PRIVACY POLICY
Last Updated:March 5, 2026
Effective Date: March 5, 2026
York Angel Investors Inc. (“YAI”, “we”, “us”, or “our”) operates a mobile application and website (the “Service”) designed to connect investors and startups and facilitate investment discovery, communication, and due diligence activities.
YAI is incorporated as a not-for-profit corporation in Ontario, Canada.
This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial requirements, and mobile platform policies.
By using the Service, you consent to the practices described in this Privacy Policy.
1. Scope of the Service
The Service allows users to:
Discover investment opportunities
Share startup information with investors
Communicate through in-app messaging
Upload and review due diligence materials
Facilitate connections between investors and startups
York Angel Investors Inc. operates solely as a technology platform.
YAI:
does not invest capital,
does not issue securities,
does not provide investment advice,
does not perform investment suitability assessments, and
does not conduct or certify due diligence.
YAI does not participate in negotiation, recommendation, solicitation, or execution of securities transactions between users.
The platform may promote investment opportunities, including venture capital funds that are separate legal entities from YAI.
YAI is not registered with the Ontario Securities Commission and does not act as a dealer, advisor, investment fund manager, or underwriter.
YAI performs administrative identity verification (KYC) and AML support functions solely for platform administration purposes. Such information may also be accessed by authorized users of the platform, including general partner entities responsible for their own regulatory compliance obligations. All securities compliance responsibilities remain with the applicable issuer or fund entity.
2. Information We Collect
Because the Service facilitates investment interactions, we only collect data that you enter on our website and platform. When completing the contact us form or registering a user account and using our Services we may collect or ask you to provide certain personal information.
A. Personal Identifiers
Full Legal Name
Email Address
Phone number
Full Residential Address
Profile Picture
LinkedIn or professional profile information
Title/ designation
Company Information
B. Investor Information
Government-issued identification documents
Accredited investor self-declarations
Net worth and financial qualification information
Investment preferences and activity
Corporate information
Corporate Logo
Corporate Contact information
Location
External verification for certain investment activities may require submission of OSC Form 45-106F9 through third-party validation processes.
C. Founder and Startup Information
Pitch decks
Financial projections
Cap tables
Corporate information
Corporate Logo
Corporate Contact information
Due diligence documentation
Uploaded business and operational materials
D. Communications Data
In-app messages between users
Uploaded files and documents
Communications submitted through the platform
E. Technical and Usage Information
Collected automatically through the Service:
IP address
Device identifiers
Log and usage data
Performance and diagnostics information
F. Platform Operation, Analytics, and Tracking Technologies
We may use analytics, advertising, and tracking technologies to operate, improve, measure, and market the Service.
These technologies may include, but are not limited to:
analytics tools such as Google Analytics or similar services,
advertising and marketing measurement tools (including technologies such as Meta Pixel or similar tools),
advertising software development kits (SDKs),
cookies and similar tracking technologies,
advertising identifiers,
push notifications and engagement measurement tools,
push tracking systems,
device fingerprinting technologies and related libraries.
These technologies may collect information such as:
device and browser characteristics,
interaction and usage behavior,
session activity,
referral sources,
engagement metrics, and
advertising interaction data.
Tracking technologies may be used to:
understand how users interact with the Service,
improve functionality and user experience,
measure platform performance,
deliver relevant communications or promotional content, and
evaluate marketing effectiveness.
Where required by applicable privacy laws, users will be provided with notice and the opportunity to provide or withdraw consent for non-essential tracking technologies.
3. How We Use Your Information
We use personal information to:
Provide and operate the Service
Enable users to review investment opportunities
Facilitate communication between users
Support administrative KYC and AML verification processes
Process memberships and payments via Stripe
Generate AI-assisted analytical insights and summaries
Improve platform functionality, security, and user experience
Send platform notifications and communications (subject to CASL consent)
Conduct analytics, advertising measurement, and promotional activities where permitted by law
Comply with legal and regulatory obligations
Personal information is used solely for the purposes described in this Privacy Policy.
AI tools may analyze uploaded documents, messages, and, in the future, uploaded call recordings to generate analytical insights.
AI-generated outputs are informational tools only and must not be relied upon as financial, legal, or investment advice.
4. Legal Basis and Consent
We collect and process personal information based on:
User consent
The necessity of providing the Service
Legal and regulatory obligations
Legitimate operational purposes of maintaining and improving the platform
Sensitive financial information and identification documents are collected only with express consent.
Where analytics, advertising, or tracking technologies are used, consent will be obtained where required by applicable privacy legislation. Users may withdraw consent for certain tracking activities through available platform or device controls.
5. Data Sharing and Disclosure
We do not sell, rent, or trade personal information to data brokers or advertising marketplaces.
Information may be shared only where necessary to operate the Service, facilitate investment evaluation, comply with legal obligations, or protect users and the organization.
Platform Participants
Startup information may be made available to verified users within the platform for evaluation purposes. Documents are view-only unless uploaded by the viewing user.
Service Providers
We use trusted vendors including:
Google Cloud Platform (hosting and storage)
Stripe (payment processing)
Email and infrastructure providers
Analytics and advertising service providers where applicable
Open AI
Payment information is processed exclusively by Stripe and is not stored by YAI.
Professional and Regulatory Parties
Information may be shared where required with:
Legal counsel
Auditors
Fund operators using the platform
Regulatory authorities where required by law
6. International Data Transfers
Data is hosted primarily on Google Cloud infrastructure and may be processed in Canada or the United States.
Personal information may be stored or processed outside of Canada, including in jurisdictions where data protection laws may differ from those in Canada. In such cases, personal information may be subject to access by foreign courts, law enforcement, or national security authorities in accordance with local laws.
Individuals located in Quebec may request information regarding automated processing and cross-border data handling practices.
7. Data Retention
Investment and compliance records may be retained for up to seven (7) years where required by law or regulatory obligations.
Account deletion requests do not remove information required for compliance, fraud prevention, or legal purposes.
Non-required data may be removed after periods of inactivity.
8. Security Safeguards
We implement administrative, technical, and organizational safeguards including:
Encryption at rest (AES-256)
Encryption in transit (TLS)
Role-based access controls
Multi-factor authentication for administrative accounts
Secure cloud storage environments
Access logging and monitoring
No system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials.
8A. Cookies, Analytics, and Tracking Technologies
The Service may use cookies, pixels, software development kits (SDKs), and similar tracking technologies to support analytics, advertising measurement, platform functionality, and user engagement.
These technologies may:
recognize returning users,
measure application performance,
analyze usage patterns,
support marketing and advertising activities, and
enable push notifications and engagement tracking.
Some tracking technologies may be provided by third-party partners, including analytics and advertising service providers.
Users can control cookies and certain tracking features through browser settings, mobile device permissions, or platform privacy controls where available. Disabling certain tracking technologies may affect platform functionality or user experience.
9. Your Rights
Under PIPEDA and applicable Canadian privacy laws, you may:
Request access to your personal information
Request correction of inaccurate information
Withdraw consent where legally permissible
Opt out of marketing communications at any time
We will respond to access or correction requests within a reasonable timeframe in accordance with applicable law.
Residents of Quebec may request information regarding automated processing and factors used in analytical outputs where applicable.
10. Account Deletion
You may delete your account through application settings or by contacting:
appsupport@yorkangels.com
Certain information will be retained where required for legal, regulatory, fraud prevention, or compliance purposes. Generally, we will keep your personal information for as long as your user account is active. If your user account is deleted, we may keep your data for the limitation period of possible claims. The information contained in the accounting records will be retained in accordance with the law.
11. Communications and Marketing (CASL)
Marketing communications are sent only where users provide consent via an opt-in checkbox during registration. Users may unsubscribe at any time using the unsubscribe link included in communications.
12. Children’s Privacy
The Service is intended only for individuals 18 years of age or older. We do not knowingly collect personal information from minors.
13. Automated Processing and Artificial Intelligence
The Website may use artificial intelligence (“AI”) and automated tools to assist in analyzing certain information provided through the platform. These tools are used to help generate summaries, highlight potential issues, organize information, or assist users in reviewing materials submitted to the platform.
At present, AI tools may analyze information such as written responses, documents, due diligence materials, or other information voluntarily submitted by users. In the future, the platform may also support the upload and analysis of call recordings, transcripts, or meeting notes related to due diligence discussions.
If call recordings are uploaded or analyzed using AI tools, the user uploading the recording is responsible for ensuring that all participants in the recording have provided any legally required consent to the recording and its processing, including analysis by automated systems.
AI tools used by the platform are intended to assist users and provide informational outputs only. AI-generated content may contain inaccuracies, omissions, or errors and should not be relied upon as professional, financial, legal, or investment advice.
Where AI tools are used, the platform may process submitted content using third-party technology providers that assist in generating analytical outputs. These providers are required to process data in accordance with applicable privacy and security requirements.
AI outputs are not used to make fully automated decisions about users, investments, or platform access. Human judgment remains an essential part of all decision-making processes on the platform.
Use of the platform constitutes acknowledgment that information submitted to the platform may be processed using AI-assisted tools for the purposes described in this Privacy Policy.
14. Changes to This Policy
We may update this Privacy Policy periodically. Updated versions will be posted within the Service with a revised effective date.
15. Contact Us
York Angel Investors Inc.
169 Enterprise Blvd, 3rd Floor
Markham, Ontario, L6G 0E7
Email: admin@yorkangels.com