Signal NorthProcurement IntelligenceAboutContactJoin the network

Signal North — Privacy Policy

Effective date: [TO BE SET AT LAUNCH] Last updated: [TO BE SET AT LAUNCH]

This is a first-pass draft prepared for legal review. It is not final and must not be published or relied upon until reviewed and approved by qualified counsel, in particular for PIPEDA compliance and any cross-border data transfer disclosures. Bracketed items mark facts that must be confirmed before publication.

1. Who this policy covers

This Privacy Policy explains how Signal North ("we," "us," "our"), operated by [LEGAL ENTITY NAME, PENDING REGISTRATION], collects, uses, and protects personal information in connection with the Signal North website and subscription service (the "Service"). We are committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

2. The commitment that shapes everything below

Signal North's corpus — the body of information we analyze and report on — is built exclusively from public records: tender portals, published budgets, council and board agendas, government estimates, and programme guidelines. We do not collect, request, or use any information about what you are bidding on, your business strategy, your clients, or your interactions with any procurement process. Nothing you tell us and nothing you do within the Service influences what we cover or how we present it to any subscriber. This is what allows competitors to hold the same subscription without compromising either of them, and it means the personal information described below is limited to what is needed to run your account and communicate with you — never to your business activity.

3. Information we collect

Information you provide directly:

  • Name, email address, and organization, when you create an account or contact us;
  • Billing information, processed directly by our payment processor, Stripe — we do not store your full payment card details ourselves;
  • Preferences you set within the Service, such as saved items or watchlist entries you choose to track.

Information collected automatically:

  • Basic usage and log data (such as pages visited and general access times) for security and service-reliability purposes;
  • [Cookie/analytics disclosure — TO BE CONFIRMED against what is actually deployed on the site before publication. If no analytics/tracking cookies are used, this section should say so explicitly rather than describe a generic practice.]

What we do not collect: information about your bids, proposals, clients, competitors, or business strategy; any information about your use of the Service that would let another subscriber, vendor, or third party infer what you are working on.

4. How we use your information

We use the personal information described above only to:

  • Create and administer your account and subscription;
  • Process payment through Stripe;
  • Send you the weekly brief and other service communications you have subscribed to;
  • Respond to your inquiries and provide support;
  • Maintain the security and integrity of the Service;
  • Comply with legal obligations.

We do not sell your personal information. We do not use it to influence what appears in the Signal North corpus or brief.

5. Who we share information with

We share personal information only with the service providers who help us operate the Service, and only to the extent needed for that purpose:

  • Stripe, for payment processing;
  • [Email service provider, e.g. Resend], for sending account and brief emails;
  • [Database/hosting providers, e.g. Supabase, Vercel], for account storage and hosting.

[Counsel to confirm: whether any of these providers store or process data outside Canada, and whether a cross-border transfer disclosure is required under PIPEDA.]

We do not share your personal information with any other subscriber, with vendors, or with any party for marketing purposes.

6. Email communications and CASL compliance

Every commercial email we send includes our identification and a clear, functioning unsubscribe mechanism, as required by CASL. You may unsubscribe from marketing and brief emails at any time; we may still send you essential account or billing communications related to an active subscription.

7. Data retention

We retain your account information for as long as your subscription is active and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. [Specific retention period to be confirmed.] You may request deletion of your account as described in Section 8.

8. Your rights

Under PIPEDA, you have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Withdraw consent for optional uses of your information, subject to legal or contractual restrictions;
  • Request deletion of your account and associated personal information, subject to our legitimate retention needs described in Section 7.

To exercise these rights, contact us at [PRIVACY CONTACT EMAIL, TO BE CONFIRMED].

9. Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. No system is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

The Service is intended for business and professional use and is not directed at individuals under the age of majority. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will provide notice of material changes by email or through the Service before they take effect.

12. Contact

Questions about this Privacy Policy, or requests to exercise your rights under Section 8, can be sent to [PRIVACY CONTACT EMAIL, TO BE CONFIRMED].