Who is responsible
MarketPaperclip is operated by MGM Informatique (Québec, Canada). The person in charge of the protection of personal information is the owner of MGM Informatique. Last updated: November 3, 2026.
To reach them: info@mgminformatique.ca, 514 816-0585 or the support form.
What we collect
- Account: your email address and your password (unreadable to us: our authentication provider only keeps a hash of it), or the name and email address sent by Google if you use Google sign-in.
- Public profile: display name, username, bio, website, photo, banner and posts.
- Activity: published listings and files, orders (parties, product, version, license, amount, status), offers, reviews, favorites and support requests.
- Payments: Stripe processes cards and bank details; we only receive the status of payments and of seller accounts.
- Technical data: IP address and server logs, used for security and abuse prevention.
Why we use it
To provide the service (accounts, listings, purchases, downloads), moderate it, prevent fraud and abuse, answer your requests and meet our legal obligations. We do not sell your information.
What is public
Your profile, posts, listings and reviews, with your display name. Market statistics are aggregates: a buyer is never publicly identified.
Providers and processing locations
Supabase (database, authentication and files) and Netlify (hosting) process data in the United States. Stripe processes payments, Microsoft 365 sends the service’s emails, and Google is only involved if you use Google sign-in. Your information may therefore be stored outside Québec, with providers that are required to protect it.
Cookies and local storage
Session cookies authenticate you. Your language preference, signed-out favorites and unpublished drafts may be stored on this device. This application does not add advertising trackers.
Retention
Account data is kept as long as the account exists, then deleted following a deletion request. Transaction records are kept for the period required by tax and accounting laws (generally six years).
Your rights
You can ask to access, correct, delete or transfer your information, and withdraw your consent, by writing to the person in charge or through support. We answer within 30 days. You can also contact the Commission d’accès à l’information du Québec.
Security
Encrypted connections (HTTPS), protected session cookies, data access restricted by database rules, and payments handled by Stripe. If a privacy incident presents a risk of serious injury, we notify the people concerned and the Commission d’accès à l’information.