Privacy policy

1. Who we are

Inveni is a Canadian business directory platform. We provide services to listed businesses and operate the website.

Primary frameworks: PIPEDA (Canada) and Quebec’s Law 25. We also design with possible future US (e.g. CCPA/CPRA) and EU (GDPR) visitors in mind.

2. Person in charge of the protection of personal information (Quebec Law 25)

Under Quebec’s Act respecting the protection of personal information in the private sector, we publish the title and contact details of the person in charge of the protection of personal information:

Carl Poisson — Person in charge of the protection of personal information.

Email: info@inveni.ca (recommended subject: “Privacy”). Phone: 450 375-1084. Organization: Inveni.

You may contact them with questions about your personal information, to exercise your rights (access, correction, deletion, etc.), or to report an incident.

3. Information we collect

Depending on how you use Inveni, we may process:

• Business accounts: email, password (via Supabase Auth), name, locale, plan and billing data (via Stripe).
• Public listings: information you publish (name, address, hours, photos, services, etc.).
• Leads / messages: name, email, optional phone and message from a listing contact form — shared with the listing owner.
• First-party analytics: listing views and interactions with a derived (hashed) session id that does not store raw IP or user-agent.
• Geolocation: only if you use “Near me”; coordinates are used for search and may appear in the URL.
• Maps: if you allow maps, the browser may load Mapbox tiles (third party).
• Advertising / remarketing (when enabled): navigation events and identifiers sent to Meta (Pixel) and/or Google Ads to measure campaigns and show ads.
• Limited technical logs (security, rate limiting) — not for marketing.

4. Purposes

We use this information to provide and secure the service; display listings and search; enable visitor–business contact; analyse listing usage (anonymised measurement required for the service); bill subscriptions; measure and optimise advertising campaigns (Meta, Google Ads); respond to requests; and meet legal obligations.

5. Consent and technologies

Needed for the service: sign-in session, UI language, remembering your preferences, and anonymised measurement of listing views/interactions (derived session id). This lets listed businesses — especially on paid plans — see listing statistics, which are part of the Inveni service.

Optional — interactive maps: maps on some pages (a third-party map provider may be used). You can decline or enable them via the banner or “Privacy settings” in the footer.

Advertising (Meta Pixel, Google Ads): used to measure acquisition campaigns. A dedicated choice in the consent banner is planned; until then, these tools may load when configured. You may contact us (section 2) to object.

6. Processors / vendors

We use providers including Supabase (auth, database, storage), Stripe (payments), Resend (transactional email), OpenAI (search embeddings, server-side), Mapbox (maps / geocoding), Meta Platforms (advertising Pixel), Google (Google Ads / gtag), and Vercel (hosting). Some may process data outside Quebec/Canada under contractual and technical safeguards where applicable.

7. Retention

Accounts and listings are kept while the account is active. Leads are kept for the listing owner to manage requests. Hashed/aggregated analytics are kept for product statistics. You may request access or deletion of your personal information from the person named in section 2.

8. Your rights

Depending on your situation (including Quebec and Canada), you may request access, correction, deletion, withdrawal of consent for optional purposes, or file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

To exercise your rights, contact Carl Poisson (info@inveni.ca, 450 375-1084). We aim to respond within a reasonable time (typically 30 days).

9. Security

We apply reasonable measures (HTTPS, access control, hashed analytics sessions, input validation). No system is perfectly secure; report incidents to info@inveni.ca.

10. Children

The service is aimed at businesses and the general adult public. We do not knowingly target children under 14.

11. Changes

We may update this policy. The date at the top will change. For material changes we may show a notice or re-prompt for optional technology consent.