Last updated: October 16, 2026
This policy explains how Hespor Trading Ltd. (“Hespor”, “we”, “us”), of 170-422 Richards St, Vancouver, BC V6B 2Z4, collects, uses, discloses and protects personal information. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, Quebec's Act respecting the protection of personal information in the private sector.
Our Privacy Officer is accountable for how we handle personal information and answers every privacy question and request. Reach them at info@hespor.com or by mail at 170-422 Richards St, Vancouver, BC V6B 2Z4.
We collect only what these purposes need. We never sell personal information, and we don't use it for advertising of our own.
By creating an account or requesting a report, you consent to the uses above. You can withdraw consent at any time by closing your account (see “Your rights”), though some parts of the service can't run without the information they depend on. We send our own emails: reports, receipts, account notices, only for the service you signed up for, and every recurring email has a working unsubscribe link.
When you send review requests, you decide who is emailed and you confirm that each person agreed to hear from you, under Canada's anti-spam law (CASL), usually because they bought from you in the last two years. We use those details only to send that one request on your behalf and to record that it was sent and on what consent, which the law expects the sender to be able to show. Every message names your business and us, and includes an unsubscribe link that works immediately. You can delete any customer's record from your dashboard. If someone unsubscribes, we keep only their email address and which business they left, so they are never emailed for that business again.
We share personal information only with providers that help run the service, under contracts that limit them to that purpose:
Some of these providers store or process information outside Canada and Quebec, including in the United States, where it may be accessible to courts, law enforcement and national security authorities under local law.
When you connect Google Ads, Hespor reads your campaign results and conversion settings, sets up conversion tracking, and creates and manages Search campaigns for you, always inside the daily limit you set. When you connect Facebook, Hespor reads your ad results and manages the campaigns it builds (details in the next section). We only use this access to provide those features to you.
Hespor's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell this data, don't use it for advertising to anyone else, and don't use it to train AI models. You can disconnect either account from the dashboard at any time, and closing your account deletes our copy of the access.
If you choose to connect Facebook ads, you log in with Facebook and approve the permissions shown on Facebook's own screen: ads_read, ads_management, business_management, pages_show_list and pages_read_engagement. This is what we receive, and why:
We don't read your personal posts, friends, messages or comments. We don't sell this data, share it with anyone other than the service providers listed above that run Hespor for us, use it to advertise to anyone else, or use it to train AI models, and we don't send your Meta ad results or account details to AI services. We request no posting permission today. If we add automatic posting to your Page or Instagram account, it will need Meta's approval and your separate consent on Facebook's permission screen first.
Removing it: in the Hespor dashboard, Ads & keywords → Disconnect erases our stored access right away. You can also remove Hespor from Facebook yourself at any time: Facebook → Settings & privacy → Settings → Business integrations (or Apps and websites) → Hespor → Remove. Closing your account deletes everything, as described below.
We keep account information while your account is open, so your history and reports stay available. When you close your account we delete it, including connected-account access, reports, history, review-request records and bookings made under your email. Two things are kept: unsubscribe records (only an email address and a list name), because anti-spam law requires us to keep honouring them; and records our providers must keep for tax and payment law, such as Stripe's transaction records. Free-check reports not tied to an account are deleted on request.
Closing your account doesn't affect your own Google, Meta, WordPress or Shopify accounts. They stay yours.
We use only essential cookies, to keep you signed in and remember your language. We don't use analytics, tracking or advertising cookies.
Connections are encrypted. Passwords are hashed, never stored. Access to connected ad accounts and websites is encrypted at rest. Access to personal information is limited to what running the service requires. If a breach of security safeguards creates a real risk of significant harm, we will notify the people affected and the Office of the Privacy Commissioner of Canada, as PIPEDA requires, and Quebec's Commission d'accès à l'information where Quebec law applies.
Contact our Privacy Officer at info@hespor.com. We respond to requests within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
If we make a meaningful change, we'll update the date at the top and tell account holders by email before it takes effect.