Privacy Policy
Effective date: November 5, 2026
First Porter collects as little personal information as it can to license and support DOME and ARCH, keeps it in Canada where it controls the storage, and never collects the contents of your workbooks.
1. Who we are
First Porter is the business name of Luigi Facchini, a sole proprietor at 1384 Terrace Ridge Drive, Carp, Ontario K0A 1L0, Canada (“First Porter”, “we”, “us”). This policy covers the DOME and ARCH Excel add-ins (the “Add-ins”), firstporter.com, and our sales and support.
The person responsible for personal information at First Porter is Luigi Facchini, reachable at support@firstporter.com.
2. What we collect
| Source | What we collect | Why |
|---|---|---|
| Signing in to an Add-in | Your Microsoft organisation (tenant) identifier and your Microsoft user identifier | To check whether you or your organisation holds a valid licence |
| Licence checks | The date and time of each check, and the licence result | To keep your access working, including during the 14-day offline period |
| Using our online services | When an Add-in checks your licence, starts a purchase or downloads cost data, our servers record the address called, the date and time, the result, how long it took, your browser and operating system, and a general location (city or region) worked out from your internet address. The internet address itself is not kept. Licence and purchase records also include the Microsoft identifiers listed above | To keep the services secure and working, and to find and fix faults |
| Buying a subscription | Your name, email address, billing address and business name. We keep only Stripe’s customer and subscription references on our own servers | To create your account, issue invoices and charge the correct tax |
| Payments | Card details are collected and held by Stripe, our payment processor. We see only the card type, the last four digits and the expiry date | To take payment and handle refunds |
| Organisation agreements | Contact names, email addresses and phone numbers of the people we deal with | To manage the agreement and invoices |
| Support requests | What you send us, including any screenshots | To answer your request |
| firstporter.com | firstporter.com does not collect any data unless sent by the user through the contact forms. | To run the website |
3. What we never collect
- The contents of your Excel workbooks, including inputs, results, names or figures in your models. The Add-ins run inside your copy of Excel, and your data stays there.
- Your Microsoft password. Sign-in is handled by Microsoft, which gives the Add-in only the identifiers listed above.
- Your full card number. Stripe holds it, not us.
4. How we use it
We use personal information only to provide and license the Add-ins, bill for them, give support, keep our records as the law requires, and tell you about changes to your subscription or these policies. We do not sell personal information, use it for advertising, or share it for anyone else’s marketing.
5. Who we share it with
We share personal information only with service providers that help us run the Add-ins, and only what each needs:
- Microsoft (Azure hosting and sign-in). Licence data is stored in the Canada Central region (Toronto), with encrypted backup copies in the Canada East region (Quebec City).
- Stripe (payments and invoicing). Stripe may process and store information in the United States and other countries.
- Aplus.net / HostPapa (website hosting).
- Our accountant and the Canada Revenue Agency, for tax records.
We may also disclose information where the law requires it. If information is processed outside Canada, the laws of that country may let its authorities access it.
6. Where it is stored
Licence records are stored in Microsoft Azure’s Canada Central region (Toronto). Encrypted daily backups are kept for 35 days in Microsoft Azure’s Canada East region (Quebec City), so that we can restore service if the Toronto region becomes unavailable. During such an outage, we may temporarily run our services from Canada East. Both regions are in Canada. Payment records are held by Stripe, as described above.
7. How long we keep it
We keep licence and account records while your subscription or agreement is active, and then for six years after the end of the tax year they relate to, as the Canada Revenue Agency requires for business records. Licence-check logs are kept for 12 months. Technical records of requests to our services are kept for no more than 90 days. Support messages are kept for 2 years after the request closes. After that we delete or anonymise the information.
8. How we protect it
We use encrypted connections, store secrets in a secured key vault rather than in program code, limit access to the information to the people who need it, and use Microsoft’s and Stripe’s security controls. No system is perfectly secure; we will tell you and the Privacy Commissioner of Canada if a breach creates a real risk of significant harm to you, as the law requires.
9. Your choices and rights
You can ask to see the personal information we hold about you, have it corrected, or withdraw your consent to its use. Withdrawing consent may mean we can no longer provide the Add-ins. We will answer within 30 days. Write to support@firstporter.com.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or, if you live in Quebec, to the Commission d’accès à l’information du Québec.
10. Organisations and their users
When an organisation licenses the Add-ins for its staff, the organisation decides who may use them. We process staff sign-in identifiers only to confirm that the organisation’s licence covers them.
11. Children
The Add-ins are business software and are not intended for anyone under 18.
12. Changes to this policy
We will post any change here with a new effective date, and email subscribers before a change that affects how we use their information.
13. Contact
First Porter, 1384 Terrace Ridge Drive, Carp, Ontario K0A 1L0, Canada · support@firstporter.com · 613-889-5260