Last updated: April 17, 2026
Vesti Funding Inc. ("Vesti Funding", "we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access and use the Vesti Funding web application and related services (the "Platform"). This policy applies to all users, including grant advisors, accountants, financial advisors, business consultants, and their clients whose data may be processed through the Platform.
1. Information We Collect
We collect information in the following categories:
1.1 Account Information
When you register for an account, we collect:
- Full name and professional title
- Email address and phone number
- Business or organization name and address
- Billing information, including credit card details (processed securely by our third-party payment processor)
- Professional designation or role (e.g., accountant, financial advisor)
1.2 Platform Usage Data
When you use the Platform, we automatically collect:
- Device information (browser type, operating system, screen resolution, and device identifiers)
- IP address, approximate geographic location, and timezone
- Pages visited, features used, buttons clicked, and time spent on the Platform
- Search queries entered within the grant matching and discovery tools
- Error logs and performance data to diagnose technical issues
1.3 Client and Business Data
You may upload, enter, or manage client information, grant application details, financial documents, and business records through the Platform. This data is stored and processed solely to provide you with the services. Vesti Funding does not access, review, or use your client data for any purpose other than delivering and improving the Platform, unless required by law.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, and maintain the Platform, including grant matching, client management, and application tracking features
- To process your subscription payments and manage your billing account
- To send transactional communications such as account confirmations, invoices, security alerts, and grant deadline notifications
- To provide customer support and respond to your inquiries
- To analyze usage patterns and improve the Platform's performance, reliability, and user experience
- To detect, prevent, and address security incidents, fraud, and technical issues
- To comply with applicable Canadian federal and provincial laws, regulations, and legal processes
- To send optional marketing communications about new features, updates, and promotions (you may opt out at any time)
3. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:
- Service Providers: We share data with trusted third-party vendors who assist in operating the Platform, including cloud hosting providers, payment processors, email delivery services, and analytics tools. All service providers are bound by data processing agreements and confidentiality obligations
- Legal Compliance: We may disclose your information if required by law, court order, subpoena, or governmental request, or to protect the rights, safety, or property of Vesti Funding, our users, or the public
- Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such transfer and any changes to the applicable privacy practices
- With Your Consent: We may share information for purposes not described in this policy with your explicit consent
4. Data Storage and Security
We take the security of your data seriously and implement industry-standard technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest (AES-256)
- Regular security audits, vulnerability assessments, and penetration testing
- Access controls and role-based permissions to limit who can access user data within our organization
- Automated backups and disaster recovery procedures
- Secure authentication mechanisms including support for multi-factor authentication (MFA)
Your data is primarily stored and processed on servers located in Canada. In some cases, data may be processed by service providers in other jurisdictions, subject to appropriate safeguards and data processing agreements that comply with Canadian privacy law.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve the Platform:
- Essential Cookies: Required for the Platform to function properly, including session management and authentication
- Analytics Cookies: Help us understand how users interact with the Platform so we can improve features and performance
- Preference Cookies: Remember your settings and preferences such as language, theme, and display options
You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform.
6. Data Retention
We retain your personal information for as long as necessary to:
- Provide the services under your active subscription
- Comply with legal, regulatory, tax, and accounting obligations
- Resolve disputes, enforce our agreements, and protect our legal rights
When you close your account, we will retain your data for up to 30 days to allow for data export. After this period, your personal information and associated data will be permanently and irreversibly deleted from our systems, unless longer retention is required by applicable law.
7. Your Privacy Rights
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information, subject to legal retention requirements
- Withdrawal of Consent: Withdraw consent for certain processing activities, such as marketing communications, at any time
- Data Portability: Export your data from the Platform in a commonly used, machine-readable format
- Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated
To exercise any of these rights, please contact us at privacy@vestifunding.com. We will respond to your request within 30 days.
8. Children's Privacy
The Platform is designed for use by business professionals and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information.
9. International Data Transfers
While our primary data processing occurs in Canada, some of our service providers may process data in other countries. When personal information is transferred outside of Canada, we ensure that appropriate contractual safeguards are in place to provide a comparable level of protection as required by Canadian privacy law, including standard contractual clauses and data processing agreements.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. Material changes will be communicated via email or a prominent in-app notification at least 15 days before taking effect. We encourage you to review this Privacy Policy periodically. Continued use of the Platform after changes take effect constitutes your acceptance of the revised policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer at:
- Vesti Funding Inc.
- 151 Yonge St, Toronto, ON M5C 2W7
- Email: privacy@vestifunding.com
- Phone: 437-873-5058
