Privacy Policy

This policy explains how Propulse28 collects, uses, and protects personal information submitted through this website, including the discovery-call form and Stripe checkout for Launch Roadmaps. It applies to the domain propulse28.ca and the associated bilingual pages.

Propulse28 is the controller of the personal information collected on this website. For any question related to your personal information, write to info@propulse28.ca.

We only collect information you provide directly, plus minimal technical data:

• Discovery-call form: name, email, project description, preferred day/slot, selected mandate, interface language.
• Payment: email address transmitted to Stripe at checkout, plus the Stripe session identifier. Card details are entered directly on Stripe and never reach our servers.
• Technical data: an irreversible hash of your IP address and your browser user-agent, kept solely to enforce anti-abuse limits on the discovery-call form.

• Respond to your discovery-call request and prepare the meeting.
• Process the payment of the Launch Roadmap you order and issue a confirmation.
• Deliver the purchased Launch Roadmap by email.
• Send the transactional emails strictly related to your request (acknowledgement, confirmation, delivery).
• Prevent abuse, fraud, and duplicate submissions on the discovery-call form.
• Comply with our accounting and tax obligations.

We process this information to answer your explicit request (discovery call or purchase), to perform the contract of sale of a Launch Roadmap, and to meet our legal obligations (accounting, taxes, consumer protection). No processing relies on behavioural advertising or profiling.

We share the minimum information required with a limited set of processors:

• Stripe: payment processing, receipts, and payment records.
• Transactional email provider used through Lovable: delivery of acknowledgement, confirmation, and delivery emails from the domain notify.propulse28.ca.
• Hosting and backend platform (Lovable Cloud / Supabase): storage of discovery-call requests and order records.

These providers may host or process data outside Canada. They are contractually required to protect your information and to use it only for the purposes stated above.

The site does not use advertising cookies, third-party analytics, or behavioural tracking. Only technical mechanisms strictly required to operate the site are used: a local preference stored in your browser for the language switch (EN/FR) and the elements required by Stripe to secure your payment on its own pages.

• Discovery-call requests: kept for the time required to respond to you and to answer any follow-up related to your project.
• Order records (email, Stripe session, dossier, amount): kept for the duration required by our accounting and tax obligations.
• IP hash and user-agent for anti-abuse: retained only for the short window required to enforce rate limits.
• Transactional email logs: retained for a limited period for operational and audit purposes.

Data are transmitted over HTTPS. Access to stored data is restricted through database-level access rules and is limited to Propulse28 for the operations described in this policy. Card details are handled exclusively by Stripe, on its own infrastructure.

Under applicable Québec and Canadian law, you may request access to, correction of, or deletion of your personal information, subject to our legal obligations (accounting and tax records in particular). To exercise your rights, write to info@propulse28.ca. We answer within a reasonable time.

The site targets entrepreneurs and business owners. It is not aimed at children and does not knowingly collect information from minors.

We may update this policy to reflect changes in our processing operations or in applicable law. The current version, along with its effective date, is always published on this page.

This policy is governed by the laws applicable in Québec, Canada. Any dispute related to personal information is subject to the courts of the judicial district competent for Propulse28.