Privacy Policy

Effective date: October 7, 2026
Last updated: October 7, 2026

1. Who we are and what this policy covers

Stocklifter is operated by Exergist Innovations Inc. DBA Stocklifter, located at Suite 747, Salt Spring Island, BC V8K 2W3, Canada (“Stocklifter,” “we,” “us,” or “our”). This policy explains our handling of personal information through our marketing website, enquiries, demonstrations, and direct business communications.

Our privacy practices are governed by applicable Canadian privacy law, including British Columbia’s Personal Information Protection Act (PIPA), and the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies.

Customer organizations may use Stocklifter to manage information about their own contacts, staff, or stakeholders. Their notices and agreements govern their collection and instructions. A customer’s instructions do not remove our own legal responsibilities. Before live customer workspaces are offered, we will provide the applicable service privacy disclosures and data-handling agreement. This website policy is not a substitute for those documents.

2. Information we collect

When you request a demo or contact us, we receive the information you submit, which may include your name, company, role, work email, phone number, company website, exchange or market, areas of interest, and message. We also receive correspondence and information you provide during follow-up discussions.

Like most websites, we also automatically collect basic technical information when you visit, including your IP address, browser and device information, request timestamps, referring pages, and diagnostic logs related to the operation and security of the site. This information is used to deliver the website, keep it secure, troubleshoot problems, and understand general usage of our pages.

Please provide only information needed for your enquiry. Do not put passwords, government identifiers, sensitive financial or health information, confidential board materials, or information about other people into the public demo or marketing form.

3. Why we use information

We use enquiry and correspondence information to respond to requests, arrange and deliver demonstrations, understand your business requirements, discuss a potential engagement, and keep appropriate records of those discussions.

Technical information described in section 2 is used to operate, secure, and troubleshoot the website, and to understand how the site is used at an aggregate level. We may also use information where reasonably necessary and lawfully permitted to protect our systems, investigate misuse, resolve disputes, and meet legal obligations.

We identify relevant purposes when collecting information and limit handling to appropriate purposes permitted by law. A new purpose requiring consent will be explained before we use information for that purpose.

4. Consent and your choices

We obtain consent where required, in a form appropriate to the information and circumstances. Submitting an enquiry permits us to respond to that enquiry; it does not provide blanket permission for unrelated uses.

You may withdraw consent, subject to lawful restrictions and reasonable notice, by contacting our Privacy Officer. We will explain any consequences, such as being unable to continue the requested interaction. Withdrawal does not necessarily require deletion of records we must lawfully retain.

We send promotional electronic messages only with a lawful basis under Canada’s anti-spam legislation. Such messages identify the sender and include a way to unsubscribe. You can unsubscribe without charge, and we will act on the request within the legally required timeframe. Necessary replies to your enquiry and service communications are handled according to applicable law.

5. Cookies, local storage and embedded content

Our website uses cookies and similar browser storage (such as local storage) to make the site work properly. These are used for things like keeping the site functioning, remembering display preferences during a visit, and supporting the public demonstration of the platform. Changes you make within the public demo are saved only temporarily in your own browser and are never stored on our systems or shared with anyone.

We do not use cookies for advertising, and we do not participate in third-party advertising networks. Browser settings can restrict cookies or remove saved browser data, although this may affect functionality. Where consent is needed for any non-essential tracking, we obtain it through an appropriate choice mechanism before that tracking starts.

External links take you to services with their own privacy practices.

6. Service providers and other disclosures

We use a small number of trusted service providers to operate the website, including Supabase for database hosting and data storage, and Resend for email delivery (for example, confirming and responding to demo requests). These providers handle information on our behalf — such as enquiry details and technical logs — for the purposes described in this policy.

Providers handling personal information for us must be subject to appropriate restrictions and protections. Access is limited to what is needed for the relevant work. We remain accountable as required by applicable law.

We do not sell, rent, or trade personal information, and we do not disclose it for advertising purposes.

We may disclose information to professional advisers, or when required or otherwise permitted by law, including in response to valid legal process. Any proposed business transfer involving personal information must follow applicable legal conditions and required notices. These provisions do not authorize unrestricted disclosure.

7. Processing outside British Columbia or Canada

Our service providers, including our database and email providers, process and store information outside of British Columbia and Canada, including in the United States. This means personal information may be accessible to courts, law enforcement, or other authorities under the laws of those jurisdictions.

Where personal information is processed outside Canada, we assess the relevant arrangements and use appropriate contractual and technical protections, as required by applicable law.

8. Retention

We currently retain personal information — including enquiry details, correspondence, and technical logs — for as long as our relationship with you continues and indefinitely afterward for business, legal, and record-keeping purposes, unless you ask us to delete it or applicable law requires otherwise.

If you would like us to delete or correct your information, contact our Privacy Officer as described in section 10, and we will respond as required by applicable law.

Where PIPA requires retention of information used in a decision directly affecting an individual, we preserve it for the required period to allow access.

9. Protection and incidents

We are required to maintain reasonable safeguards appropriate to the information and its sensitivity, and we do so as required by British Columbia’s Personal Information Protection Act (PIPA) and applicable federal law. No website or transmission method can guarantee absolute security.

We assess privacy incidents and take the containment, remediation, recordkeeping, reporting, and notification steps required by the applicable Canadian law, including mandatory breach reporting and notification obligations under PIPEDA where they apply.

10. Access, correction and complaints

Contact our Privacy Officer to request access to personal information under our control, request correction, ask about our practices, or make a complaint. We may reasonably verify identity and authority before responding. We respond within applicable statutory time limits and explain lawful extensions, restrictions, or any permitted fee in advance.

For information a customer organization manages through Stocklifter, contact that organization first. We will assist or route the request where appropriate without ignoring our own legal obligations.

If a concern remains unresolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia at https://www.oipc.bc.ca, or the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca where the federal law applies. You are not required to waive your right to contact a regulator.

11. Changes

We will update the date when this policy changes and provide additional notice or seek consent where required. A policy update does not retroactively authorize a new use of previously collected information.

12. Contact

Privacy Officer
Exergist Innovations Inc. DBA Stocklifter
Contact: contact page
Suite 747, Salt Spring Island, BC V8K 2W3, Canada