oxygen DW cannot provide or correct local information it does not possess. Requests to the Privacy Officer may require reasonable identity verification and will be answered within legally prescribed time limits, subject to applicable exceptions.
Legal framework and transfers outside Quebec
This policy was prepared with regard to Quebec’s Act respecting the protection of personal information in the private sector, as modernized by Law 25, and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act. It also addresses Microsoft Store policy disclosures.
Oxygen DW does not transfer locally stored financial data outside Quebec. Before disclosing personal information it holds outside Quebec, Oxygen DW will conduct a privacy impact assessment and implement appropriate contractual safeguards where required. Applicable jurisdiction depends on the user’s location and the nature of the activity.
Children
Oxy Finance is a general financial tool and is not directed to children. A minor should use it and provide personal information only with parental or guardian authorization and supervision where required by law. An adult user remains responsible for information about a minor entered into the application.
Changes and transparency
This policy may change to reflect a new feature, legal obligation or practice. The date appears at the top of the page. Material changes will be brought to users’ attention by reasonable means before taking effect where required. Future versions will not retroactively reduce rights that apply to information already processed.
The commitments reflect the declared operation of Oxy Finance on the stated date. This policy provides information about privacy practices and is not individual legal advice.
Questions, requests and complaints
Email the Privacy Officer at admin@oxygendw.com with “Privacy — Oxy Finance” in the subject line, or write to Oxygen DW, 142 rue Berthiaume, Saint-Jean-sur-Richelieu, Quebec J2Y 1E8, Canada.
A person dissatisfied with the response may contact the Commission d’accès à l’information du Québec or, where it has jurisdiction, the Office of the Privacy Commissioner of Canada.