Prospector Exchange — Privacy Policy

In plain language

This summary is for convenience only. It is not a substitute for the full Policy below, which governs.

• We collect what we need to run the marketplace — your account details, profile and listings, payment info (via Stripe), and usage data.
• We don't sell your personal information.
• We share it only with providers who help us operate — Stripe (payments), Supabase (database), and Vercel (hosting) — some of which store data in the U.S.
• You're in control. You can access, correct, or delete your information, and unsubscribe from marketing at any time.
• We follow Canadian privacy law — PIPEDA, and Quebec's Law 25 where it applies.
• Questions? Contact our Privacy Officer (Section 13).

This Privacy Policy explains how Longpoint Energy Group Inc. ("Prospector Exchange," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the Prospector Exchange platform at app.prospectorexchange.ca (the "Platform").

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, Quebec's Law 25 and other applicable Canadian privacy laws.

By using the Platform, you consent to the practices described in this Policy. If you do not agree, please do not use the Platform.

1. What we mean by "personal information"

"Personal information" means information about an identifiable individual. It does not include business contact information used solely to communicate with you in relation to your employment or profession, or information that has been anonymized so it can no longer identify you.

2. What we collect

We collect only the personal information we need to operate the Platform. This includes:

• Account information — name, email address, company name, job title, phone number, and login credentials.
• Profile and listing information — details you add to your profile or listings, and any documents or materials you upload.
• Contact-reveal information — the email address (and any details) you provide to unlock Seller contact information or restricted documents.
• Payment information — billing details and transaction records. Card payments are processed by Stripe; we do not store your full card number.
• Communications — messages, inquiries, and support requests you send through or to the Platform.
• Technical and usage data — IP address, device and browser type, pages viewed, actions taken, and similar analytics data, collected automatically through cookies and similar technologies (see Section 8).

We do not intentionally collect sensitive information (such as health or biometric data), and you should not submit it.

3. How we collect it

• Directly from you — when you register, complete your profile, create listings, make payments, unlock contact details, or contact us.
• Automatically — through cookies, analytics, and server logs as you use the Platform.
• From third parties — such as our payment processor (confirmation of payment) and, in limited cases, service providers that help us operate and secure the Platform.

4. Why we collect and use it

We use personal information to:

• create and manage your account and authenticate you;
• operate the marketplace — publish listings, enable contact between Buyers and Sellers, and provide the two-tier document and NDA features;
• process payments, fees, and volume/streak-based pricing;
• provide customer support and respond to your inquiries;
• send service and transactional messages (for example, account, security, and listing notices);
• send marketing or promotional messages where you have consented, and in compliance with Canada's Anti-Spam Legislation (CASL) — you can unsubscribe at any time;
• maintain, secure, troubleshoot, and improve the Platform, including analytics;
• detect, prevent, and address fraud, abuse, security issues, and violations of our Terms; and
• comply with legal obligations and enforce our agreements.

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances.

5. Consent

• We collect, use, and disclose personal information with your consent, which may be express (for example, when you opt in to marketing) or implied (for example, when you provide information to complete a transaction you requested).
• For sensitive information or purposes that would not be reasonably expected, we seek express consent.
• You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us (see Section 13). Withdrawing consent may mean we can no longer provide some or all of the Platform to you.

6. When we share personal information

We do not sell your personal information. We share it only as described here:

• With other users — when you unlock a Seller's contact details, or when you list a property, the relevant contact and listing information is shared with other users so they can transact with you. Information shared between users is governed by the users involved and any applicable NDA, not solely by us.
• With service providers — companies that help us run the Platform, under contracts requiring them to protect your information and use it only for the services they provide to us. These include:
  • Stripe — payment processing;
  • Supabase — database and authentication;
  • Vercel — application hosting;
  • mapping and analytics providers that support Platform functionality.
• For legal reasons — where required to comply with law, a subpoena, court order, or lawful request, or to protect our rights, users, or the public, or to detect and prevent fraud or security issues.
• In a business transfer — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

7. Where your information is stored (cross-border transfers)

Some of our service providers (including Stripe, Supabase, and Vercel) may store or process personal information outside Canada, including in the United States. When information is stored in another country, it may be accessible to that country's courts, law enforcement, and regulatory authorities under that country's laws.

We take reasonable steps to ensure our service providers protect your information to a comparable standard. By using the Platform, you acknowledge that your information may be transferred to and processed outside your province and Canada. If you have questions about our cross-border handling, contact our Privacy Officer (Section 13).

8. Cookies and similar technologies

• We use cookies and similar technologies to keep you logged in, remember preferences, secure the Platform, and understand how it is used.
• Some cookies are essential for the Platform to function; others support analytics and performance.
• You can control cookies through your browser settings, and where required we will ask for your consent to non-essential cookies. Disabling some cookies may affect functionality.

9. How long we keep it

We keep personal information only as long as needed for the purposes described in this Policy, or as required by law (for example, tax and financial records). When it is no longer needed, we securely delete or anonymize it. Some information may remain in backups for a limited period or where retention is legally required.

10. How we protect it

• We use reasonable administrative, technical, and physical safeguards — including access controls, encryption in transit, and row-level security in our database — to protect personal information against loss, theft, and unauthorized access, use, or disclosure.
• No system is completely secure. While we work to protect your information, we cannot guarantee absolute security.
• If a privacy breach occurs that poses a real risk of significant harm, we will notify affected individuals and the relevant regulator(s) as required by law.

11. Your privacy rights

Subject to applicable law, you may:

• Access the personal information we hold about you and ask how it has been used and disclosed;
• Correct information that is inaccurate or incomplete;
• Withdraw consent to certain uses (see Section 5);
• Unsubscribe from marketing communications at any time;
• Request deletion of your information, subject to our legal and operational retention needs; and
• Data portability (Quebec) — if Law 25 applies to you, request that computerized personal information you provided to us be communicated to you or, where technically feasible, to another organization, in a structured, commonly used technological format.

To exercise these rights, contact our Privacy Officer (Section 13). We will respond within the timeframes required by law and may need to verify your identity first. If we cannot fulfill a request, we will explain why.

12. Quebec (Law 25) specifics

If you are in Quebec or Law 25 otherwise applies:

• We have designated a person responsible for the protection of personal information (our Privacy Officer — see Section 13).
• We seek express consent for sensitive personal information and provide the disclosures Law 25 requires, including about automated processing and cross-border transfers.
• You have the rights described in Section 11, including access, correction, de-indexing where applicable, and data portability.

13. Contact us / Privacy Officer

For any privacy question, request, or complaint, contact our Privacy Officer:

Privacy Officer — Longpoint Energy Group Inc. Attn: Privacy Officer 4 Quartz Place, Conception Bay South, NL A1W 4N6 Email: privacyofficer@longpointenergygroup.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).

14. Children

The Platform is a B2B service and is not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe we have, contact us and we will delete it.

15. Third-party links

The Platform may link to third-party websites and services. We are not responsible for their privacy practices. Please review their privacy policies before providing information.

16. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice. Your continued use of the Platform after changes take effect means you accept the updated Policy.

This Privacy Policy is provided as a starting-point template and does not constitute legal advice. It should be reviewed by a qualified Canadian privacy lawyer and updated to match your actual data practices and service providers before publication.