Privacy Policy

1. Information We Collect

Information you provide

• Account information: email address, and optionally your name (if provided via Google or Apple sign-in).
• Phone number: if you choose to receive SMS alerts, we collect your Canadian mobile phone number.
• Alert preferences: park selections, date ranges, site preferences, and notification settings.

Information collected automatically

• Usage data: pages visited, features used, and interaction timestamps.
• Device data: browser type, operating system, and IP address (collected by our hosting provider Vercel).

Information we do NOT collect

• We do not store credit card numbers, bank details, or other financial information. All payments are processed directly by Stripe.
• We do not use cookies for advertising or cross-site tracking.

2. How We Use Your Information

We use your personal information only for the purposes for which it was collected:

• To create and manage your account.
• To monitor BC Parks campsite availability and send you SMS or email alerts when sites matching your criteria become available.
• To process payments for alert services through Stripe.
• To communicate important service updates (e.g., outages, policy changes).
• To improve and maintain the Service.

3. Legal Basis for Processing

We process your personal information based on:

• Consent: you provide consent when you create an account, enter your phone number, or configure alert preferences.
• Contractual necessity: processing required to deliver the alert services you have purchased.
• Legitimate interest: maintaining security, preventing fraud, and improving the Service.

4. Third-Party Services

We share personal information only with service providers that are necessary to operate FindMySite:

We do not sell, rent, or trade your personal information to any third party.

5. Data Storage & Security

• Data is stored in Supabase-managed PostgreSQL databases hosted in the United States (Oregon region).
• All connections are encrypted in transit using TLS 1.2+.
• Database access is protected by row-level security (RLS) — users can only access their own data.
• Authentication is handled by Supabase Auth with secure session management and token rotation.
• We do not store passwords for users who sign in via Google or Apple.

6. Data Retention

• Account data: retained as long as your account is active.
• Alert & notification history: retained for 12 months after an alert expires or is cancelled, then automatically deleted.
• Payment records: retained for 7 years as required by Canadian tax law.
• Account deletion: upon request, personal data is removed within 30 days. Some anonymized or aggregated data may be retained for analytics.

7. Your Rights

Under PIPEDA and PIPA, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and personal data.
• Withdraw consent for SMS or email notifications at any time from your dashboard settings.
• Request a copy of your data in a portable format.

To exercise any of these rights, email us at support@findmysite.ca. We will respond within 30 days.

8. Children’s Privacy

FindMySite is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

• Email: support@findmysite.ca

You may also file a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for BC.