Privacy Policy

Last Updated: January 20, 2026

(Version v1.1.0)

1. Privacy Officer

We have appointed a Privacy Officer responsible for ensuring compliance with this Privacy Policy.

Address: 595, Brousseau Street, Beloeil (Québec), J3G 1Y2 Canada
Phone: +1 (514) 844-4488
Email: rprp@referenceti.com

Any comments, questions, or complaints relating to this Privacy Policy and the Company’s privacy practices may be directed to our Privacy Officer using the contact information above.

2. Introduction

RÉFÉRENCE B2B ("we," "us," "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

As a Quebec-based company, we comply with Quebec’s Act respecting the protection of personal information in the private sector (Bill 25, formerly Bill 64) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

3. Information We Collect

3.1 Information You Provide

Account Information: Name, email address, company name, phone number
Business Information: Industry, company size, technology requirements
Profile Information: Professional details, service capabilities (for Suppliers)
Billing Contact Information: Company legal name, billing address, tax registration numbers (GST/QST/NEQ), preferred payment method, and billing contact details. This information is required to process subscriptions and commission invoices.
Communication Data: Messages, requests, and correspondence through the Platform

3.2 Automatically Collected Information

Usage Data: Pages viewed, features used, time spent on Platform
Device Information: IP address, browser type, operating system
Cookies and Tracking: Session cookies, analytics cookies

3.3 Third-Party Information

We may receive information about you from third-party sources such as CRM systems, analytics providers, or publicly available business directories.

4. Consent

4.1 Obtaining Consent

We obtain your express consent before collecting, using, or disclosing your personal information. This consent is obtained at the time of registration through your explicit acceptance of this policy and the Terms of Use.

4.2 Withdrawal of Consent

You may withdraw your consent at any time by contacting us at rprp@referenceti.com. Withdrawal of consent may result in the inability to use some or all of the Services. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Platform and Services
Match Customers with suitable Suppliers using AI-powered analysis
Process your requests and facilitate communications
Send administrative notifications and service updates
Analyze usage patterns and improve user experience
Prevent fraud, abuse, and security incidents
Comply with legal obligations and enforce our Terms of Use
Conduct business consulting and advisory services

6. AI Processing and Human Review

Important Notice: At the time of collection of your information, we inform you that it may be processed by artificial intelligence systems.

Your information may be processed by artificial intelligence systems to:

Analyze technology requirements and extract structured data
Match Customers with Suppliers based on capabilities and needs
Generate recommendations and business insights

Human Oversight Guarantee: All AI-generated outputs are reviewed by our human management team before being shared with Customers or Suppliers. We do not use any automated decision-making that produces legal or significant effects concerning you, in accordance with Section 12.1 of Bill 25.

7. Information Sharing and Disclosure

7.1 With Your Consent

We share your information with Suppliers when you submit a match request, and with Customers when you are presented as a potential match.

7.2 Service Providers

We share information with trusted third-party service providers:

Supabase: Authentication and database hosting (hosted on AWS Canada Central)
Vercel: Platform hosting and workflow automation
Stripe: Payment processing for subscriptions and commission invoices. Stripe receives billing contact information, payment card details (processed directly by Stripe, not stored on our servers), transaction history, and tax identification numbers for tax calculation purposes. Stripe may also receive your email address for billing notifications and receipts.
Resend: Transactional email delivery including billing notifications, payment confirmations, invoice delivery, and payment failure alerts
Open AI: AI processing for matching and analysis
Zoho CRM: Lead management and business operations
Cloudflare: Security and CAPTCHA services

7.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the continued application of equivalent protection measures.

8. Data Retention

We retain your personal information only for the duration necessary to fulfill the purposes for which it was collected, or as required by law, according to the following periods:

Account information: For the duration of your active account, plus 3 years after account closure
Transaction and billing data: 7 years after the transaction, in accordance with tax requirements
Communications and requests: 3 years after the last interaction
Usage data and logs: 2 years
Matching data: 5 years after the last active match

You may request deletion of your account and personal information by contacting us at rprp@referenceti.com. Deletion will be carried out subject to legal retention obligations.

9. Your Privacy Rights

9.1 Quebec Residents (Bill 25)

If you are a Quebec resident, you have the right to:

Access your personal information
Rectify inaccurate or incomplete information
Request deletion of your information (subject to legal obligations)
Object to certain uses of your information
Receive a copy of your information in a structured, commonly used technological format (portability)
Request de-indexation of your personal information from search engines or other search tools, where the dissemination contravenes the law or a court order
Lodge a complaint with the Commission d’accès à l’information du Québec (CAI)

9.2 Canadian Residents (PIPEDA)

All Canadian residents have the right to:

Know what personal information we hold about you
Challenge the accuracy and completeness of your information
Withdraw consent for certain uses (subject to legal restrictions)
File a complaint with the Office of the Privacy Commissioner of Canada

9.3 Response Time

We will respond to your requests within 30 days of receipt. This period may be extended by an additional 30 days if necessary, in which case we will inform you.

10. Data Security

We implement industry-standard security measures to protect your information, including:

Encryption in transit (HTTPS/TLS)
Encryption at rest for sensitive data
Access controls and authentication
Regular security audits and monitoring
Employee training on data protection

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

11. Privacy Incidents

In the event of a privacy incident presenting a risk of serious harm, we commit to:

Notify the Commission d’accès à l’information du Québec (CAI) with diligence
Inform you of the incident if it presents a risk of serious harm to you
Take reasonable measures to reduce the risk of harm and prevent new incidents of the same nature from occurring
Maintain a register of privacy incidents, in accordance with Bill 25

12. International Data Transfers

Canadian Data Residency Commitment: Your personal information is primarily stored in Canada. We use Supabase hosted on AWS Canada Central for authentication and database storage, ensuring that your data remains on Canadian territory.

Commitment to NOT Export to the United States: We are committed to doing our very best NOT to export your personal information to the United States. Our core data infrastructure is hosted in Canada.

Limited Transfers: Some of our service providers may process your information outside Canada in limited circumstances. These transfers are limited to the strict minimum necessary for service delivery.

Protective Measures: In accordance with Section 17 of Bill 25, before any transfer outside Quebec, we have conducted a Privacy Impact Assessment (PIA) and we ensure that:

Appropriate contractual agreements are in place with our providers, including personal information protection clauses equivalent to those provided by Quebec law
The level of protection offered in the destination country is adequate or that additional safeguards are in place
The information transferred is limited to what is necessary for the provision of services

13. Children’s Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

14. Cookies and Tracking Technologies

We use cookies and similar technologies for:

Authentication and session management
Security and fraud prevention (Cloudflare Turnstile)
Analytics and performance monitoring
Remembering your preferences

You can control cookies through your browser settings, but disabling certain cookies may limit Platform functionality.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Platform at least 30 days before they take effect. The updated policy will be effective as of the date indicated.

16. Contact Us

For privacy-related questions, concerns, or to exercise your privacy rights, contact us at:

RÉFÉRENCE B2B
Privacy Officer
Address: 595, Brousseau Street, Beloeil (Québec), J3G 1Y2 Canada
Phone: +1 (514) 844-4488
Email: rprp@referenceti.com

Regulatory Authorities

Quebec: Commission d’accès à l’information du Québec (CAI)
Website: www.cai.gouv.qc.ca

Canada: Office of the Privacy Commissioner of Canada
Website: www.priv.gc.ca