Legal Notice and Company Details

1.1What a page like this has to carry

In plain EnglishThe rules differ by country. Troy sells in Canada and the United States, and this page answers the strictest version of the checklist rather than the easiest.

Troy’s markets are Canada and the United States. Troy does not offer its services to people in the European Union or the United Kingdom yet. The table below is the checklist identification rules in those markets tend to share, and where each item sits on this page. Where an item is missing, the row still exists: an absent answer is information too.

1.2What this page does not do

In plain EnglishThis page says who Troy is. Four other pages say what Troy does with your data, what it protects, and what you are agreeing to.

• It is not a contract. The website terms govern your use of this site, and a signed agreement governs an engagement.
• It does not say what Troy does with personal data. The privacy notice does that, and the cookie page covers what this site stores in your browser.
• It does not say how Troy protects anything. The security statement does, and it is honest about how little is built.
• It is not proof that Troy exists as a registered company. Until clause 2.2 carries a corporation number, it is evidence of the opposite.

2.1Two names, and which one binds

In plain EnglishTroy is the name you see. The registered name is the one that will sign and be sued, once it exists.

Troy is the name on this site. Troy Agency Inc. is the name that will sign a contract, receive a notice and appear on an invoice. Where the two differ, the legal name is the one that matters, and it is the one a court would want.

The site lives at troy-agency.com. A domain is not an entity, and registering one is not registering a company. Neither the domain nor the product names used on this site — Troy Score, Agents, Yourself — is a separate business. An earlier domain is not in use and nothing on this site should be read as pointing at one.

2.2Register, number and registered office

In plain EnglishThe jurisdiction and the office are real and checkable. The number is not, because the incorporation has not completed.

Troy is being incorporated federally, under the Canada Business Corporations Act, with its registered office in Ontario, which puts its jurisdiction at Ontario, Canada. Corporation number: To be completed: There is no corporation number yet, which means the federal incorporation has not completed. Until it has, Troy Agency Inc. is an intended name rather than a company: it cannot sign a contract, and calling itself “Inc.” in one would be wrong. This is the first thing to finish.[companyNumber]. Registered office: Unit 6, 10651 Keele Street, Maple, Ontario L6A 3Y9, Canada.

The registered office is a real address in Ontario where a document can be delivered to a place and a person, rather than a post box. Federal corporate law expects a corporation to keep one and to keep it current; that is what the address above is for, and it is the address in clause 11.

When the number is issued, this page is updated before any other, because several of the other documents read the same company details from the same place.

2.3Where Troy is established, and where it is not

In plain EnglishCanada, with a registered office in Ontario. Not the EU, not the UK, and nothing on this site should be read as a presence anywhere else.

Troy is Canadian. It is being incorporated federally, under the Canada Business Corporations Act, with its registered office in Ontario — the address is at clause 2.2. Its markets are Canada and the United States. Troy does not offer its services to people in the European Union or the United Kingdom yet. Expecting a customer in a country is not being established in it, and Troy claims no establishment, branch or office outside Canada.

One thing cuts across that. Troy is Canadian, but this site and the data behind it run in the United States — see clause 9.2. A Canadian client has a right to know their data leaves Canada, so it is said on this page as well as in the privacy notice rather than left for somebody to discover.

Nothing incidental should be read as an answer either. Prices are quoted in United States dollars; that is a pricing decision, taken because the first customers are in two countries, and it says nothing about where tax is due.

2.4What the company does

In plain EnglishMarketing work, done by people, inside accounts the client owns. A platform is being built out of it. There is no insurance behind it.

Troy sells marketing. Today that means one thing in practice: strategists running a client’s marketing on the client’s own accounts. A free Troy Score, prepared by a strategist from read-only access, is the way in. A Fix Sprint is a fixed piece of work at a fixed price. The agent tier and the self-serve tier are on the public price table with availability labels on them, and they are not on sale.

Four facts about the shape of that business belong on an identification page, because they change who you are dealing with and what you are exposed to.

• Troy does not hold client media money. Clients pay the advertising platforms directly, on their own accounts and under their own contracts with those platforms. Troy is not a payment intermediary and does not take a percentage of media spend.
• A client owns their accounts, their data and their access tokens. Access is granted by the client inside the platform that owns it, and can be revoked at any moment without asking Troy. What that access does not keep separate is set out at clause 3.
• Nothing reaches an audience or spends money without a named person approving it. That rule does not depend on a product existing: today a strategist’s work lands as a paused ad or an unsent draft, and the record of what changed is kept by hand against the client’s file. The approval queue, the hard spend cap and the permanent change log described elsewhere on this site are how Troy intends to hold the same rule in software. None of that is built yet.
• Troy holds no professional indemnity and no cyber insurance. There is no insurer standing behind an error, so what you could recover is what Troy can pay and what the signed agreement says. Buying cover is on the list of things to do before Troy takes spend authority on a large account; it is not bought, and this page will not imply that it is.

The Troy Score is free and is not a prediction. It grades what is in the connected accounts and shows the evidence for each point. It does not forecast results, and Troy does not claim that it does.

Where the work uses AI, the models come from OpenAI and Anthropic. Troy makes no commitment to any content-provenance or watermarking standard today. It labels AI-made work in the approval queue and tells the client what was AI-made. Which plan each provider is used under, and whether that plan lets the provider train on what Troy sends, is To be completed: Which plan is each of OpenAI and Anthropic used under, and does that plan allow the provider to train on what Troy sends? Both say their business and API terms exclude training by default, but the answer depends on the plan and has to be confirmed rather than assumed — a client will ask, and the sub-processor list has to state it.[aiVendorTerms] — the AI disclosure page and the sub-processor list are where the answer belongs once it exists.

3.1What the relationship is

In plain EnglishSame group, same systems, shared data, shared introductions. The connection is one you can check yourself.

• A common group. Troy and Louin both sit inside Lunari Group.
• Shared systems. Client data is held on systems Lunari Group runs and administers, not on systems Troy alone controls.
• Shared data. The companies in the group can see each other’s data, and that includes what you send Troy.
• Shared engineering, at least in the early months, from the same place and on the same systems.
• Introductions. Some of the first people Troy speaks to already know Lunari Group or Louin, and an introduction is how the conversation starts.
• A connection you can check for yourself, at https://www.louin.io, rather than an unexplained resemblance between two companies.

3.2What the relationship is not

In plain EnglishThere is no wall between the companies on data, and this page no longer says there is. Three other things the group still is not.

An earlier version of this page told you the companies were held apart on data. They are not, so that has been taken out rather than softened. What is true is above: Troy, Louin and Lunari Group share systems and data. Client data is held on systems Lunari Group runs, and the companies in the group can see each other's data.

• It is not a guarantee. Louin does not stand behind Troy’s obligations and Troy does not stand behind Louin’s. If your contract is with Troy, only Troy owes you anything under it. That is about money and obligations — on data the companies are not held apart at all.
• It is not a limit on who Troy serves. Louin’s customers are where Troy starts, not who Troy is for.
• It is not written down. The terms between Troy and the rest of Lunari Group — the shared systems, the shared data, borrowed engineering, who owns the resulting work, referral terms — still have to be agreed at arm’s length and recorded. Nothing on this page should be read as a statement that an agreement exists: To be completed: What makes the sharing lawful, and how is it disclosed? Under PIPEDA, using someone's personal information for a purpose they were not told about needs meaningful consent, and a Louin customer has not agreed to their data being used for Troy's marketing. This needs, at minimum: a written agreement inside Lunari Group, notice to the customers whose data moves, a way for them to say no, and a record of consent. This is the most serious open item on this page — the site now discloses the sharing, but disclosure alone is not a lawful basis.[intraGroupBasis].
• It is not a reason to send Troy more than it needs. If information would be a problem on a system the group runs, the safest thing is not to send it. Write to privacy@louin.io first and ask.

3.3Notices about the group

In plain EnglishSend a notice to the company it is about. Shared systems do not make the companies one company.

A notice about Troy goes to Troy, in the way clause 11 sets out. A notice about Louin goes to Louin, whose own site at https://www.louin.io carries its details. Serving one on the other does not count as serving the other, and Troy will say so rather than pass it along quietly.

Sharing systems does not merge the companies. Each is responsible for its own obligations, and a claim against one is not a claim against another. That is a point about corporate liability, and it does not change anything about data: on data the arrangement is as described above.

4.1A person answers

In plain EnglishNo bot, no ticket number. Also no promised reply time, because Troy has never measured one.

Troy is small and pre-launch. A message to troy@louin.io is read by a person rather than sorted by a system. There is no chatbot on this site, no automated agent answering on Troy’s behalf, and no auto-reply written to sound like one.

What this page does not carry is a response time. Troy has never measured one, and a published time nobody has met is worse than no time at all. What you can expect is a reply from a named person rather than a ticket number.

4.2There is no telephone number

In plain EnglishSome rules expect one. Troy has none to publish, and does not invent one.

Identification rules in several markets ask for a telephone number, or for an equivalent means of rapid contact. Troy publishes no number. Email is the channel it can actually answer, so email is the channel it publishes, and it does not list a line that would ring in an empty room.

Where a rule asks for a mailing address as well — the identification requirements in Canada’s anti-spam legislation are the usual example — the address is Unit 6, 10651 Keele Street, Maple, Ontario L6A 3Y9, Canada, and it is on this page for that reason as much as for service.

If you need to speak to somebody, write to troy@louin.io and say so.

4.3What not to send to these addresses

In plain EnglishNever a password or a key. Nobody at Troy will ask you for one.

• Passwords, API keys or access tokens. Troy asks for access to be granted inside the platform that owns it, and never by sending a credential. Nobody at Troy will ask you for a password.
• The contents of an advertising or commerce account as an attachment. Read-only access, granted and revoked by you, is both safer and more useful.
• Personal data belonging to somebody else, unless you have a reason to be sending it. Email is the easiest place in the world to over-share, and what arrives sits on systems Lunari Group runs — see clause 3.
• Anything you would not want another company in the group to see. That is a real constraint rather than a caution, for the reason given at clause 3.

7.1The rules that apply whether or not anyone is licensed

In plain EnglishNeeding no licence is not the same as having no rules. These bind any advertiser, including Troy.

Not being a regulated profession is not the same as being unregulated. The rules Troy answers to are about what it says and what it does, and they bind any advertiser. What follows is a description of the landscape, not advice, and not a claim that Troy complies with any of it.

• Advertising and consumer protection law in each market Troy sells in, covering claims, endorsements, reviews, testimonials and comparisons. In Canada the Competition Act’s provisions on false or misleading representations are the usual reference point, and the US regulator is prosecuting inflated AI claims and fake reviews. Troy keeps evidence on file for every claim it makes about itself, and publishes no client names, logos, testimonials, case studies or results it cannot substantiate. Today it publishes none at all.
• Privacy law. Federally in Canada that is PIPEDA, overseen by the Office of the Privacy Commissioner of Canada. People in the EU or the UK may also complain to their own national authority. In the United States it is the state privacy laws, California’s in particular. The privacy notice and the data processing addendum set out the detail, including that Troy acts as a processor for the marketing data it handles for a client, and including the part this page describes at clause 3.
• Canada’s anti-spam legislation, CASL, wherever a commercial electronic message is in scope. It asks for consent before a message is sent, identification of who sent it and on whose behalf, and an unsubscribe that actually works. On a Troy engagement the client is the sender: Troy drafts, the client approves, and Troy does not send without that approval. The client attests that its list consented, and Troy does not import lists. Whether a particular message needs express or implied consent is a question about that client’s list, not one this page can answer for it.
• Transparency rules on AI-generated content. Article 50 of the EU AI Act has applied since 2 August 2026 and reaches companies outside the EU that put content in front of people there; Troy does not offer services in the EU, so it is context rather than the thing driving Troy’s own practice. Troy makes no commitment to any content-provenance or watermarking standard today. It labels AI-made work in the approval queue and tells the client what was AI-made. The AI disclosure page sets out what gets labelled, and when the label is shown to a client for approval.
• The advertising platforms’ own policies, which sit on top of all of the above and are enforced faster than any of them.

7.2Certifications Troy does not hold

In plain EnglishNone. Listed here so that nobody has to go looking.

Troy holds no security certification, no privacy certification, no quality standard and no industry accreditation. It is not SOC 2 audited. It is not certified to ISO 27001 or to any other standard. It has no badge, seal or scheme membership to display, and it displays none. There is no insurance behind the work either: Troy holds no professional indemnity and no cyber insurance, and clause 2.4 says what that means in practice.

It also does not describe itself as compliant with any law. Compliance is a conclusion an authority reaches, not an adjective a company awards itself. What Troy publishes instead is what it actually does — in the security statement and the privacy notice, including how little of it is built.

8.1Claims about other companies

In plain EnglishIf a Troy page says something about another company, it links to that company’s own source. No source, no claim.

Where a Troy page says something about another company — an advertising platform’s access policy, a competitor’s published price — it carries a link to that company’s own source. If Troy cannot source a claim, it does not make it. If a source has since changed and a Troy page is now wrong, write to troy@louin.io and it will be corrected or taken down.

Names, logos and marks belonging to other companies are used on this site only to identify their products. Their owners do not endorse Troy, are not associated with it, and nothing on this site implies that they are.

8.2If something on this page is wrong

In plain EnglishTell Troy and it gets fixed first, ahead of anything else on the site.

A legal notice is the page where an error matters most and gets noticed least. If a detail here is wrong, out of date or missing, write to troy@louin.io with the detail and what it should say instead. Corrections to this page are made before anything else on the site, and the version history at the bottom records them.

9.1What this site does with your visit

In plain EnglishAlmost nothing. No analytics running, no cookies from Troy, and one saved setting that stays on your device.

Very little, and the cookie page says so in detail. The analytics Troy has chosen is Vercel Analytics, which is cookieless and does not track anyone across sites (a proposed default, not yet approved)? — chosen, but not installed, so nothing is measuring you today. The site sets no advertising or measurement cookies, and there is no consent banner because there is nothing to consent to. The one thing kept in your browser is the appearance you choose — the theme, the spacing density and the accent colour, saved under a single key — and it never leaves your device.

Whether the host sets a strictly necessary cookie of its own once the site is deployed — for routing, load balancing or a bot check — is To be completed: Whether Vercel sets a strictly necessary cookie of its own on this project once deployed — routing, load balancing or a bot check. Confirm at deploy and list it in the cookie policy.[hostCookies]. The cookie page carries the answer when there is one rather than guessing at it now.

If you send a brief through the form, the privacy notice explains what happens to it. Where it is sent is still open — Google (Gmail). Forms on this site are sent as email to a Lunari Group mailbox, and are not stored in a database — and what arrives sits on systems Lunari Group runs, for the reason at clause 3.

9.2Where the site runs

In plain EnglishOn Vercel, in Washington, D.C. Troy is Canadian and its site is not: the data is in the United States.

Hosting provider: Vercel Inc.. Region: Vercel's Washington, D.C. region (iad1), in the United States.

That is worth reading twice on a page about a Canadian company. Troy is being incorporated in Canada, but this site and the data behind it run in the United States, which means information you send through it crosses the border and is subject to the law of the place it lands, including lawful access by authorities there. A Canadian client has a right to know that before they send anything, so it is on this page rather than only in an annex.

PIPEDA does not forbid sending personal information outside Canada. What it expects, as a general matter, is that the organisation stays accountable for it, uses contractual means to give it comparable protection, and is open about the fact that it happens. What Troy relies on to carry the transfer is the Standard Contractual Clauses, with the UK Addendum where the United Kingdom is involved, entered into through each supplier's own data processing agreement (a proposed default, not yet approved)?. That is a proposed default rather than a checked answer, and the privacy notice and the sub-processor list are where each supplier’s own position is recorded.

When a provider changes, it changes in three places at once — here, on the sub-processor list, and in the privacy notice — because those are the three places a reader would look, and a provider that appears in only one of them is how a sub-processor list goes stale.

10.1Alternative and online dispute resolution

In plain EnglishTroy belongs to no complaints scheme and does not pretend to. Whether it has to join one is a question for counsel.

Troy is not registered with any alternative dispute resolution body, is not a member of an ombudsman scheme, and does not undertake to use either. This page links to no online dispute resolution platform either, and it does not assert from memory which platform or scheme a trader in any particular market has to name. That is the open question in the box below.

10.2If you are a consumer

In plain EnglishTroy sells to businesses. If you are a consumer anyway, consumer law where you live still protects you, and nothing here changes that.

Troy sells to businesses, and its prices, terms and services are written for businesses. If you are nevertheless a consumer, the mandatory consumer law of the place you live applies to you whatever any contract says — in Ontario that is the province’s consumer protection legislation, which generally cannot be contracted out of, and elsewhere it is your own. You can usually bring proceedings where you live and rely on your own protections. Nothing on this page takes either away, and nothing on it is meant to.

Whether a sole trader buying for their own business counts as a consumer differs from place to place, and it is not Troy’s call to make. If you think you might, say so before you sign anything. Troy will treat the question as open rather than assume the answer that suits it.

11.1What a notice should contain

In plain EnglishFive things. A notice with all five gets a useful answer sooner.

1. Who you are, and who you act for.
2. What you say happened, with dates.
3. The page, message, document or account it concerns.
4. What you want Troy to do, and by when.
5. How to reply to you.

A notice that arrives with all five is answered faster than one that arrives with two. That is not a rule, it is just what is true.

11.2Notices from Troy to you

In plain EnglishTroy writes to the last address you gave it. If you have signed an agreement, that agreement decides instead.

Troy sends a notice to the last address you gave it in writing. Under an engagement, the signed agreement says which address counts and when delivery takes effect; where it does, it governs and this page does not.

11.3No agent for service outside Canada

In plain EnglishOne registered office, in Ontario. Nobody is appointed to accept legal papers for Troy anywhere else.

Troy’s registered office is at Unit 6, 10651 Keele Street, Maple, Ontario L6A 3Y9, Canada. It has appointed no agent for service of process in any other country and has no registered agent in any US state. It has no office, branch or establishment outside Canada. If you are a client in the United States and you are relying on Troy having a presence where you are, do not — the hosting at clause 9.2 is not an establishment and does not make one.