What we store, where, and why.

Without an account

Your answers to the 3 questions, your shortlist, your pipeline, your notes and your raise figures are stored only in your browser, on your device (local storage). They never reach our servers. Clearing your browser data erases them.

With an account

Signing in takes 1 email address and a 6 digit code sent to it; there is no password. From then on we store 2 things: your email address, and your workspace (the same data listed above), so it can follow you to another device. We keep them as long as your account exists.

The code is sent through Resend (email delivery) and your workspace is stored in Airtable (database) on Fractal’s account. Both providers process the data on our behalf, on servers that may be located outside Canada, in particular in the United States. We chose them for the reliability of the service and we hold them to their published security commitments.

The founders list

If you subscribe to the weekly founders list on the home page, we store your email address to send it, and only for that. Every message carries an unsubscribe link, and unsubscribing deletes the address from the list. This follows Canada’s anti-spam law (CASL): you opt in, you can opt out at any time.

What we do not do

No advertising trackers, no third party analytics scripts, no cookies for measurement. We read the server logs of our host (Netlify) to keep the site healthy; those logs hold IP addresses for a short time and are not joined to your account. We never sell, rent or share your data, and we never show your raise to an investor.

Your rights

You can ask to see, correct or delete everything we hold about you, and you can withdraw your consent, by writing to hello@cfofractal.ca. Deleting your account erases your email and your workspace from our systems within 30 days. If you think we have handled your data badly, you can also complain to the Commission d’accès à l’information du Québec or to the Office of the Privacy Commissioner of Canada.

Who is responsible

The person responsible for the protection of personal information at Fractal is its managing partner, reachable at hello@cfofractal.ca. This policy follows Quebec’s Act respecting the protection of personal information in the private sector (Law 25) and Canada’s PIPEDA.

Security and changes

Sessions are signed tokens that expire; codes work once and for 10 minutes; the site is served over HTTPS only. If a breach ever touched your data, we would tell you and the authorities as the law requires. This policy can change with the app; the date at the top is the one that applies.