Privacy Policy

This policy covers personal information ConnectYXE processes to run the service. It does not cover third-party venues, ticketing providers, or other sites we link to; those operate under their own policies.

To build our listings we also collect publicly available information about events and venues from third-party websites using automated tools. That is business and event information, not personal information about you as a user, so it falls under our terms of service rather than this policy.

We collect only what we need to operate the service.

Account information

Your email address, display name, username, and an authentication record. Passwords are hashed by our authentication provider and are never visible to us in plain text.

Profile information

Anything you add to your profile (neighbourhood, bio, visibility settings) and your connections on the service (friend requests, friendships, venues you follow).

Platform activity

Events you save, RSVP to, or submit; venues you follow; venue-administration actions if you manage a listing; and the notification preferences you set.

Submissions

Events, images, claims, and venue submissions you send us, including any contact details you choose to include.

Payment information

If you buy a paid placement, our payment processor collects your card details directly. We receive only the order metadata (which order, the amount, and its status) and a customer reference. We never store full card numbers or security codes.

Newsletter subscriptions

If you subscribe to the Friday Roundup, we store your email address, the page you signed up from, and the subscription and unsubscription timestamps. For CASL audit purposes we also record the IP address and user-agent of the device that submitted the form.

Device location (optional)

If you use the “near me” sort, your browser asks permission to read your device location. We use it in your browser only, to order events by distance. Your coordinates are not sent to us or stored by us.

Device and request data

Standard web-server log fields (IP address, user-agent, requested URL, timestamp) recorded automatically when you visit. Used for security, abuse prevention, and aggregate traffic measurement.

Support correspondence

If you email us, we keep the message as long as needed to respond and to maintain an audit trail.

We do not store payment-card numbers, government identifiers, or sensitive categories of personal information (health, biometrics, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, or trade-union membership).

We process personal information to:

• Operate the service and provide the features you use.
• Authenticate you, secure your account, and protect the service against fraud, abuse, and unauthorized access.
• Communicate with you about your account, your submissions, and material changes to the service.
• Deliver the Friday Roundup if you subscribed, until you unsubscribe.
• Send service notifications about events you saved or RSVP'd to (reminders, cancellations) and venues you follow (new events), subject to your notification preferences.
• Moderate user-submitted content.
• Process payments and issue refunds.
• Comply with applicable Canadian and Saskatchewan law.

We do not use personal information for behavioural advertising, cross-site tracking, or automated decisions that produce legal or similarly significant effects.

We share personal information only with the service providers that help us run the platform: database and authentication, application hosting, transactional and bulk email, payment processing, product analytics, and error monitoring. Each receives only the data it needs and is contractually bound to protect it. We do not sell personal information, and we do not share it with advertisers or data brokers.

We may disclose personal information when required by law or court order, to enforce our terms of service, or in connection with a merger, acquisition, or asset sale, subject to PIPEDA's business-transaction provisions.

We use two kinds of cookies and similar local storage:

Essential

Authentication tokens that keep you signed in, anti-forgery tokens that protect form submissions, and small interface preferences (theme, dismissed banners). These are required for the service to work.

Analytics and error monitoring

A product-analytics tool records page views and feature use, associated with a stable internal user id for signed-in users so we can understand what works in aggregate. An error monitor captures technical details (URL, error type, stack trace, browser) when something breaks. We do not run session replay or third-party advertising scripts, and we do not sell or share this data.

Most browsers let you block or clear cookies in their settings. Blocking essential cookies will sign you out and may break parts of the service.

Some of our service providers store or process data outside Canada, including in the United States and the European Union. When personal information is processed in another country, it may be accessible to authorities there under local law. We use Canadian-region storage where available and require data-protection commitments from each provider.

Account data

Kept while your account is active, and deleted within 30 days of account deletion unless a longer period is required by law.

Submissions

Approved listings are kept as part of the editorial archive. Rejected submissions are deleted within 90 days.

Newsletter records

Kept until you unsubscribe; the unsubscribed record is kept for three years as proof of CASL compliance.

Payment records

Kept for six years to meet Canadian tax-record requirements.

Server logs

Rotated and discarded within 30 days, unless needed longer to investigate an active security incident.

Under PIPEDA, you have the right to:

• Access the personal information we hold about you, including who it has been disclosed to.
• Correct inaccurate or incomplete personal information.
• Withdraw consent to processing, subject to legal or contractual limits and reasonable notice. Withdrawing consent for essential account processing means we can no longer maintain your account.
• Delete your account and the personal information tied to it.
• Receive a copy of the personal information you gave us, in a portable, machine-readable format.

To exercise any of these, email hello@connectyxe.ca from the address on your account. We respond within 30 days, and will tell you if we need anything to verify your identity.

The service is not directed at children under 13, and we do not knowingly collect their personal information. Listings tagged for younger audiences are meant for parents and guardians. If you believe a child has given us personal information, email hello@connectyxe.ca and we will delete it.

We use technical and organizational safeguards suited to the information we hold: encryption in transit and at rest, access controls that limit personal information to those who need it, and database rules that stop one user from reading another's private data. You are responsible for keeping your credentials confidential. No system is perfectly secure.

If a security breach involving your personal information creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by section 10.1 of PIPEDA, and we will keep a record of breaches involving personal information under our control.

We may update this policy from time to time. If a change materially affects how we use existing personal information, we will notify you by email or a prominent notice on the service at least 14 days before it takes effect. Minor wording updates are reflected in the effective date above.

Reach our privacy contact at hello@connectyxe.ca. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.