Privacy Policy (PIPEDA)

Last updated: 2026 · Personal Information Protection and Electronic Documents Act (PIPEDA)

1. Data we collect

• Account: email, password (stored with bcrypt hash), optional name and phone.
• Identity verification: document and selfie, stored with restricted access and available only to moderation.
• Ads: texts and images submitted by the advertiser (image metadata/EXIF is removed automatically).
• Browsing: strictly necessary cookies (session and age verification).

2. Purpose and legal basis

We process data to operate the platform, moderate content, comply with legal obligations and prevent fraud, based on your consent and PIPEDA's fair information principles.

3. Consent to image and data

By posting, the advertiser consents to the processing and public display of the images and declares they have the authorisation of the persons portrayed. Consent may be withdrawn at any time through the removal channel.

4. Your rights

You have the right to access and correct your personal information, and to withdraw consent, through our removal/contact channel. You may also complain to the Office of the Privacy Commissioner of Canada (OPC).

5. Sharing and retention

We do not sell your data. We may share information with the authorities where required by law. Verification data is kept only for as long as necessary to meet legal obligations and is then deleted.

6. Security

We use HTTPS, password hashing (bcrypt), attempt limiting, input sanitisation, image metadata removal and periodic backups.

7. Data contact

For privacy matters, contact us through the contact channel.

Initial template. Review it with legal counsel in Canada before going into production.