Privacy Policy

1. Who is responsible

[LEGAL ENTITY], Vancouver, British Columbia, Canada, is responsible for your personal information on Sweet Fig. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Our privacy contact is [CONTACT EMAIL].

2. What we collect

• Account: your name, email address, and a password (stored only as a secure hash) or your Google sign-in ID if you sign in with Google.
• Profile: your photo, short bio, city, province or state, country and time zone, if you add them.
• Activity: the groups you join or run, your answers to join questions, your RSVPs and guests, check-ins, comments and announcements, and invites you send or receive.
• Messages: the private messages you send and receive, with when they were delivered and read, and who you block.
• Settings: which emails you want to get.
• Records: when you accepted our terms and privacy policy and the IP address you used, a log of the emails we sent you, and the reports you make.

3. How we use it

We do not sell your information and we do not show ads.

• To run your account and sign you in.
• To show your groups and events to the people they are meant for.
• To send the emails you need: confirmations, waitlist updates, reminders, changes and cancellations, invites and announcements. You can turn reminders, change notices, announcements and message emails off in Notifications.
• To keep Sweet Fig safe: reviewing reports and stopping abuse. Our team does not read private messages. When someone reports a message, our team sees that one message, who sent it and when, and keeps a copy with the report. The rest of the chat stays private.

4. Who can see what

• Public groups and public events can be seen by anyone, including people who are not signed in.
• Members-only and invite-only events are shown only to the people allowed to see them.
• Your name and photo are shown to people in your groups, on attendee lists and next to your comments.
• Organizers of an event also see its waitlist, check-ins and invites. Group organizers see answers to their join questions.
• Your email address is not shown to other members.

5. Services we use

We use these providers to run Sweet Fig. They handle your information only to provide their service to us:

Your information may be stored and processed in [HOSTING REGION].

• Vercel (website hosting) and Railway (servers and database).
• Cloudflare R2 (storing photos you upload).
• Google (email delivery and Google sign-in, if you choose it).

6. Cookies

We use only the cookies Sweet Fig needs to work: two cookies that keep you signed in (sf_access and sf_refresh). We also remember in your browser that you have seen our cookie notice. We do not use advertising or tracking cookies.

If you use Sign in with Google, Google may set its own cookies under its own privacy policy.

7. How long we keep it

We keep your information while you have an account. When you delete your account, we erase your name, email address and photo, cancel your upcoming RSVPs, remove you from your groups and delete your comments, notifications and sign-in sessions. Records of past events you attended stay, shown as "Deleted user". [RETENTION PERIOD FOR EMAIL LOGS AND REPORTS]

8. Your choices and rights

If you are not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada.

• See and correct your profile at any time in your profile settings.
• Turn email types off in Notifications.
• Delete your account from your profile.
• Ask us for a copy of your information, or ask a question about how we handle it, at [CONTACT EMAIL].

9. Age

Sweet Fig is for people who are at least [MINIMUM AGE] years old.

10. Changes

If we change this policy in a way that matters, we will tell you by email or in Sweet Fig before the change takes effect.