Privacy Policy
On this page
Effective: September 15, 2026 · Updated: September 19, 2026
SaleFlow is operated by Christine Boake in Alberta, Canada. This policy explains how we handle personal information on saleflow.ca, app.saleflow.ca and when providing support.
Questions or requests? Email hello@saleflow.ca, addressed to Christine Boake, Privacy Contact. You can use this contact even if you do not have a SaleFlow account.
Business mailing address: PO Box 135, Stettler, Alberta T0C 2L0, Canada.
Telephone: (403) 850-6993.
Information we collect and why
We collect information needed to operate SaleFlow, support customers, maintain accurate records and protect the service. This includes:
- Account and contact information: your name, business or ranch name, email, phone number, billing address and sign-in information, to set up and support your account.
- Sale records you provide: sale and lot details; consignor, bidder and representative names and contact information; buyer locations; purchases, invoices, recorded payments, credits, settlements, transfers and deliveries. We use this information to provide the sale-management functions you request.
- SaleFlow billing information: your chosen plan, subscription and invoice references, payment status and refund records. Stripe handles the payment details entered on its checkout page. SaleFlow does not receive or store your full card number or card security code.
- Support messages: information you send when asking for help or reporting a problem.
- Technical information: connection and server logs, browser and device information, and error diagnostics used to operate, secure and troubleshoot the service.
Please do not enter card numbers, government identification numbers or unrelated sensitive information in notes or uploaded sale files.
Information entered by sale organizers
Sale organizers decide which sale information to enter and whom to send documents to. If you enter information about buyers, consignors, representatives or other people, you must have authority to use it for those purposes and provide any required notice or obtain any required consent.
If your information was entered by a sale organizer, you can contact that organizer about the sale record or contact our Privacy Contact for help with information held by SaleFlow. We may need to verify your identity and coordinate with the organizer before providing or correcting records. We do not treat an organizer's instructions as permission to disregard your legal privacy rights.
Who receives information
Information is available to authorized users of the relevant SaleFlow account and to people you choose to send documents or reports to. We may access information when needed to provide support, investigate errors or security concerns, or meet legal obligations.
We use service providers for specific functions:
| Provider or service | Purpose and information involved |
|---|---|
| Supabase | Account authentication, storage of sale records and backend processing. |
| Vercel | Hosting the website and application, including technical request information. |
| Stripe | Processing SaleFlow purchases, subscriptions, per-sale fees and refunds. |
| Resend | Sending account, billing, invoice and report emails, including recipient details and the content sent. |
| Sentry | Receiving error diagnostics when error monitoring is enabled. |
| Cloudflare Turnstile | When enabled on account forms, checking for automated abuse using technical browser and connection signals, including IP address. See the Turnstile Privacy Addendum. |
| OpenStreetMap services | Displaying maps and looking up locations. A location search sends the address or location text to the geocoding service; map requests also reveal technical connection information. |
| Google Maps | Receiving destination or route information when you choose to open route directions. |
| Google Fonts | Delivering website fonts, which involves browser requests to Google's servers. |
| GitHub and The Ringside Report | Storing and reviewing sale-result submissions when you choose to submit them for publication. |
These services may process information outside Canada, where it may be subject to local laws and lawful government access. Our Privacy Contact can explain our policies and practices concerning service providers outside Canada and answer questions about the information involved.
We do not sell your personal information. We may disclose information where required or permitted by law, including to respond to lawful requests, protect against fraud or address a security incident.
Publishing sale results
Entering a sale into SaleFlow does not itself publish the results. If you choose to submit results to The Ringside Report, the submission includes sale and lot details, consignor names, buyer names and purchase prices for review and possible public publication. The review process also holds submission history in private storage.
Before submitting, make sure you have permission or another valid legal basis to disclose the information involved. Published information may be copied or indexed by others. Contact us about corrections or removal requests; we cannot promise to remove copies held independently by other people or search services.
Browser storage and emails
SaleFlow uses browser storage to keep you signed in and support application functions. Clearing or blocking that storage may sign you out or prevent features from working. Stripe and other services you visit may use their own cookies and storage under their policies.
We send service messages such as account setup, password recovery, billing notices and documents requested through the application. We will obtain any required consent before sending optional marketing messages and provide a way to unsubscribe from them.
Keeping and protecting information
We use safeguards appropriate to the information, including account authentication and access controls. No online service can guarantee absolute security. Please protect your account credentials and tell us promptly if you suspect unauthorized access.
We retain personal information for as long as reasonably needed for the purposes described here, including providing the service, maintaining financial and audit records, resolving disputes and meeting legal requirements. When no longer reasonably needed, information should be securely deleted or anonymized through our retention process. Backup copies may remain until they are replaced under the relevant backup cycle.
Cancelling an annual subscription is different from requesting account closure or deletion. Contact us to discuss closure, exports or removal of personal information. Some records may need to be retained or corrected with an audit trail rather than erased. We will explain applicable restrictions when responding to a request.
Your choices and requests
You may ask to access or correct your personal information, ask about our handling practices, or withdraw consent where applicable. We may request reasonable information to verify your identity. If a request affects our ability to provide a feature, or a legal exception limits what we can provide, we will explain that to you. We respond within the time required by applicable law.
You may raise a concern with us or with the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca, or the Office of the Privacy Commissioner of Canada at priv.gc.ca, as applicable.
We may update this policy as the service changes. We will show the effective date and provide additional notice or seek consent where required for material changes.