Privacy Policy

1. Information we collect

• Account information: your email address and password (stored only in hashed form).
• Business profile:province/city, industry, employee count, and annual revenue — used to match you to relevant funding programs and licence checklists.
• Payment information: processed by Stripe. We do not store your full card number; Stripe handles it as our payment processor.
• Referral information: your referral code and, if you refer or are referred, the link between the two accounts.
• Support correspondence: messages you send us.
• Essential technical data:a login/session cookie so you stay signed in, and standard security logs. With your consent we also collect Google Analytics usage data — off by default, see section 9. We do not use advertising or profiling trackers.

2. Why we collect it (purposes)

To provide and operate the service (funding matching, checklists, trackers, business tools); to process your subscription payments; to send you service/transactional emails and, with your consent, occasional product news; to secure the service and prevent fraud; and to meet legal obligations. We collect only what we need for these purposes and do not use your information for unrelated purposes without your consent.

3. Consent

By creating an account and providing your information, you consent to the collection and use described here. For marketing emails we rely on your opt-in, and you can withdraw that consent at any time via the unsubscribe link in any such email or by contacting us. You may withdraw consent to other processing subject to legal or contractual limits (withdrawing may mean we can no longer provide the service).

4. Who we share it with (service providers)

We share personal information only with providers who help us run the service, under contract and only for that purpose:

• Supabase— database and authentication hosting.
• Stripe— payment processing.
• Resend— sending our emails.
• Anthropic / OpenRouter— AI processing used to match and summarize funding programs.

We do not sell your personal information.

5. Where your information is processed (cross-border)

Our primary database is hosted in Canada. However, some of our service providers — including Stripe, Resend, and our AI providers (Anthropic/OpenRouter) — process data on servers in the United States. This means your information may be stored or processed outside Canada and may be subject to the laws of those jurisdictions. We use providers that offer appropriate contractual and security protections.

6. How long we keep it (retention)

We keep your information while your account is active. If you close your account or ask us to delete your data, we delete it from our active systems within 30 days and from backups within 90 days, except where we must retain certain records to meet legal obligations (for example, billing and tax records, which Canadian law generally requires us to keep for approximately six years).

7. Your rights

You may: access the personal information we hold about you; correct it if it is inaccurate; delete it; withdraw consent; and request a copy of your information in a structured, commonly used electronic format (data portability). To exercise any of these, email support@inceptium.ca and we will respond within 30 days.

8. Safeguards

We protect your information with encryption in transit, access controls, and hosting on reputable, secured infrastructure. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.

9. Cookies & analytics

Essential cookies. A first-party session cookie keeps you signed in. It is required for the site to function, does not track you across other websites, and cannot be switched off without breaking sign-in.

Analytics, only if you agree.We use Google Analytics 4 to understand which pages help people find funding — how many visitors a page gets, and which paths lead to a match. It is off by default. Nothing is stored on your device and no analytics cookie is set unless you press “Accept analytics” on the cookie banner. We have configured it with IP anonymisation on and Google advertising signals and ad personalisation off, so your data is not used to build an advertising profile. Google may process this data outside Canada, including in the United States.

Cookieless measurement. We also use Vercel Analytics, which counts page views without cookies and without any cross-site identifier. Because it stores nothing on your device and cannot identify you, it runs for every visitor and is not part of the consent choice.

Changing your mind.Choose “Cookie settings” in the footer of any page to turn analytics on or off at any time. Withdrawing consent is as easy as giving it, and takes effect immediately. Declining costs you nothing — every part of Inceptium works the same either way.

10. Privacy Officer & complaints

Our Privacy Officer is responsible for our compliance with privacy law. Contact: Privacy Officer, support@inceptium.ca.

If you have a concern we cannot resolve, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), and — if you are in Quebec — the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

11. Changes

We may update this policy; material changes will be posted here with a new “last updated” date.

Contact:Inceptra Building Services Inc. (operating as Inceptium) · support@inceptium.ca