CapXio — Privacy Policy
This Policy explains how 1290110 B.C. Ltd., operating as CapXio, collects, uses, discloses and protects personal information.
CapXio operates a business-financing marketplace serving British Columbia and Ontario. We handle personal information under applicable Canadian privacy laws, including British Columbia’s Personal Information Protection Act and the federal Personal Information Protection and Electronic Documents Act where applicable.
1. Information we collect
Account and profile information
We collect information needed to create and operate your account, such as your name, email address, phone number, business details and role as a Borrower or Broker.
Sign-in is passwordless. We send one-time codes by email and process the authentication records associated with them; we do not ask you to create a CapXio password. We ask for a mobile number at sign-up; we do not send text messages to it (see Section 3 for when it is shared).
Broker profiles may include brokerage information, professional qualifications, regions served, financing specializations and other information supplied by the Broker.
Listings and connections
Borrower listings may include the business’s financing need, requested amount, product type, province, industry, timing and description. A Borrower’s profile also holds a years-in-business band and, optionally, a revenue band and a self-reported credit-score band. These are bands, never exact figures, and a Broker sees them only after a connection.
We also maintain records of matching, connections, notifications, listing changes, and decline or block actions.
Do not include unnecessary personal information, credentials, payment-card details or sensitive documents in listing descriptions.
Verification information
Where professional verification is offered, we use the licence number a Broker provides only to perform the stated check against the public regulatory registry. We do not keep the licence number after the check, and we do not collect licence documents. We retain the verification outcome and its dates.
Communications, consent and service records
We collect information you provide when contacting support, reporting a concern or making a privacy request.
We maintain relevant consent and preference records, including the wording or version presented, your selection, the time and the method used.
We also process technical and security records associated with operating the service: hosting request logs, authentication logs, operational and error records, and sign-in rate-limit records that are keyed by a one-way hash of your email address, phone number or network address rather than the values themselves.
Billing information
When paid services are offered, we process the account, subscription, invoice and payment-status information needed to administer them.
Where payment details are entered directly with a payment provider, that provider processes them under its own privacy terms. The payment interface identifies the provider and the information requested.
2. How we use information
We use information to:
- Create, authenticate and administer accounts.
- Publish listings, identify relevant matches and enable connections.
- Perform the verification checks described by the platform.
- Deliver requested services, account notices and support.
- Administer paid access where applicable.
- Record consent and respect communication preferences.
- Detect misuse, investigate incidents and protect users.
- Meet legal obligations and resolve disputes.
We do not require consent to unrelated optional uses as a condition of receiving the core service.
3. What other users can see
Before a connection, CapXio withholds the Borrower’s specified identity and contact fields. A listing’s other details may nevertheless identify the business indirectly.
When a Broker connects with a listing, we disclose the Borrower’s business name, contact name, email address and mobile number to that Broker and notify the Borrower. This disclosure enables discussion of the financing request. This is the only use we make of a Borrower’s mobile number beyond account security.
We explain this disclosure when a Borrower publishes a listing. Brokers must use the information only for the relevant request and related dealings authorized by the Borrower.
Broker profile information is displayed to relevant marketplace users as described by the platform.
Closing a connection or account may stop further access through CapXio. It cannot remove information another user has already viewed, copied or retained.
4. Service providers and other disclosures
We use providers for services such as application hosting, database storage, email delivery, messaging, security and payment processing where applicable.
We provide information needed for those services and use contractual and other safeguards appropriate to the relationship. Some providers may process information outside Canada, where it may be subject to the laws and lawful access requirements of another jurisdiction.
The location of our primary database does not mean every provider or processing activity is located in Canada. Contact our Privacy Officer for information about our service-provider and cross-border processing practices.
We may also disclose information when legally required, to investigate misuse or protect rights and safety, or in connection with a business transaction subject to appropriate confidentiality and legal safeguards.
We do not sell personal information or disclose it for unrelated third-party advertising.
5. Retention and account closure
We retain information only for as long as reasonably needed for the purposes described in this Policy, subject to applicable legal requirements.
| Record category | Retention criteria |
|---|---|
| Account and profile information | Needed to operate the account, complete closure requests and resolve outstanding obligations or disputes. |
| Listings | Needed to operate and manage the listing, related connections and any applicable support, safety or legal matter. |
| Connection and activity records | Needed to administer the service, investigate misuse, resolve disputes and meet recordkeeping obligations. |
| Consent and communication preferences | Needed to demonstrate applicable permissions and respect withdrawals or suppression requests. |
| Verification records | The verification outcome and its dates only; the licence number is not retained after the check. |
| Billing records, where applicable | Needed for accounting, tax, transaction disputes and other applicable recordkeeping obligations. |
| Security and support records | Needed for investigation, service protection, support and related legal obligations. |
Closing an account does not necessarily erase every associated record immediately. We may restrict access to retained information and keep only what remains necessary.
When information is no longer needed, we delete it or de-identify it. Backup copies may remain until the applicable backup cycle completes; their availability is restricted.
You may contact us to request deletion or an explanation of what information remains, why it is retained and the applicable retention criteria.
6. Communications and preferences
We use contact information for authentication, security, requested services and account administration.
Optional promotional messages are separate from messages needed to operate your account. Where consent is required, we obtain it before sending promotional messages.
You can withdraw optional marketing consent through the unsubscribe mechanism provided or by contacting us. Withdrawing marketing consent does not itself close your account.
Available notification controls are shown in the platform. We do not send text messages. If we ever offer them, their consent and opt-out instructions will be presented with that service.
We maintain records needed to respect your preferences and comply with applicable anti-spam requirements.
7. Your privacy choices and rights
Subject to applicable law, you may:
- Request access to personal information we hold about you.
- Ask us to correct inaccurate information.
- Request deletion or withdraw consent.
- Ask questions or complain about our privacy practices.
Some information is necessary to provide the service. If you withdraw consent to that processing, we will explain any effect on your account. Legal or other permitted retention requirements may limit immediate deletion.
We may verify your identity before acting on a request. We will explain an applicable refusal or limitation and respond within the period required by law.
You may also contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada, as applicable.
8. Security
We use administrative and technical safeguards appropriate to the sensitivity of the information, including access restrictions, secure transmission and controls for investigating sensitive account activity.
No system can guarantee complete security. Keep your authentication channels secure, do not share sign-in codes, and report suspected unauthorized access to support@capxio.com.
9. Cookies and similar technologies
We use only the cookies needed to operate the service, maintain your session and support security. We do not use analytics or advertising cookies or tracking scripts on CapXio.
If we introduce optional analytics or advertising technologies, we will describe their purposes and provide choices or obtain consent where required.
10. Age eligibility
CapXio is intended for adults acting in a business capacity. It is not intended for anyone under the age of majority where they live.
If you believe a minor has provided personal information to us, contact our Privacy Officer.
11. Contact and changes
Privacy Officer 1290110 B.C. Ltd., operating as CapXio Email: legal@capxio.com
For account and service assistance, contact support@capxio.com.
We may update this Policy as our practices change. We will publish the updated version and effective date and provide notice of material changes as appropriate. Where a new use or disclosure requires additional consent, we will obtain it.