Privacy Policy.

1. Introduction

Sellvara ("we", "us"), operated by [LEGAL ENTITY NAME], is committed to protecting your personal information. This policy explains what we collect, why, how we use and store it, and your rights. It applies to sellers, buyers, and advisors who use the Platform.

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

[VERIFY AGAINST REAL PRACTICE] We may collect:

• Account information: name, email, phone, business affiliation, role (seller, buyer, advisor)
• Listing information: business financials, seller discretionary earnings, operational details
• Confidential information exchanged under an NDA
• Security and operational data: sessions, approval decisions, and processing errors
• Communications: messages sent through the Platform

We also retain uploaded files, access decisions, service requests, saved searches, report snapshots, and payment references.

3. Why We Collect It

We collect personal information to: create and manage accounts; operate listings and the NDA gate; connect sellers, buyers, and advisors; process payments; communicate with you; improve the Platform; and meet legal obligations.

4. Consent

[LAWYER TO REVIEW] We collect, use, and disclose personal information with your consent, which you give when you create an account and use the Platform. You may withdraw consent subject to legal and contractual limits, though this may prevent us from providing the service. Marketing emails are sent only with appropriate consent and include an unsubscribe option, consistent with CASL.

Consent capture at signup and CASL-compliant unsubscribe handling must be reflected in your actual signup flow and email system.

5. How We Store and Protect It

Accounts and marketplace records are stored in the application database. Uploaded files are stored separately and downloads are checked against current access permissions. The deployment operator chooses the hosting locations and storage protections.

6. Who We Share It With

[VERIFY AGAINST REAL PRACTICE] We may share personal information with:

• Other users, as required to operate listings and connections (for example, a seller sees an approved buyer's identity)
• Service providers who help us operate the Platform (for example, hosting, payment processing)
• Financing or legal referral partners, only with your direction or consent
• Authorities, where required by law

We do not sell your personal information. [Confirm this statement is true, including in relation to any future data licensing revenue stream.]

Your mapped data licensing revenue stream could conflict with a "we do not sell" statement. Flag this for counsel now so the policy and the business model stay consistent.

7. International Transfers

[VERIFY AGAINST REAL PRACTICE] Written estimate inputs and benchmark snapshots are sent through OpenRouter to the configured model provider for report generation. Checkout is handled by Stripe, and transactional email uses the configured email provider. These providers may process information outside Canada; verify the accounts, regions, and terms used in the deployed service.

8. Retention

[LAWYER TO REVIEW] We keep personal information only as long as needed for the purposes described or as required by law. [Define retention periods.]

9. Your Rights

Under PIPEDA you may: access the personal information we hold about you; request correction of inaccurate information; and withdraw consent subject to limits. To make a request, contact us at [CONTACT EMAIL]. We will respond within the timeframe required by law.

10. Cookies and Tracking

[VERIFY AGAINST REAL PRACTICE] A necessary session cookie keeps you signed in. A browser preference stores your cookie choice. This application does not currently load analytics or advertising trackers.

11. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect information from them.

12. Changes to This Policy

We may update this policy. Material changes will be posted with a revised "Last updated" date.

13. Contact

For privacy questions or requests, contact [PRIVACY CONTACT / PRIVACY OFFICER] at [CONTACT EMAIL]. [PIPEDA expects a designated individual accountable for privacy. Name one.]