Privacy Policy

Effective Date: March 12, 2026

1. Introduction

MaxExit (“we,” “us,” or “our”) is operated by Lexbury Investments. We are committed to protecting the privacy of individuals who use the MaxExit Investment Assessment Tool at maxexit.io.

This Privacy Policy explains what personal information we collect, how we use and protect it, and your rights under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). By using our tool, you consent to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

Assessment Data

  • Responses to 33 business assessment questions covering financial performance, business fundamentals, exit factors, management & operations, and market position
  • Company name and contact email address
  • Annual revenue and EBITDA figures
  • Industry classification

Application Form Data

  • Full name
  • Email address
  • Phone number
  • Business challenges (free-text response)
  • Electronic signature

Technical Data

  • Browser session data (Flask session cookies)
  • Assessment state stored in your browser’s localStorage

We do not collect payment information, use analytics or tracking pixels, or deploy cookies for advertising purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Generate your assessment results — scoring your business across our five weighted categories and producing an indicative valuation range
  • Create PDF reports — generated in-memory at the time of your request and delivered directly to you (not stored on our servers)
  • Send transactional emails — including resume links for incomplete assessments, assessment nudge reminders, and application confirmations
  • Evaluate Value Accelerator Program applications — reviewing your application form submission to determine fit for our programme
  • Improve our tool — understanding aggregate usage patterns to enhance the assessment experience
4. How We Store & Protect Your Information

Your assessment data is stored in a SQLite database on our server. We take reasonable measures to protect your information, including:

  • Server-side session management with encrypted session cookies
  • HTTPS encryption for all data transmitted between your browser and our servers
  • PDF reports are generated in-memory and are not stored on our servers after delivery
  • Access to the database is restricted to authorized personnel only

While we implement reasonable safeguards, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security of your information.

5. Third-Party Services

We use the following third-party services in connection with our tool:

  • Mailgun — to send transactional emails (resume links, nudge emails, application confirmations). Your email address and name are shared with Mailgun for this purpose. Mailgun’s privacy policy is available at mailgun.com/legal/privacy-policy.
  • Google Fonts — to load typefaces used in our interface. When you visit our site, your browser makes requests to Google’s servers, which may log your IP address. Google’s privacy policy is available at policies.google.com/privacy.
  • Bootstrap CDN (jsDelivr) — to load our CSS framework. Your browser makes requests to jsDelivr’s servers when loading the page.
  • Cal.com — for booking consultations. When you click our booking link, you are redirected to Cal.com, which has its own privacy policy.

We do not sell, rent, or trade your personal information to any third party. We do not use any analytics, advertising, or tracking services.

6. Cookies & Browser Storage

Our tool uses the following browser storage mechanisms:

  • Session cookies — Flask uses a session cookie to maintain your assessment state as you navigate through the tool. This cookie is essential for the tool to function and expires when you close your browser.
  • localStorage — We store your assessment ID in your browser’s localStorage so you can resume an incomplete assessment. This data remains in your browser until you clear it manually or complete your assessment.

We do not use cookies for tracking, advertising, or analytics purposes. Because our cookies are strictly necessary for the tool to function, no cookie consent banner is required under Canadian law.

7. Your Rights Under PIPEDA

Under PIPEDA, you have the following rights regarding your personal information:

  • Access — You may request access to the personal information we hold about you.
  • Correction — You may request that we correct any inaccurate or incomplete personal information.
  • Withdrawal of consent — You may withdraw your consent for us to collect, use, or disclose your personal information, subject to legal or contractual restrictions. We will inform you of any implications of withdrawal.
  • Complaint — You have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Privacy Officer using the contact information below. We will respond to your request within 30 days.

8. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected:

  • Assessment data — retained in our database for as long as needed to provide you with access to your results and for our legitimate business purposes.
  • Application form data — retained for the duration of the application review process and any subsequent engagement.
  • PDF reports — generated in-memory at your request and not stored on our servers.

You may request deletion of your personal information at any time by contacting our Privacy Officer. Upon receiving a verified request, we will delete your data within a reasonable timeframe, unless we are required by law to retain it.

9. Children’s Privacy

The MaxExit Investment Assessment Tool is designed for business owners and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the “Effective Date” at the top of this page. We encourage you to review this policy periodically. Your continued use of the tool after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights under PIPEDA, or have a privacy-related concern, please contact:

Privacy Officer: Michael Cook
Organization: Lexbury Investments (MaxExit)
Email: info@maxexit.ca
Website: maxexit.io

Office of the Privacy Commissioner of Canada: If you are not satisfied with our response to your privacy concern, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or by calling 1-800-282-1376.