Privacy policy
Last updated 5 November 2026. Draft, pending legal review.
Who this is from
Sitefact is a product of Orca Jones, a sole proprietorship based in Vancouver, British Columbia. In this policy “we” means that business. This policy covers the Sitefact website. Sitefact does not yet process client project data; when it does, a separate product privacy notice and data processing agreement will apply.
We are subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia’s Personal Information Protection Act (PIPA) and Canada’s Anti-Spam Legislation (CASL). Because the form accepts enquiries from Australia and the UK, we also aim to meet the Australian Privacy Principles and the UK GDPR for those visitors.
What we collect
When you fill in the design-partner form
- Your name, work email, firm, role, market, roughly how many loans you monitor, and anything you write in the message box.
- Your consent to be emailed, the exact wording you agreed to (“Email me about Sitefact. Nothing else, and I can unsubscribe any time.”) and when you agreed.
- A one-way hash of your IP address (not the address itself), your browser’s user agent, the page that referred you, and any campaign tags in the link you followed. These help us block abuse and see which outreach is useful.
When you browse
We use Vercel Web Analytics and Speed Insights, which are cookieless and do not identify you. We do not use advertising trackers. Your market choice (Canada, Australia or UK) is kept in your browser’s local storage and the page address, never sent to us as a cookie.
Why we use it
- To reply to you and talk about whether Sitefact fits your work.
- To email you about Sitefact, only if you ticked the consent box.
- To protect the form from spam and abuse.
We do not sell your information or use it for anything else.
Who processes it for us
- Vercel (hosting and cookieless analytics)
- Supabase (database for form submissions)
- Resend (sending email)
- Cloudflare (Turnstile spam check)
- Upstash (rate limiting, using the IP hash only)
- Our AI provider, once the product processes documents. The website form is not sent to it.
Some of these providers store data outside Canada, including in the United States. Information held abroad may be accessible to authorities in that country.
How long we keep it
Form submissions are kept for 24 months, then deleted unless we have an ongoing working relationship with you.
Your choices
You can unsubscribe from any email we send. You can ask to see, correct or delete what we hold about you by emailing hello@sitefact.ca. We will reply within 30 days. If you are unhappy with our answer you can complain to the Office of the Privacy Commissioner of Canada, the BC Information and Privacy Commissioner, the Office of the Australian Information Commissioner or the UK Information Commissioner’s Office, as applies to you.
Changes
If this policy changes in a way that matters, we will update the date at the top and say what changed.