Privacy Policy

Our Commitment

Micro Prêts Québec ("we," "us," or "our") operates the website located at app.micropretsquebec.com (the "Website"). We are a technology platform that connects individuals seeking financial products with third-party lenders and financial service providers. We are a matching service — we are not a lender, broker, or financial advisor.

This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our Website and services. We are committed to safeguarding your privacy and handling your personal information with transparency and care.

Summary

We collect information you provide directly (such as your name, email, phone number, and financial details) as well as technical information collected automatically (such as your IP address and browser type). We use this information to match you with potential lenders, communicate with you, improve our services, and comply with legal obligations. We share your information with lenders as part of our core matching service, and with technology providers that help us operate. We do not sell your personal information. You have the right to access, correct, and delete your personal information at any time.

Agreement to This Policy

By accessing or using our Website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

Our services are intended for residents of Canada who are at least 18 years of age. By using our services, you represent and warrant that you meet these eligibility requirements.

Personal Information We Collect

We may collect the following categories of personal information:

Information you provide directly:

• Contact information: name, email address, phone number, mailing address
• Financial information: income, employment details, loan amount requested, debt information
• Personal details: date of birth, residential status
• Communication preferences and correspondence with us

Information collected automatically:

• Technical data: IP address, browser type and version, operating system, device type
• Usage data: pages visited, time spent on pages, referring URLs
• Location data: approximate geographic location derived from your IP address

How We Collect Your Information

We collect your information through the following methods:

• Direct submission: When you complete forms on our Website to request lender matching
• Support requests: When you contact us through our support or contact form, we collect your name, email address, and the contents of your message so that we can respond to your request
• Cookies and similar technologies: We use cookies, local storage, and web beacons to remember your preferences and understand how you use our services
• Analytics services: We use Google Analytics and Facebook Pixel to analyze website usage patterns
• Email tracking: We track email delivery, opens, and clicks through our email service provider (Brevo) to ensure our communications reach you and to improve their relevance
• Third-party verification: We use email verification services (NeverBounce) to ensure the accuracy of email addresses provided

How We Use Your Information

We use your personal information for the following purposes:

• Service delivery: To match you with potential lenders based on your financial profile and preferences
• Communications: To send you service-related messages, including lender match notifications, confirmation emails, and account updates
• Support: To receive, review, and respond to questions or requests you submit through our support or contact form
• Marketing communications: To send promotional messages about our services, subject to your consent and In accordance with Canada's Anti-Spam Legislation (CASL), we obtain your express consent before sending commercial electronic messages. You may provide express consent through our double opt-in confirmation process. You may withdraw your consent at any time by clicking the unsubscribe link included in every email or by contacting us directly. We do not send marketing emails without valid consent.
• Service improvement: To analyze usage patterns, troubleshoot issues, and improve our Website and services
• Fraud prevention: To detect and prevent fraudulent activity, unauthorized access, and other security threats
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Analytics and conversion measurement: To understand how visitors progress through our forms, identify where the experience can be improved, and measure successful lender matches. This may involve associating your activity with a persistent internal identifier across sessions and devices.

Sharing Your Personal Information

We share your personal information in the following circumstances:

• Lender matching: As our core service, we share your information with third-party lenders and financial service providers to facilitate loan matching. This is the primary purpose of our platform. We do not reveal the identity of specific lenders until a match has been made.
• Technology providers: We use the following service providers to operate our platform:
  • Brevo — email delivery, marketing communications, and contact management
  • Supabase — database hosting and authentication
  • Vercel — website hosting and content delivery
  • NeverBounce — email address verification
  • Google Analytics — website and funnel usage analytics, including measurement of your progress through our forms and the outcome of your request. We may share a persistent internal identifier and event data with Google to measure your activity consistently across sessions and devices. We do not share your name, email address, phone number, or the financial details you enter into our forms with Google.
  • Facebook Pixel — advertising measurement and optimization
  • Voluum — performance tracking
  • OpenAI — AI-assisted translation of tenant-authored form strings and email template content, and, where enabled, AI-assisted drafting of replies to your support messages. When we draft a support reply with AI, the text of your support message is processed by OpenAI (a US-based processor) to help our team compose a response. We do not send your name, email address, or phone number as separate data fields; however, your message is transmitted as you wrote it and may contain personal information you chose to include. This data is not used to train OpenAI's models and is retained by OpenAI for up to 30 days for abuse monitoring, then deleted. Where this feature is enabled, a data-processing agreement governs this handling.
• Conversion and attribution partners: Each tenant may configure additional server-to-server postback destinations that receive a limited set of attribution tokens (such as email, phone, locale, country/region, click identifier, UTM parameters) when you create an account or when a lender accepts your application. Typical destinations include performance-marketing networks such as Voluum, Everflow, CAKE, Binom, and similar platforms. A current list of destinations configured for the tenant you interacted with is available on request (see "Your Rights and Choices" below). Data sent to these destinations may be processed outside Quebec, including in the United States and the European Union, in jurisdictions whose privacy-protection frameworks may differ from Quebec's. By submitting the form you consent to this transfer.
• Support handling: Messages you send through our support or contact form are received and handled centrally by our support team. We use this information only to respond to your request. Where AI-assisted drafting is enabled, the text of your support message may be processed by OpenAI to help our team compose a reply, as described under "Technology providers" above; a member of our team reviews every reply before it is sent.
• Professional advisors: We may share information with legal, accounting, and other professional advisors as needed
• Legal requirements: We may disclose information when required by law, regulation, legal process, or governmental request
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

We do not sell your personal information. We only share your information as described above for the purpose of providing and improving our services.

Data Retention and Deletion

In accordance with Quebec's Law 25, we retain your personal information for a maximum of 12 months from the date of your last interaction with our services, unless a longer retention period is required by law or you have provided express consent for continued marketing communications. After this period, your data is automatically deleted from our systems. Draft form data that is not submitted is deleted after 24 hours. You may request deletion of your personal information at any time by contacting us.

Postback dispatch logs. We maintain an internal audit log of server-to-server postbacks (including the rendered URL, which may contain the attribution tokens listed under "Conversion and attribution partners"). These audit rows are automatically deleted after 90 days.

Cookies and Tracking Technologies

Our Website uses the following technologies:

• Essential cookies: Required for basic website functionality, including session management and security
• Preference cookies: Remember your choices such as language preference and form progress
• Analytics cookies: Google Analytics helps us understand how visitors use our Website. Where you are signed in to your account, or have submitted a request through our forms, we may associate your activity with a persistent identifier so that we can measure your experience consistently across sessions and devices. This identifier is a randomly generated internal reference — it is not your name, email, or phone number.
• Advertising cookies: Facebook Pixel and Voluum help us measure the effectiveness of our advertising campaigns

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling cookies may limit your ability to use certain features of our Website.

Children

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a person under 18, we will take steps to delete that information promptly.

Links to Other Websites

Our Website may contain links to third-party websites, including those of lenders and financial service providers. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption of data in transit, access controls, and regular security assessments. Our database provider (Supabase) implements row-level security to ensure data isolation.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access and correction: You may request access to your personal information and ask us to correct any inaccuracies
• Deletion: You may permanently delete your account and all associated data yourself from your account settings, or request deletion through our contact form
• Marketing opt-out: You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by adjusting your preferences in your account settings
• Cookie controls: You may manage cookies through your browser settings

Deleting your account. Signed-in users can permanently erase their account, every loan match and request, and their login directly from Account Settings → Delete my account. This is immediate and cannot be undone. For legal compliance we retain only a minimal email-consent record (consent timestamps with personal information removed); your email engagement history is permanently deleted.

Your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), and Canada's Anti-Spam Legislation (CASL). These laws govern how we collect, use, disclose, and retain your personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to request deletion of your personal information, please contact us at:

Micro Prêts Québec
Lévis, QC, Canada

You can also reach us through our contact form.