Privacy
Confidentiality is the product. This page explains how we treat data.
Last updated: August 31, 2026
1. What we collect, and why
We collect what the product needs to run: your account email and name, the business details and financials owners provide, the documents owners upload, buyer profiles and the attestations buyers make about identity and financing, messages between buyers and owners, and usage records, including a log of who viewed or downloaded what. We use this to build listings and valuations, to gate access to confidential material, and to keep a record of who agreed to what.
2. Where your data lives
Your data is hosted with Supabase in ca-central-1, the Montréal region, so it stays in Canada. Documents sit in private storage and move only through short-lived signed links, generated after an access check. The application runs on Vercel, with its functions pinned near Canada.
3. AI processing you control
Document analysis and document drafting use Anthropic, an AI provider that processes data in the United States. This runs under a consent you give at your first upload and can turn off at any time in Account settings. Documents go to the provider as you uploaded them, without your name or contact details attached. Drafting works from a pseudonymized summary of your figures and answers, with your business's names, website, and address removed. With the consent off, you enter figures and write your documents yourself.
4. Who sees what
Buyers see anonymous teasers. Your identity and your documents are shared only after you approve a buyer's request and the buyer accepts the NDA. Every document view and download is logged in an append-only audit trail.
5. The companies that process data for us
Supabase stores the database and files in Canada. Vercel hosts the application; it is a US company, with functions pinned near Canada. Anthropic provides AI processing in the United States, under the consent described above. Resend delivers our email from the United States. Sentry, in the United States, receives error reports. Plausible, in the EU, provides privacy-respecting analytics. Analytics runs only on public marketing and listing-browse pages, never inside the signed-in product, and uses no cookies and no cross-site tracking.
6. How long we keep data
We keep your data while your account is active. When you delete your account, your personal data and documents are permanently removed 30 days later. The NDA and fee-terms acceptance records (the legal name, the IP address and the browser identifier captured at acceptance) and the pseudonymous audit trail are kept as evidence of the agreements entered. A draft listing untouched for 12 months gets a reminder, then is removed 30 days later. A declined access request keeps only a minimal record. Breach records are kept for at least 24 months.
7. Your rights
You can export your data as a zip file from Account settings, delete your account yourself, and correct your information at any time. Deleting your account removes your conversations for both parties. We work under PIPEDA and Québec's Law 25. If you believe we have mishandled your data, you can complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d'accès à l'information.
8. Email
Marketing email is a separate opt-in at signup, never pre-checked, and you can unsubscribe at any time. Transactional email, the messages the product must send to work, comes from no-reply@loonmarket.ca.
9. If something goes wrong
Every incident is recorded and assessed for a real risk of significant harm. When that test is met, we notify the Office of the Privacy Commissioner of Canada and the people affected.
10. The privacy officer
The privacy officer is Christopher Taylor, Hugh Bird Inc. Reach him at privacy@loonmarket.ca with any question or complaint about your data.
11. Changes to this page
Each version of this page is dated, and past versions are kept. When a change is material, you are asked to renew your consent before you continue using the platform.