Privacy Policy

Événements JoinSpot Version 1.4 Événements JoinSpot ("JoinSpot", "we") places great importance on protecting your personal information. This policy explains what information we collect, why, how we use and protect it, with whom we share it, and what your rights are. It applies to the JoinSpot mobile app and the joinspot.ca website. By using JoinSpot, you accept the practices described below.

We only collect the information needed to operate the app. Information you provide Account details: email address and password (the password is protected by cryptographic hashing and is never stored in clear text or in any reversible form). If you sign in with Google or Apple, we receive from these providers your email address, your name and, where applicable, your photo, along with an account identifier. Profile details: first name, last name, username, date of birth, profile photo, bio and interests. Location: your geographic position, including precise (GPS) location when you allow it, to show events around you and the city linked to your profile. Your default profile location is rounded to reduce its precision. Content you publish: events you create, photos, videos, stories, captions, descriptions and messages exchanged in conversations. Business contact details (Business accounts): if you use a Business account, you may choose to add an address, a business phone number and a website. These details are public and shown on your profile so users can reach you. They are optional and provided voluntarily. Uploaded documents: if you upload a document as part of a feature that requires it, its content may be processed to extract the relevant text. Information collected automatically Identifiers: account identifier, identifiers tied to Google or Apple sign-in. Device identifiers and notifications: push notification token and device identifier, used to send you notifications. Technical information and logs: device type, operating system, diagnostic data and error reports, to ensure the stability and security of the service. Search history: the searches you perform in the app. Payment information: when you make a purchase, we keep a record of the transaction and the subscription (date, amount, plan). Your card details are entered and handled directly by our payment provider; we never have access to them and do not keep them. We do not use any advertising tracking and do not track your activity across other apps or websites.

We use your information to: create and manage your account and authenticate you; show relevant events around you and power the map; let you create, join and manage events, and interact with participants; send you notifications about your activity; process payments and manage subscriptions; ensure security, prevent fraud and abuse, and enforce our terms; improve the stability and performance of the app; respond to your support requests. We process your information only for the purposes above, based on your consent and the performance of our service agreement.

By creating an account and using the app, you consent to the collection and use of your information described in this policy. For certain sensitive information, such as your precise location, we ask for separate permission, which you may grant or refuse and change at any time in your device settings. You may withdraw your consent by deleting your account.

The app may ask for access to the following features of your device. Each permission is optional and requested only when it is useful: Location (precise and approximate): to show events around you and place your events. Camera: to take photos or videos to publish in your events and your stories. Photo library: to choose existing photos or videos to publish. Microphone: to record the sound of the videos you choose to publish. Notifications: to inform you of activity related to your events. Face ID / biometric data: to protect access to certain actions. This data stays on your device and is never sent to us. You can revoke these permissions at any time in your device settings.

We never sell your personal information. We use service providers (processors) that handle certain information strictly on our behalf, for the purposes described above, and that are required to protect it: Amazon Web Services (AWS): hosting of the infrastructure, storage of data and media on servers located in Canada (Canada region); handles all information and content. Stripe: processing of payments and subscriptions; handles transaction information (card details are handled directly by Stripe). Expo: sending push notifications; handles the device token. Sentry: error monitoring and diagnostics; handles technical error reports (without personal identifiers). Resend: sending transactional emails (verification, notices); handles the email address. Mapbox: mapping and geocoding; handles event coordinates. OpenAI: conversational assistance feature; handles content submitted to the assistant. Anthropic: conversational assistance feature; handles content submitted to the assistant. AWS Textract: text extraction from uploaded documents; handles the content of uploaded documents. Google: authentication (sign in with Google); handles identifier, email, name. Apple: authentication (sign in with Apple) and processing of in-app purchases and subscriptions on iOS (App Store); handles identifier, email, name and transaction information. RevenueCat: management of in-app purchases and subscriptions; handles the user identifier and subscription information. We may also disclose your information where required by law, to respond to a valid legal request, or to protect our rights, user safety or the integrity of the service.

Our host (AWS) stores and processes your information and content on servers located in Canada. Some other providers listed in section 5 may however process information outside Quebec, in particular in the United States. Before entrusting information to these providers, we carry out a privacy impact assessment, as required by Law 25, to ensure the information receives adequate protection. We frame these transfers with contractual agreements imposing confidentiality and security obligations. By using JoinSpot, you are informed that your information may be processed outside Quebec.

We keep your information for as long as your account is active and as necessary for the purposes described in this policy. When you delete your account, your personal information is deleted after a 30-day grace period, during which you can reactivate your account. After that period, it is deleted or anonymized, except where retention is required by law (for example, accounting or tax obligations related to payments).

We put in place technical and organizational measures to protect your information: cryptographic hashing of passwords, encryption of sensitive tokens, reduced precision of the default profile location, access control and logging. As no method of transmission or storage is entirely infallible, we cannot guarantee absolute security, but we strive to protect your information at all times and to notify you of any confidentiality incident presenting a risk, in accordance with the law.

In accordance with Law 25, you have the following rights: Access: obtain a copy of the information we hold about you. Rectification: correct inaccurate or incomplete information. Withdrawal of consent: withdraw your consent and stop using the service. Deletion: delete your account and your information. Portability: receive, in a structured and commonly used technological format, the computerized information you provided to us. De-indexing: request, in the cases provided by law, that certain information no longer be disseminated. You can change several details directly in the app, or exercise your rights by writing to privacy@joinspot.ca. We will respond within the time limits set by law. If you are dissatisfied with our response, you can file a complaint with the Commission d'accès à l'information du Québec.

JoinSpot is reserved for people aged 14 or older. We do not knowingly collect information from people under 14. If we learn that an account belongs to a person under 14, we delete it.

We may change this policy from time to time. In case of a significant change, we will inform you in the app or by email. The update date appears at the top of the document. By continuing to use JoinSpot after a change takes effect, you accept the updated policy.

For any question about this policy or your personal information: Événements JoinSpot Person in charge of protecting personal information Email: privacy@joinspot.ca Quebec, Canada This policy is published in several languages. In case of any discrepancy between language versions, the French version prevails.