Privacy Policy
1. Data We Collect
- Email address — provided by you at sign-up; used to send monitoring alerts
- Monitored city — selected by you at sign-up (one city per subscription)
- Subscription status & Stripe identifiers — customer ID and subscription ID returned by Stripe upon payment completion
- Email delivery logs — Resend message ID, send timestamp, success/failure flag; used for debugging and auditing
- Website access logs — Cloudflare standard logs including IP range, User-Agent, path, and timestamp
We do not collect or store credit card information. All payment details are handled directly by Stripe.
2. How We Use Data
- Send exam-slot monitoring alerts and welcome / service-change emails to your subscribed address
- Process subscription charges, refunds, cancellations, and customer support requests
- Monitor system anomalies, abuse, and email deliverability
- Audit and reconciliation as required by law
3. Third-Party Processors
We work with the following processors. They access your information only to the extent necessary to provide their function for this Service, and each has its own privacy policy:
- Stripe Payments Canada — payment processing; holds card details and billing address
- Resend — email delivery infrastructure; processes recipient address and message body
- Cloudflare — website hosting, Worker compute, and D1 database; holds primary user data
Beyond the above, we do not sell, rent, or exchange your personal information with any third party.
4. Where Data Lives
- Primary data (subscriptions, email addresses, logs) is stored in Cloudflare D1, replicated by Cloudflare across multiple geographic regions
- Email archives are retained by Resend on its US infrastructure for approximately 90 days
- Payment and billing records are retained by Stripe as required by financial regulations (typically 7 years)
5. Retention & Deletion
- While your subscription is active: data is retained in full
- After cancellation: email address, city, and subscription status are retained for 24 months for audit and dispute purposes, then anonymised
- Email delivery logs are retained for 12 months
- You may at any time request immediate deletion of all identifiable data by emailing us (financial records required by law are excepted)
6. Your Rights (under PIPEDA)
- Access the data we hold about you — email [email protected]; we will respond with an export within 30 days
- Correction of inaccurate information — same contact
- Deletion of your account and personal data — same contact; executed within 30 days (mandatory financial records excepted)
- Withdraw email consent — use the "Cancel subscription" link in any alert email footer; takes effect immediately
7. Cookies & Tracking
- This site does not set tracking cookies, advertising pixels, or third-party analytics scripts
- We use first-party visit statistics: a random visitor identifier (
tcf_vid) is stored in browser localStorage to count page views, session duration, and clicks; it contains no personally identifiable information and is not shared with third parties - The Stripe Checkout page is controlled by Stripe and sets cookies necessary for the payment session (see Stripe's privacy policy)
- Cloudflare may set temporary cookies for DDoS / bot-mitigation purposes
8. Children
This Service is not directed at anyone under 18. We do not knowingly collect personal information from minors. If we discover that such data has been collected in error, we will delete it immediately.
9. Policy Updates
Material changes will be communicated to active subscribers by email before they take effect. The "Last updated" date at the top of this page will be refreshed on each revision.
10. Contact
For questions about this Policy or data-access requests, please contact [email protected]
11. Provincial Variations & Statutory Rights
In addition to federal PIPEDA, the following provincial laws may grant you additional rights:
- Quebec: Loi sur la protection des renseignements personnels dans le secteur privé (Law 25) generally requires a response to data requests within 30 days
- Alberta / British Columbia: each province's PIPA legislation, broadly equivalent to PIPEDA
The 30-day response commitment in this Policy already aligns with the most stringent provincial requirement. If the statutory rights in your province are more favourable, those statutory rights prevail.