Privacy
This page describes, honestly and in plain language, how Keralora Inc. (“Keralora”, “we”) handles information on this platform. It is a factual description of our technical practice, not a substitute for formal legal advice — our full privacy policy will be reviewed by counsel ahead of general availability.
- What we collect
- Account details you provide when invited (name, email, company/KYC information for sellers and buyers), records of the trades and communications you make on the platform, and standard technical data (IP address, browser type) used for security and fraud prevention.
- Buyer↔seller anonymity
- We hold identifying information for both buyers and sellers in confidence. Neither party ever learns the other's identity through the platform — see our Security page for how this is technically enforced. Keralora, and where legally required Canadian customs and our customs broker, are the only parties who see both sides of a trade.
- Where your data is stored
- Our database is hosted with Neon in the AWS us-east-1 region (United States). File storage is hosted with Cloudflare. This means some personal information is processed and stored outside Canada — a fact we're required to disclose under PIPEDA, and one we've weighed against the cost/performance trade-offs of Canadian-only hosting.
- Who else sees your data
- Payment processing (Stripe), email delivery (Resend), and SMS/WhatsApp notifications are handled by third-party processors who receive only what's necessary to perform their function — never seller identity data on the buyer side or vice versa.
- How long we keep it
- Trade documents are retained for at least 7 years to meet Canada Border Services Agency requirements. Other records are retained for as long as your account is active, plus a reasonable period for legal and accounting purposes.
- Questions
- For any question about your data, contact us — we'll respond directly, not through a form.