Data & privacy
Canadian residency, PIPEDA purposes, and requests (RR-084).
Where your data lives
Supabase project region: ca-central-1. Borrower plan links use opaque tokens — no names or balances in URLs.
Purposes
Renewal outreach, consent ledger, compliance records, supervision, and billing. We collect only fields needed for those purposes.
Full notice: Public privacy page. DPA: privacy@loopsuit.ai.
Bulk export: Data & export.
Sub-processors & observability
Email/SMS and billing providers only receive data needed to deliver your configured integrations. Sentry and PostHog load in the browser only when NEXT_PUBLIC_SENTRY_DSN or NEXT_PUBLIC_POSTHOG_KEY is set (RR-083).
Breach & complaints
Report a suspected breach to privacy@loopsuit.ai. We will assist your brokerage with PIPEDA breach documentation.