Privacy policy

This informational website

Pinnacle Investments Inc., Quebec, Canada operates Funding Almanac. These pages explain the product; installation and beta admission are unavailable. Browsing them does not send an applicant profile to the research backend or Auth0.

OpenAI provides the existing EcoPromise website's ChatGPT Sites hosting. Hosting can process IP addresses, connection, device and security metadata to deliver and protect the pages. Funding Almanac pages add no form, analytics tag, script, remote font, cookie or local storage. The separate EcoPromise homepage offers optional Google Analytics, described below.

Voluntary support and privacy email

Robert Stein is the privacy contact at funding-support@ecopromise.com. We use the contact details and issue you choose to send to answer support, privacy and catalogue-correction requests. Include only necessary information. Do not send identity documents, applicant financial files, passwords or tokens unsolicited.

Google Workspace processes this address as an alias of an existing licensed mailbox, not a separate mailbox. Correspondence is accessible to authorized personnel and may be subject to provider processing, administrative access and legal preservation requirements. The alias does not promise a separate access boundary. Inspected Gmail and administrator settings disable automatic forwarding, POP and mail delegation. No default forwarding rule or recipient-address map was configured in the inspected organizational unit. The project filter applies a label only. These checks do not rule out administrative access, legal preservation or independently held copies.

Retention and requests

We review correspondence monthly and delete it when no longer needed for resolution and necessary follow-up, subject to documented legal or preservation requirements. This is a manual procedure, not an automatic deletion timer. Deletion from the working mailbox does not guarantee immediate erasure of provider recovery copies, backups or legally preserved material. We do not promise a deadline for erasing every copy or a public response time.

Contact Robert Stein at the address above for access, correction, deletion or a privacy complaint. We may verify your authority proportionately. This is not an emergency channel; applicable legal duties remain.

Providers and processing outside Quebec

Website hosting and support mail may be processed outside Quebec and Canada. Canadian-only processing and exact all-copy erasure periods are not guaranteed. OpenAI's published Sites terms include a data-processing addendum where applicable. Google Workspace publishes service terms and a data-processing addendum. These published frameworks do not establish every account-specific contractual exception or processing location.

Our limited approach is necessary collection, restricted use, manual correspondence review and honest disclosure of provider and preservation limits. This notice is not a legal-compliance certification or a claim that legal review occurred.

Homepage choices and external services

The EcoPromise homepage offers Google Analytics only after you choose to allow it. It can measure visits, device/browser information, referrals, campaign attribution and link or media interactions. You can decline without losing access and change your choice using the homepage's Analytics choices button. A browser preference records your choice. Withdrawing stops further analytics from that page after reload; it does not erase data already processed by Google. Existing embedded media and external links have their own providers and policies.

This policy applies to Funding Almanac, not other EcoPromise projects. The separate restricted ChatGPT research service is not activated by visiting these pages; ChatGPT, Render and Auth0 have distinct data flows. A future public installation or beta release requires its own access and privacy checks. Material changes to this notice will be dated.

Restricted ChatGPT research service

When you choose to use the separately authorized research service in ChatGPT, ChatGPT can send the tool the relevant business context you supply: business activities, operating locations, legal structure, operating history, revenue range, employee counts, planned activities, funding purpose, approximate budget/timing, financing preferences and screening answers. Unknown answers are supported. Provide only relevant information; do not include identity documents, passwords, bank details or applicant files. Activity selections do not establish eligibility.

The research server uses these inputs to search public funding records, compare conditions and return preliminary screening or preparation guidance. It processes applicant context in memory and does not maintain an applicant-profile, document or brief database. The business profile is reused in the conversation, not saved as an applicant account by this server. The backend makes no model calls, sends no program-office email and submits no application. ChatGPT separately processes conversations and tool exchanges under its own settings and policies; absence of server-side applicant storage is not absence of processing by ChatGPT.

Render hosts the research backend; inspected compute configuration places it in Virginia, United States. Auth0 (an Okta service) handles sign-in, identity profiles and authentication/security events. The backend validates access tokens, including subject, client and scope, to authorize access. Passwords are entered at the identity provider, not in funding tools. OpenAI, Render and Auth0 may process data outside Quebec and Canada. An inspected compute region does not establish every provider processing location or Canadian residency.

Application logs are restricted to service lifecycle/failure/storage-readiness events; the application does not log applicant request bodies or token values. Provider network, security and authentication logs are separate. Documented log viewing windows are not guarantees that every copy has been erased. Identity and provider recovery records can outlast service authorization. Removing access does not automatically delete the identity-provider account or your ChatGPT history. The catalogue stores and their recovery copies contain public program evidence, identity mappings and history, not applicant files; no universal recovery-copy deletion period has been established.

Contact Robert Stein for service access, correction, deletion or privacy questions. Manage ChatGPT conversation history separately using ChatGPT's controls. The existing manual correspondence policy and legal/preservation exceptions continue to apply. This extension does not promise universal deletion, absolute security, Canadian-only processing or general OAuth reliability.