Research, with respect

Your preferences.
Your choice.

Privacy notice · Version 2026-10-29 · Effective 29 October 2026

Who runs this research

RALLY is a working project name. The legal operator will be identified here before public launch. We are developing a service that groups buyers of the same car and negotiates with dealerships on their behalf. We are not selling vehicles or arranging purchases.

What you choose to share

The buyer survey collects vehicle preferences, purchase timing, optional budget and payment preferences, hypothetical savings preferences, municipality and travel willingness. It can be submitted without an email address. If you volunteer for an interview, we also need your email and your separate research contact permission.

The dealership survey collects dealership name, your role, city, work email, optional phone, inventory category and perspectives on research and a possible future pilot. Please do not include sensitive personal details, credit information, confidential pricing or other people’s information in free text.

How we use responses

We use responses to study preferences, broad geography and timing, and to identify possible demand patterns. These patterns are research hypotheses. Approved administrators may review individual responses and contact details. We do not sell responses or share identifiable buyer responses or emails with dealerships during this research stage.

A new purpose or any later sharing would require a separate explanation and appropriate consent. Completing either survey creates no buying group, reservation, commercial agreement or obligation.

Three independent choices

The privacy acknowledgement confirms that you understand this research use. Optional research contact permission lets us email you about taking part in further research related to your buyer response. Optional marketing permission is separate and never required to submit. Providing an email alone does not give marketing permission.

We record the exact consent wording, its version, the choices you made and the time of your submission. No commercial messaging is sent by this application. Marketing messages must not begin until verified sender identification, a working unsubscribe process and appropriate review are in place.

Minimal website measurement

If enabled, first-party measurement records total page visits and actions such as form starts, step completions and saved responses, along with a page path, coarse device class and allowlisted campaign codes. These are counts of events, not unique people. Events contain no email, free-text answer, raw query string, persistent visitor identifier or full IP address. No ad pixels or session replay are installed.

To limit abuse, a server-secret hash of a trusted network address is held in short-lived rate-limit records. We do not save the original IP address with your response. Hosting providers may separately process request logs; their retention and regional settings must be verified by the operator.

Storage and safeguards

The public buyer and dealership surveys are hosted by Tally. Answers are submitted directly to Tally and can be accessed by the project’s authorized Tally workspace members. Tally also receives the technical information needed to serve its form. Please review Tally’s privacy policy (opens in a new tab). The website does not forward its page query parameters into the survey.

The project’s internal research database uses Supabase Postgres, and administrator identities use Supabase Auth. Tally responses appear in the internal research workspace only after the configured synchronization has successfully stored them; an embedded survey submission alone does not establish that synchronization is active. The hosting provider processes requests to run the website. Access is restricted to approved administrators through server authorization and database access policies. Email addresses are available only in the authorized research workspace; a keyed hash helps flag possible duplicates. No method of online storage can eliminate every risk.

Hosting and database regions depend on the operator’s deployment settings. Providers may process data outside Canada. Before public launch, the operator must publish the selected regions and confirm its provider arrangements.

How long responses are kept

The preliminary policy proposes keeping raw research responses for up to 12 months and raw website events for up to 90 days. These are proposed research limits, not legal retention requirements. Automated retention deletion is inactive until the operator confirms the actual policy and schedules the provided process. The policy must also cover responses retained in Tally; deleting a synchronized database row does not automatically delete its Tally source. Deletion and backup handling must follow that confirmed policy.

Access, correction and withdrawal

You may request access to or correction or deletion of your identifiable research response, or withdraw research or marketing contact permission, using the verified contact below. We may need to verify that you control the email address concerned. We do not provide a public email lookup. An anonymous response may be impossible to identify reliably; please avoid adding identifying details to it.

A minimal audit trail records administrative deletion or export actions without retaining the deleted response contents. Access to downloaded research exports must also be controlled by the operator.

Contact about your privacy

A verified privacy contact will be published before public launch. See contact and project status.

This notice describes the implemented research workflow. Operator identity, processing regions and the proposed retention policy require verification before launch.