Who we are
MarketMate (“Service”) is operated by MHinnovations (“we”, “us”, “our”) from Toronto, Ontario. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in connection with the Service.
What we collect
We collect the categories below. The summary cards highlight common themes; the detailed list that follows is controlling.
Identity & account
Sign-in identifiers, profile details from your identity provider, and account-related data processed by our authentication layer.
Shop, usage & technical data
Catalog content you add, optional analytics, hosting logs, and technical data typical of web services (e.g. IP, device type).
- Account and authentication. If you sign in (for example with Google OAuth), we receive identifiers and profile information from your identity provider (such as name, email address, and profile image) as processed by our authentication layer (e.g. NextAuth-compatible session handling).
- Shop and catalog data. Content you add to the Service, such as shop names, slugs, taglines, themes, categories, item titles, descriptions, prices, images, and links to third-party listings (including Facebook Marketplace URLs), is stored in our database.
- Billing. If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store full payment card numbers on our servers; Stripe processes payment data according to its own terms and privacy policy.
- Hosting and files. Images or files you upload may be stored with our hosting or object storage provider (for example Vercel Blob) so they can be served to visitors.
- Usage and analytics. We may collect first-party analytics related to public storefronts (for example page views or link clicks) to provide features such as seller-facing analytics.
- Technical data. Like most web services, our servers and infrastructure providers may process IP addresses, device/browser type, and similar technical data in logs for security and reliability.
- Communications. If you contact us (for example by email) or subscribe to a mailing list where offered, we process the information you provide for that purpose.
Why we use personal information
We use personal information to:
- Provide, operate, maintain, and improve the Service;
- Authenticate users and protect accounts;
- Process subscriptions and billing where applicable;
- Display public storefronts and related content to visitors as you configure;
- Provide optional features such as analytics or email notifications where enabled;
- Comply with law, enforce our terms, and protect rights and safety.
Legal bases (Canada)
Depending on the circumstances, we rely on appropriate lawful bases under Canadian privacy law (including the federal Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable), such as consent, performance of a contract with you, legitimate interests that are not overridden by your rights, and legal obligation.
Service providers and cross-border processing
We use subprocessors to host and operate the Service (for example cloud hosting, database providers such as Neon or similar PostgreSQL services, Stripe for payments, and email delivery if configured). Those providers may process or store information in Canada, the United States, or other countries where they operate. When personal information is transferred across borders, we take steps appropriate to the sensitivity of the information and applicable law (details may be further described in agreements or supplementary disclosures after legal review).
Retention
We retain personal information for as long as reasonably necessary to provide the Service, comply with law, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and your relationship with us.
Security practices
How we protect information
We rely on reputable infrastructure providers and limit access to personal information to what is needed to operate the Service. Technical data in server logs helps us detect abuse and maintain reliability. No method of transmission or storage is completely secure; we follow reasonable safeguards appropriate to the nature of the data we process.
Your choices and rights
Subject to applicable law, you may have the right to request access to, or correction of, your personal information, or to withdraw consent where processing is consent-based (subject to legal or contractual restrictions). You may also have additional rights depending on your province or territory.
To exercise applicable rights or ask questions, contact us at hello@getmarketmate.com. We may need to verify your request.
Third-party platforms (including Meta / Facebook)
The Service may link to or display content related to third-party platforms (for example Facebook Marketplace). Those platforms have their own privacy practices. We do not control Meta/Facebook and encourage you to review their policies. See also our Terms of Service for important disclaimers.
Children
The Service is not directed to children under the age required by applicable law for independent consent. If you believe we have collected personal information from a child in error, contact us and we will take appropriate steps.
Changes
We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date. Material changes may require additional notice under applicable law.
Contact privacy
Contact
MHinnovations
Toronto, Ontario
Email: hello@getmarketmate.com
Governing framework
This policy is intended to align with Canadian privacy expectations, including PIPEDA where it applies, and may be supplemented by province-specific requirements (for example in Alberta, British Columbia, or Quebec) depending on how and where we operate. MHinnovations should confirm applicability with counsel.
Region: Province of Ontario, Canada.