1. Privacy officer and contact
HorizonL is a project planning and tracking platform available at horizonl.ca. You may contact the person responsible for personal information protection at support@horizonl.ca, addressed to the 'Privacy Officer'.
Use this address or the website contact page for access, correction, consent withdrawal or complaint requests. Additional business contact details for the operator are available through the same point of contact.
2. Information we collect
Depending on the features used, we process the information you provide and technical data necessary to provide and protect the service.
- Account details: name, email address, organization, technical identifiers, preferences, invitations and permissions.
- Project data: descriptions, business plans, financial assumptions, funding requests, credit files, schedules and collaborator contact details.
- Documents: uploaded files, metadata, excerpts, summaries and information derived for project analysis.
- Service use: security and error logs, IP address, connection data, and AI usage and cost metrics.
- Affiliates: name, email, organization, professional profile, audience description and referral code when applicable.
3. Why we use information
We use this information to create accounts, enforce project access, organize documents, generate forecasts, produce requested content and research, support funding preparation, provide assistance, secure the platform and prevent misuse.
If marketing communications are offered, we follow applicable consent rules. Registration does not automatically authorize all marketing uses.
4. Artificial intelligence
Some features send information required to fulfil a request to an AI provider, including OpenAI. This may include project descriptions, financial data, text excerpts or documents. Do not submit other people's personal information unless authorized.
HorizonL configures its Responses API requests not to store the response object at the provider ('store: false'). This does not necessarily disable abuse-monitoring logs, caching, or retention required for particular tools and services.
AI outputs require verification. HorizonL does not make lending or funding decisions on behalf of a financial institution.
5. Hosting and service providers
HorizonL uses Supabase for its database, authentication and files, Vercel to host its application, and an AI provider for selected operations. The Supabase database is configured in a Canadian region; some Vercel functions operate in the United States, and other providers may process data outside Québec.
Applicable law may require a privacy impact assessment and appropriate contractual safeguards before information is transferred outside Québec. Contact us for more information about the processing of your data.
A payment provider such as Stripe may be used if paid subscriptions become available. Relevant payment disclosures will be provided before collection.
6. Sharing and project permissions
Only authorized project members may access files and information according to their roles. Technical providers may process information as needed to operate the service, subject to applicable safeguards.
HorizonL does not sell personal information to advertisers. Information may be disclosed when required by law or when otherwise authorized for security and service delivery.
7. Cookies and referrals
Essential sign-in and functionality cookies may be used. With your consent, a referral code may be stored in a cookie for up to 30 days; you can decline without losing access to public pages.
If additional analytics, advertising or profiling technologies are introduced, we will provide the information and choices required by law.
8. Retention and deletion
Information is kept as long as needed for the stated purposes and legal obligations. Retention periods differ for accounts, projects, documents, technical logs and backups.
You may request deletion of information or account closure. Identity verification and an assessment of shared projects, legal obligations and backups may be necessary. Removing an item from the interface may not erase all backup copies immediately.
Subscription-end arrangements are explained separately. This policy does not promise a fixed period for the deletion of all copies.
9. Security and incidents
HorizonL uses account authentication, project-based permissions, data access restrictions and private file storage, among other measures. Access is restricted to authorized people.
No technical system is risk-free. In the event of a privacy incident, HorizonL must assess the risks, document the event and provide any notices required by law.
10. Your rights
Subject to applicable law, you may request access, correction, withdrawal of certain consents, and in defined circumstances, the disclosure of your information in a structured technical format. You may also submit a complaint.
Write to support@horizonl.ca and avoid sending unnecessary sensitive documents. We may verify your identity. You may also contact Québec's Commission d'accès à l'information.
11. Third-party information
Users uploading information about their clients, partners, employees or other people are responsible for having the necessary authorizations and complying with their confidentiality duties.
12. Policy changes
This policy may change to reflect new services, practices or legal requirements. Where required, material changes will be communicated to affected users.