Privacy policy
This policy covers rankbid.ca, operated by Flowtify of Calgary, Alberta.
The short version
We collect as little as a paid directory can. There are no accounts and no advertising trackers. We keep what you type into the submission form, the email you pay with, and technical details like your IP address to prevent fraud and count clicks. Stripe handles your card, and RankBid never sees or stores your card number. Data lives on servers in Toronto.
What we collect
Listing information you submit: the website URL, business name, tagline, description, logo, category, province and city. This is published on rankbid.ca on purpose; publishing it is what you paid for.
Your contact email, which is the email you pay with. We use it to send your manage link, payment confirmations, edit status updates and outbid alerts. It is never shown publicly and never sold.
Payment details are collected by Stripe, not by us. We receive the amount, the currency, the payment status, a Stripe reference and the email on the payment. We do not receive or store your card number, and it never touches our servers.
Technical information: your IP address, browser user agent and the time of each submission,
payment and click on a /go/ link. The IP address is stored as a hash rather than in
the clear. We use this only to stop fraud and spam, to rate limit the form, and to count clicks
honestly, so repeated clicks from one visitor within
60 minutes count once.
Site analytics: page views, referrers and rough location by country, counted on our own server. No Google Analytics and no advertising pixels.
Contact form messages: your email, the listing you mention and what you wrote.
Unclaimed listings: business name, website, category and city gathered from public sources such as the business's own website and Google Places. This is business information rather than personal information, and any business can have its unclaimed listing removed within two business days by asking at rankbid.ca/contact.
Category suggestions: when you enter a URL, we may send your site's public title and description to an AI service to suggest a category. No personal information is included.
Why we collect it
To publish and rank your listing. To process your payment through Stripe and keep the records Canadian tax law requires. To send you email about your own listing. To count clicks and show public stats. To detect and block fraud, spam, bots and rule breaches. To answer your messages. To comply with the law when we must.
We do not use your information for advertising, we do not build profiles, and we do not sell or rent it to anyone.
Who we share it with
Stripe, which processes payments and holds card data under its own privacy policy. Brevo, which sends our email and sees your email address and the contents of the emails we send you. HostArmada, which hosts rankbid.ca on servers in Toronto, Canada. Cloudflare, which provides DNS, caching and protection against attacks; traffic to the site passes through Cloudflare's network, which has locations outside Canada. Law enforcement or a court, if we are legally required to. Nobody else.
Cookies
One session cookie keeps your place in the submission flow. The admin panel uses a login cookie that only Flowtify staff ever see. Stripe and Cloudflare may set their own cookies for fraud prevention and security during checkout and page loads. There are no advertising cookies and no cross-site tracking. Your manage link works with a token in the URL, not a cookie.
How long we keep it
Listing information: as long as the listing is live. If a listing is removed, we keep its URL and the reason for up to two years so it cannot simply be relisted. Payment records: at least six years after the payment, as Canadian tax law requires. Hashed IP addresses and user agents: 90 days, after which only aggregated counts remain. Contact form messages: two years. Manager email addresses: as long as the listing is live, then deleted within 90 days.
Your rights
Under PIPEDA, and under Quebec's Law 25 if you live in Quebec, you can ask what personal information we hold about you, ask us to correct it, and withdraw your consent to our using it. Withdrawing consent for a listing means we remove the listing; the payment stays non-refundable, as the terms say. Quebec residents can also ask for their personal information in a structured, commonly used format. Email privacy@rankbid.ca and we will respond within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or in Quebec to the Commission d'accès à l'information du Québec.
Email and CASL
Emails about your own listing (confirmations, manage links, edit status, removal notices) are transactional. Outbid alerts are sent at most once every 6 hours per listing, and every one carries an unsubscribe link. We do not send a newsletter unless you ask for one.
Security
Everything runs over HTTPS. Card data never touches our servers. The admin panel needs a password and a one-time code. Access to personal information is limited to the people at Flowtify who need it. If a breach ever creates a real risk of significant harm, we will notify you and the Privacy Commissioner as the law requires.
Children
RankBid is a business directory. It is not aimed at anyone under 18, and we do not knowingly collect information from them.
Privacy officer
Flowtify's person in charge of personal information is the Privacy Officer. Email privacy@rankbid.ca, or write to Flowtify, Privacy Officer, Calgary, Alberta. You can also use the contact page.
Changes
We will post any changes here and update the date at the bottom of this page. If a change is material, we will say so on the site.
Last updated October 23, 2026.