Privacy

What this policy covers

This policy covers information shared through the MESTRE marketing website and through direct early-access inquiries. MESTRE is operated from Ontario, Canada and handles personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

What is collected

An access request collects only what you type into the form: your name, work email, company, role, tender type, tender availability, and the optional description of what slows your tender review. The page the request came from is recorded alongside it.

To limit automated abuse, a one-way salted hash of the network address the request came from is stored, together with your browser’s user-agent string. The network address itself is never stored, and the hash cannot be reversed to identify you.

No files are uploaded through this website, and no tender documents are collected here.

Why it is collected

The information is used to understand your request, decide whether limited supervised early access is a fit, and contact you about MESTRE. It is not used for anything else, and it is not sold.

Submitting a request lets us reply to it. You will not be added to a marketing list without being asked first, and any message of that kind includes a way to unsubscribe.

Where it is stored and who processes it

Requests are stored in a Supabase database hosted in Canada (ca‑central‑1). Notification email is delivered by Resend, which processes the message in the United States. Both act as service providers: they hold or deliver the request on our behalf and do not use it for their own purposes.

Because the notification passes through Resend, information in an access request is processed outside Canada and may be accessible to United States authorities under the laws of that country.

How it is protected

Requests are submitted over an encrypted connection and written by a server-side function. The database has row-level security enabled with no public policies, so the keys used by the website cannot read, change, or delete stored requests. Access is restricted to the MESTRE owner.

How long it is kept

An access request is kept while your inquiry is open and, if you take part in early access, for as long as that relationship continues. Requests that do not proceed are removed once they are no longer needed. You can ask for deletion at any time.

Analytics and cookies

MESTRE does not use advertising trackers or session recording. If analytics are added, this policy will be updated to describe what is collected and why.

Your rights

Under PIPEDA you may ask what personal information is held about you, ask for a copy of it, ask for a correction, withdraw consent to its use, or ask for it to be deleted. Send the request to vansh@getmestre.ca and it will be answered within 30 days.

Tender documents during limited supervised early access

Do not upload confidential tender documents through this marketing website. Before any non-public tender package is reviewed, document handling, privacy expectations, and the evaluation process are agreed separately with the contractor.

Privacy officer and complaints

Vansh Sundan is accountable for privacy at MESTRE and can be reached at vansh@getmestre.ca, or by mail on request, in Ontario, Canada.

A complaint about how information has been handled will be acknowledged and investigated, and the outcome explained in writing. If you are not satisfied with the response, you may bring the complaint to the Office of the Privacy Commissioner of Canada at priv.gc.ca.