Privacy policy

E-mail

info@futello.ca

What this policy covers

This policy applies to the Futello site (www.futello.ca), operated by Alexandre Folgueras, and describes every processing of personal data as it actually exists in the service. It does not cover the issuer sites Futello links to: each applies its own policy.

Questionnaire and personalized results

Your questionnaire answers (monthly spending by category, goal, preferences, cards held, province) are kept in your browsing session, as a cookie encrypted and signed by the server. They are tied to no account and no identity.

When an analysis runs, the scenario and its result are stored to produce the result page, reachable through a tokenized link, and are deleted automatically after 24 hours. If you choose to share a result, a copy of the result is kept behind a share link for 30 days by default, 90 days at most; you can revoke that link at any time.

Card guide “Which card should I use?”

If you choose “Create my card guide” on a strategy result or on a profile page, Futello keeps, without an account, the recommendations of that strategy (card to use by category, exceptions, dates) and, when built from a personalized strategy, the evaluated scenario (spending by category, preferences, cards held, province), so the guide can be recalculated when newer data is published. The guide is reachable through two private links: a personal link, remembered on your device by an encrypted cookie and included in the recap e-mail, and a view-only link, printed in the QR code of the documents. The tokens in these links are masked in application request logs. Images and PDFs contain no spending amount and no card number.

It is deleted automatically 12 months after its last update, or immediately with “Delete”. If you ask for the list by e-mail, your address is kept with the guide so “Send again” can work; the e-mail is sent by Zedmail, a Canadian delivery provider hosted in Quebec, and does not sign you up to any list. To assess the feature, Futello counts anonymous events in its own database (view, document created, e-mail requested), with no IP address, no browser identifier and no amount; Google Analytics is not loaded on these pages.

Temporary point balances and trip goals

“My points” keeps the balances you declare for each program, their confirmation date, an optional expiration and a note. The held benefits you declare (type, program, name, quantity, remaining uses, described cap, combination, transferability and expiry) are kept the same way and for the same period as balances, with no value assigned. If you choose to save a trip goal, its cities, dates, travellers, budget, optional preferences (airports, cabin, accommodation, bags and flexibility) and manual quotes are stored separately. Optional earnings forecasts entered in the goal include the held card’s name (without its number), already planned spending, estimated quantities, dates and your confirmations. This data is encrypted on the server; the browser session cookie contains only random access codes, not balances or quotes.

If you record an operation already completed with a program, the last 100 confirmed movements are kept with the wallet: programs, quantities, dates, note and balances before/after. This history can be exported separately. Removing one balance does not remove those movements; clearing the wallet also removes its history. A simulation creates no movement.

Access expires no later than 30 days after the wallet’s last modification or the goal’s last save, and may disappear earlier. Reading the data does not extend retention. Encrypted envelopes may remain until temporary storage is cleaned up; they no longer allow access after expiration. You can delete balances or a goal from their pages and export files to keep a copy.

Loading a balance file shows a review before you confirm; it does not immediately replace your balances. Loading a goal fills the form without saving it. Files are used to prepare these entries and are not kept as documents in your wallet. A simulation never debits declared points. Temporary use requires no account, bank access or program password. These tool pages and their entries are not sent to the assistant or audience measurement. The “Check price and availability” button goes through a redirect that passes on no data from your goal and stores only a daily count of clicks per destination, with nothing that identifies you. To measure how the Points and Travel tools are used, Futello only counts, in its own database, daily totals per tool and language (for example the number of completed calculations), with no balance, goal, destination, IP address, browser identifier or any other personal data; these totals are deleted after 400 days.

Optional Points account, when enabled

You can request an email sign-in link to keep declared balances and a travel goal in an optional account. The link is valid for 15 minutes after the request and requires confirmation on the page that opens. It creates no alert subscription or marketing consent. Zedmail, our Canadian e-mail delivery provider, processes the email address to deliver this message.

The email and link code are kept in an encrypted envelope until confirmation or cleanup of expired links. A protected email fingerprint lets you retrieve the same account. Sign-in limits use protected email and IP address fingerprints, without keeping raw addresses in these counters. Expired links and counters are cleaned up hourly.

Balances and the goal are encrypted on the server and kept in the account until deleted. Signing in does not automatically copy temporary data; a preview and your confirmation are required. Export, correct or delete data from their pages. An account keeps one goal, without a history of financial results.

Each browser sign-in has an independent code in its encrypted session cookie, with a 30-day server expiry. You can sign out or revoke other sessions. Deleting browser cookies does not delete account data; a new sign-in link can retrieve it. Deleting the account removes its active service data and access. Technical backups follow their own retention period, without a promise of immediate physical erasure. Private pages load neither audience measurement nor the assistant.

From an account, you can share a frozen, read-only copy of your travel goal or a summary of your wallet. It is created after a preview and your confirmation, contains no email, notes or quote links, and includes point quantities only if you tick that option. The link expires after the period you choose (30 days at most) and can be revoked at any time; the copy is encrypted, only a fingerprint of the link is kept, and views are counted without an IP address. Shares are deleted with the account.

Statement import

If you import a statement (PDF or CSV) to prefill your spending, the file is analyzed when submitted. Only the spending summary by category is kept in your session while you complete the questionnaire; the original file is neither stored nor sent to a third party.

Province and spending level

Futello remembers in your session the province you selected in the province selector. When the network infrastructure routing your request passes an approximate province code (geolocation headers), that code may preselect a province before you choose; it is only used to filter eligible cards and you can correct it at any time. Futello does not record your IP address for this processing.

E-mail offer alerts

When you subscribe to alerts you provide an e-mail address, a language and your alert preferences (card or offer followed, alert type, lead time). The subscription is active only after e-mail confirmation (double opt-in); the date of your consent is recorded. Every e-mail contains an immediate unsubscribe link. E-mails are sent through Zedmail, a Canadian delivery provider (Ozonagram Ltd) whose servers are in Quebec, which processes your address for delivery.

When offered, Points alerts follow the published changes to a rewards program’s rules (expiry, redemptions, transfers, promotions, declared benefits) with the same safeguards — an e-mail address, a language and the program followed, consent confirmed by e-mail, an unsubscribe link in every e-mail — without any balance, goal or personal date being asked for or kept, and an ended subscription (unsubscribed, inactive or never confirmed) is deleted 30 days after it ended.

Assistant

The conversational assistant is optional. When you use it, your message and the context of the page you are viewing (for example the strategy or card shown) are sent to the provider Google (Gemini model on Vertex AI, processed in the Montréal region) to produce the reply. The conversation is kept only in your browser tab, for the duration of your visit. No banking data, no statement and no e-mail address are transmitted through this channel.

Audience measurement

In production, Futello uses Google Analytics 4 to measure traffic (pages viewed, referrer, device). This service sets its own cookies and is governed by Google’s policy. No questionnaire data is sent to this tool.

Hosting and technical logs

Futello is 100% Canadian: the site, its database and the strategy calculations are hosted by OVHcloud in its Beauharnois data centre, in Quebec, and the assistant uses a model processed in the Montréal region (see Assistant). E-mails (alerts, sign-in links, recaps) are sent through Zedmail, a Canadian delivery provider with no US parent, also hosted in Quebec by OVHcloud; once delivered, an e-mail is kept by your own mailbox provider. Like any web server, the server produces technical logs (IP address, requested page, timestamp) kept briefly for the operation and security of the service. Public forms (alerts, statement import) are protected by a per-IP request limit.

Cookies

Futello uses one encrypted, signed session cookie for the questionnaire and the remembered province and spending level, encrypted cookies that remember access to temporary balances and the trip goal for up to 30 days without an account, one encrypted cookie that remembers your card guide’s link for 12 months if you keep one, plus Google Analytics cookies in production. Futello sets no advertising cookie.

Your choices

• Deleting your browser cookies clears the questionnaire and the remembered preferences.
• A personalized result disappears by itself after 24 hours; a share link can be revoked before it expires.
• A card guide can be deleted in one click from its page; otherwise it disappears 12 months after its last update.
• Any alert can be unsubscribed in one click from the e-mail received.

Your rights and the person in charge

In Quebec, the Act respecting the protection of personal information in the private sector (Law 25) and, elsewhere in Canada, PIPEDA give you the right to access the personal information Futello holds about you, to have it corrected and to withdraw your consent. The data kept depends on the features you use, including alerts, the card guide and the temporary tools described above. The person in charge of personal information is Alexandre Folgueras, operator of Futello; they can be reached at the contact address published on the Contact page and answer within 30 days. If you are not satisfied with the answer, you may file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

Changes

The last review date appears at the top of this page. A significant change to data handling will be reflected here before it takes effect.

Frequently asked questions

Does Futello access my bank accounts?

No. There is no connection to any financial institution. Spending comes from what you enter or from a statement you choose to import, analyzed on the spot.

Do I need an account?

No. The questionnaire lives in your browsing session and personalized results are reachable through a temporary link. When enabled, the optional Points account keeps declared balances and a travel goal.