Privacy Policy

Last updated: June 4, 2026 · PIPEDA compliant

What we collect

Account info: email, name, password hash, role(s), authentication provider IDs.
Listing info: business details you publish, including photos and confidential docs you upload behind NDA.
Activity: saved listings, NDAs you've signed, contact-seller events, lender match requests.
Technical: IP address, browser type, pages viewed (for security, analytics, and rate limiting).
Consent records: CASL marketing opt-ins with timestamp, IP, and user agent.

How we use it

Operate the marketplace (show your listings, route inquiries, match lenders).
Send transactional emails (account, NDA receipts, deal stage updates).
Send marketing emails only with your explicit opt-in (CASL).
Detect fraud, spam, and abuse.
Comply with legal obligations (court orders, lawful requests).

Who we share it with

We do not sell personal information. We share it only with: (a) the buyer or seller you choose to contact through the platform, (b) lenders you ask us to match you with, (c) service providers acting on our behalf (hosting, email delivery, analytics) under confidentiality obligations, and (d) law enforcement when legally required.

Where data is stored

Personal information is stored on Canadian and U.S. cloud infrastructure (Supabase, AWS, Cloudflare). Some processors may be located outside Canada; by using the site you consent to this transfer.

Your rights under PIPEDA

You have the right to (a) access the personal information we hold about you, (b) ask us to correct inaccurate information, (c) withdraw consent for non-essential processing such as marketing emails, and (d) request deletion of your account. Email privacy@bizlistings.ca to exercise any of these rights.

Retention

We keep account and listing data for as long as your account is active, plus a reasonable period afterwards for legal, audit, and fraud-prevention purposes. Marketing-consent records are kept for at least 3 years per CASL.

Security

Passwords are hashed; database access is restricted by row-level security policies; traffic is served over TLS. No system is perfectly secure — please report any concern to trust@bizlistings.ca.

Children

BizListings is not directed at children under 18 and we do not knowingly collect data from them.

Changes

We'll update the "Last updated" date when this policy changes materially. Significant changes will be emailed to active account holders.

Complaints

If you believe we've mishandled your information you can file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.