Introduction and Scope 

This Privacy Policy covers our data collection and privacy practices for the Northsocial.ca website, mobile application, and related services offered by Zynim Media Inc. (collectively, the “Platform”). It describes: 

• The types of information we collect (both personal information and non-identifying information). 

• How we use that information and the legal bases for processing. 

• How we share information with third parties. 

• Your choices and rights regarding your personal information. 

Our practices are designed to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA). We are a Canadian service primarily for Canadian users, so your data is generally handled in Canada as described below. If you have any questions about our privacy practices, you can contact us using the information at the end of this Policy. 

Information We Collect 

We collect several categories of information from and about our users. In most cases, we collect information directly from you, but we also collect some data automatically, and occasionally from third parties (with your consent or as otherwise permitted by law). 

Information You Provide Directly 

When you use Northsocial.ca, you may provide certain personal information to us, including: 

• Account Information: When you register, we ask for information such as your name, email address, date of birth, and location (e.g., city or province) to set up your profile. You will also create a username and password. If you create a business or advertiser account, we may ask for business contact details, business name, and other relevant information. 

• Profile Details: You have the option to add information to your profile, such as a profile picture, bio or description, interests, and other details. All profile information you choose to add is voluntary, and you should only add information you are comfortable sharing. 

• Content You Post: We collect the information and content that you post on the Platform, such as text posts, photos, videos, comments, marketplace listings, and messages you send to others. This can include metadata (like when and where a photo was taken) if that metadata is included in the file you upload. 

• Private Messages and Groups: If you use private messaging or private group features, the content of those communications is stored and processed to deliver the messages. Note that private content is accessible only to you and your intended recipients (subject to moderation for abuse prevention), in accordance with our data residency policy (private messages and private group content are kept within Canada and not shared with external parties, except as needed to deliver the service). 

• Transactional Information: If you make purchases or other transactions through the Platform (for example, buying advertising or conducting a Marketplace sale), we collect information related to those transactions. This may include your payment information (processed via secure third-party payment processors, so we may only receive confirmation of payment rather than your full card details), billing name and address, and details of the transaction (e.g., item purchased, price, date and time of transaction). 

• Communication with Us: If you contact us for support or with a question (via email, support forms, or otherwise), we will collect the information you choose to provide in that correspondence (such as your contact information and the details of your inquiry). 

Providing personal information is voluntary. However, if you choose not to provide certain information (like a name and email address for account registration), you may not be able to use some parts of the Platform. We will always clarify which information is required and which is optional. 

Information We Collect Automatically 

When you use Northsocial.ca, we (or our service providers, acting on our behalf) automatically collect certain technical information about your device and your use of the Platform. This information helps us operate, protect, and optimize our services. It includes: 

• Device and Usage Information: We collect data about how you access our Platform, such as your IP address, browser type, device type (e.g., phone model or computer brand), operating system, application version, and system language. We also log information about your activity on the Platform, for example: the pages or screens you view, the dates/times of access, the websites or apps that referred you to us, and the features you use (such as entering a search query or clicking on a particular ad). 

• Cookies and Similar Technologies: We use cookies and similar tracking technologies (like web beacons and device identifiers) to collect information about your interactions with the Platform. Cookies are small data files stored on your browser or device that can remember your preferences and track your actions. (See Section 3 “Cookies and Tracking Technologies” below for more detail on how we use cookies and your choices.) 

• Location Information: We may derive an approximate geographic location from your IP address or based on information you provide (like your city). This is not precise GPS data, but it helps us tailor the content you see (for example, showing you posts or marketplace listings in your region). If we ever offer features that require precise location (GPS-level) information, we would ask your permission explicitly. 

• Analytics Data: We use analytics tools to better understand how users engage with Northsocial.ca. These tools may log data such as how often you visit the site, what pages you visit, and what other sites or apps you used prior to coming to our Platform. This information is typically collected by cookies or similar identifiers. It helps us understand usage patterns and improve the user experience. (For instance, we might see that a certain feature is rarely used, indicating it may be confusing or not valuable to users.) 

All automatically collected data may be linked with the personal information you provide, and if so, we treat the combined information as personal information under this Privacy Policy. However, we also often use it in aggregate form (stripped of identifiers) to analyze trends. 

Information from Third Parties 

At launch, Northsocial.ca does not obtain personal information about you from third-party sources (aside from service providers aiding our operations, which we describe in “How We Share Information” below). We do not use third-party login, so we’re not pulling data from, say, your profile on another service. All information in your Northsocial.ca account is either provided by you or collected through your interactions with our Platform. 

In the future, we might add features that integrate with other services. For example, we may allow you to find friends by connecting to another social network, or to log in through an identity provider. If we do so, we will clearly explain at that time what information would be imported and will obtain your consent. (For instance, connecting through such a service may allow us to receive your name, email address, and contacts from that provider, with your permission.) We would also update this Privacy Policy accordingly to reflect any new data sources. 

Additionally, if you interact with any third-party content on our Platform (like a third-party ad or an external link), the third party might receive certain data as a result of that interaction (see “How We Share Your Information” in Section 5 for more details). For example, if we eventually partner with advertisers who use their own tracking (such as an advertising pixel or cookie provided by a third party on our site for ad performance), that might allow the third party to know that a browser with your cookies visited or took an action on Northsocial.ca. Please note, we do not sell or trade your personal information to third parties for their own marketing purposes. Any data sharing with third parties is only as described in this Policy, and primarily to provide or improve our services to you. 

Cookies and Tracking Technologies 

We use cookies and similar technologies to improve your experience on Northsocial.ca. Here we explain what these technologies are and how we use them, and what choices you have. 

What Are Cookies? Cookies are small data files stored on your browser or device. They often include an identifier unique to your browser. Cookies can be “session cookies” (which are deleted when you close your browser) or “persistent cookies” (which remain on your device until they expire or you delete them). Similar technologies include web beacons or pixels (tiny images embedded in a site or email that can track if you’ve viewed it) and local storage (which can store data locally in your browser, similar to cookies). 

Types of Cookies We Use: 

• Necessary Cookies: These are essential for the Platform to function properly. For example, when you log in, we set a cookie to keep you logged in during your session (so you don’t have to re-authenticate on every page). Necessary cookies also help with security (e.g., a cookie that helps prevent cross-site request forgery attacks or ensures your requests are consistently routed to the same server). You cannot opt out of necessary cookies because the service cannot run without them. 

• Preferences Cookies: These cookies remember your settings and choices to provide a more personalized experience. For instance, if you choose a preferred language or enable dark mode (if available), a cookie might store that preference so you don’t have to set it every time. 

• Analytics Cookies: We use these to understand how users interact with Northsocial.ca. For example, we might use Google Analytics or a similar tool (if we do, we will configure it in compliance with privacy standards). Analytics cookies track things like which pages you visit, how long you stay, what site or search engine referred you, and your usage patterns. The data we get from analytics is typically aggregated and not aimed at identifying individuals. However, analytics providers may receive your IP address or device identifiers, which can be considered personal data. We treat analytics data as outlined in this Policy. 

• Advertising Cookies: As of the launch of our service, we do not display third-party banner ads or targeted advertising, so we are not actively setting advertising cookies. In the future, if we partner with third-party ad networks or exchanges, they might use cookies or similar technologies to deliver and measure ads. For example, an advertising cookie might help ensure you don’t see the same ad repeatedly, or help select ads that are more relevant based on your activity (this is called personalization or targeting). We might also use cookies to track when you’ve seen or interacted with an ad (so advertisers know if their ad was effective). We will not share personally identifying info (like your name or email) with third-party advertisers without your consent. Any third-party advertising partners will be required to comply with applicable privacy laws and, ideally, will offer opt-outs for personalized ads. (See Section 5 on Sharing for more on advertising data, and see “Your Choices” below for opt-out options.) 

Cross-Site Tracking: Northsocial.ca’s policy is to restrict third-party tracking as much as possible. We do not currently embed any third-party social media plugins or widgets that track you on our site (for example, we have no “Like” or share buttons from external social networks embedded on our pages at launch), and we limit other cross-site trackers. However, note that if we use infrastructure services like Cloudflare or similar for public data, not private data, they might place a cookie for security and performance reasons (for instance, Cloudflare uses a cookie to identify malicious visitors and avoid blocking legitimate users). Also, if in the future we display external ads from third-party networks, those may come with their own cookies or tracking pixels. We will strive to inform you and obtain appropriate consent where required if our use of cookies or trackers changes materially. 

Your Choices re: Cookies: When you first visit Northsocial.ca, we may present a notice or banner about cookie use, especially if any non-essential cookies are in use. You can control and manage cookies in several ways: 

• Browser Settings: Most web browsers allow you to refuse or delete cookies. You can usually find these controls in the Options or Preferences section of your browser. For example, you can set your browser to block all cookies or to alert you when a cookie is being set. Keep in mind that if you disable all cookies, some parts of Northsocial.ca may not function properly (for example, you might not be able to log in or certain preferences might not be saved). 

• Cookie Preference Center: (If we implement one) We may provide a tool on the site that lets you toggle certain categories of cookies (like opting out of analytics or advertising cookies while keeping necessary ones). Look for a “Cookies” or “Privacy Settings” link on our site interface. 

• Do Not Track: Some browsers have a “Do Not Track” (DNT) feature that sends a signal to websites requesting not to track your activity. The web industry doesn’t have a consensus on how to respond to DNT signals, and presently, Northsocial.ca does not respond differently to browsers with DNT signals. We treat all visitors the same with regard to cookies and tracking, but we give you direct choices as described above. 

• Third-Party Opt-Outs: If we use third-party analytics, we will provide you with a notice in the application and the ability to opt-out of this. If we use any advertising cookies from third-parties in the future, you can often opt out via industry sites such as the Digital Advertising Alliance of Canada’s consumer choice page at youradchoices.ca, which offers a centralized opt-out for interest-based advertising cookies. 

Note: Rejecting or deleting cookies may adversely affect your user experience. For example, your preferences might not be remembered, and you may have to log in each time you visit. 

How We Use Your Information 

We use the information we collect for various purposes in order to operate, protect, and improve Northsocial.ca, as well as to comply with legal obligations. Specifically, we use your information for: 

• Providing the Service: We use personal information to create and manage your account, provide the features and services you request, and facilitate interactions on the Platform. For example, we use your information to display your profile, to deliver the posts and messages you create to other users, and to show you content from others (such as showing you posts from users you follow, or listing your items on the Marketplace). 

• Customization: We may use data (such as your profile info, location, and activity) to personalize your experience. This could include suggesting friends or groups you might know or be interested in, prioritizing content in your feed (e.g., showing you local news or nearby Marketplace listings), and customizing notifications. 

• Communication: We’ll use your email or other contact info to send service-related communications. These include confirmations (e.g., account registration or purchase receipts), notifications (if you opt to receive alerts like someone commenting on your post or sending you a message), and administrative messages (for example, if we need to inform you of changes to our terms or policies, or if we detect suspicious activity on your account). If you subscribe to a newsletter or marketing communications, we’ll use your contact info for those as well – but you can opt out of non-essential emails at any time. 

• Safety and Moderation: Keeping Northsocial.ca safe is paramount. We use information (including content of posts and messages, and automated analysis) to monitor for and mitigate fraudulent, harmful, or illegal activity. For example, we might use automated systems to scan for spam or malware links in public posts or to detect harassing language that violates our community guidelines. Information we collect (like device identifiers, IP addresses, and message content) may be used to investigate and address violations of our Terms of Use or other policies. In certain cases, human moderators may review content that is reported by users or flagged by our systems to determine if it violates our rules. Note: Private communications (like private messages) are generally not monitored by humans unless reported for abuse by a participant, but automated tools may scan them for security (e.g., virus detection or spam prevention). 

• Improvement and Analytics: We use data (often in aggregated form, or with personal identifiers removed) to understand how users engage with Northsocial.ca and to improve our services. This includes troubleshooting issues (using logs and error reports), testing out new features, and conducting usage analysis to decide what new features to build or how to make the Platform more user-friendly. For example, we might track if a new homepage design is leading to users spending more time on the site, or see that many users are searching for a feature we haven’t built and use that insight to prioritize our development. 

• Advertising and Promotions: If we introduce advertising or sponsored content, we may use certain information to select and deliver ads (including personalized ads) and to measure their effectiveness. For instance, we might use your profile data, activity, and cookies to infer your interests and show you relevant ads. We might also use information like whether you clicked on an ad or visited an advertiser’s page to provide aggregated reports to advertisers (e.g., “X thousand users saw your ad, and Y% clicked on it”). If we send promotional offers or surveys, we might target those based on your use of the service (for example, inviting active marketplace sellers to a survey about a new selling feature). We will abide by applicable laws regarding marketing communications (including obtaining consent for certain types of messages where required, and providing clear opt-out mechanisms). 

• Compliance and Legal Obligations: We may process your personal information as required to comply with applicable laws, regulations, or legal processes. For example, we might retain transaction records for tax and accounting purposes, or disclose information in response to valid legal requests (like a court order or a law enforcement subpoena, as detailed in Section 5.3 below). We also process data to exercise or defend legal claims and to protect the rights and safety of our company, our users, or others. 

• Other Purposes with Consent: If we ever need to use your personal information for purposes not described in this Privacy Policy, we will seek your consent. For example, if we want to use your testimonial or profile in marketing materials, we would ask for your permission. 

Northsocial.ca processes personal information on one or more of the following legal bases, as appropriate: (1) with your consent (for example, for sending marketing emails or accessing certain device information); (2) as necessary to perform our contract with you (i.e., providing the Platform and services you request under the Terms of Use); (3) to comply with our legal obligations; and (4) for our (or others’) legitimate interests, such as maintaining the security of our systems, improving our services, and providing a safe community—balanced against your rights and expectations. When we rely on legitimate interests, we will ensure such processing is proportionate and respects your privacy rights. 

How We Share Your Information 

We understand that your personal information is important, and we are not in the business of selling it to third parties for independent use. We share user data only in the ways described below, and with appropriate safeguards. These are the scenarios in which we disclose personal information: 

Sharing With Other Users 

Certain information is shared with other users of the Platform by the nature of the service: 

• Public Profile: Some profile information about you is typically visible to other registered users (and possibly to unregistered visitors, if we allow public content viewing). This may include your name or display name, username, profile photo, bio, and general location if you’ve provided one (e.g., city or region). You control what additional info you add to your profile. 

• Your Posts and Content: Content that you post in public areas of the Platform (such as posts on a public forum, comments on public posts, marketplace listings, or content in public groups) will be visible to other users and, in many cases, to anyone on the internet. Public content can be accessed, viewed, and potentially collected by others (we remind you to consider this when posting). Content you share in private messages or private groups is only visible to the participants you send it to (subject to moderation as discussed). 

• Interactions: If you like or react to a post, comment on someone’s content, or follow a page or profile, those interactions may be visible to other users (for example, your comment and username will be displayed). In some cases, we might show other users that you took an action, such as “Alex liked this post” or “Dana is attending X event” (where allowed by your privacy settings). 

• Marketplace and Direct Transactions: If you engage in a transaction via the Marketplace, the other party will see information needed to carry out the deal, such as your name and any contact or delivery information you share with them (for example, if you provide a phone number or meet-up location in messages). We urge users to share the minimum necessary personal details and use in-platform communication as much as possible to protect their privacy. 

Please note: Public Content and Search Engines: Public profiles and content on Northsocial.ca may be indexed by search engines (e.g., Google) and appear in search results. This means that even after you remove content from our Platform, copies of it might remain accessible on search engines until they re-index our site or the content is removed from their caches. We will clearly notify you at the time of posting if content will be public/indexable. 

Service Providers and Partners 

We use trusted third-party companies to help us operate and improve Northsocial.ca. These service providers perform functions on our behalf and under our instructions, and they are bound by contractual obligations to protect your data and use it only for the agreed-upon purposes. Key types of service providers we use include: 

• Hosting and Infrastructure: We may host our website and databases with third-party cloud providers. For example, if we use cloud servers or content delivery networks (CDNs) to serve the site, your data (including personal information and content) will pass through and be stored on those providers’ systems. (We aim to use Canadian-based hosting for personal data whenever possible. If we use global CDN services like Cloudflare to cache public content, we do so to improve performance, and our Privacy Policy’s Cross-Border section explains how that works.) 

• Email and Communication Tools: We might use an email delivery service (like SendGrid, Mailchimp, or similar) to send out our emails – such as verification emails, password resets, newsletters, or notifications. To do this, we share your email address and the content of the email with that provider for the sole purpose of sending emails on our behalf. They are not allowed to use your email for their own marketing. 

• Analytics Services: As mentioned, we could use analytics providers like Google Analytics or others to collect and analyze usage information. These providers set their own cookies or identifiers to gather usage data. They act as our processors, meaning they cannot use that data except to provide analytics information to us (however, some providers may use aggregated data for improving their own services). We configure such tools not to collect unnecessary data – for example, we would not send them your name or contact info. 

• Payment Processors: If we handle payments (for example, for advertising fees or future paid features), we will use third-party payment processors (such as Stripe, PayPal, or similar). These processors will handle your payment card information securely. We do not store full credit card numbers on our own systems. Payment processors may have their own privacy policies governing the information we provide to them for transaction processing. 

• Security and Anti-Fraud Vendors: To enhance security, we might share certain data with services that help us detect and prevent fraud or abuse. For instance, we might use a service to verify that logins are not coming from malicious bots, or to check if an email address has been associated with spam. These providers would use the data only for fraud prevention and security analysis. 

When we transfer personal information to service providers, we remain responsible for it under PIPEDA’s accountability principle. We use contractual agreements to ensure these processors provide a comparable level of protection to your data as we do. This includes obligations to keep information confidential and to implement appropriate security measures. A list of our key service providers can be provided upon request (subject to any necessary confidentiality). 

We may also share information with partners in a limited sense – for example, if we collaborate with a third-party on a promotional event specifically for Northsocial.ca users, we might share a list of eligible users (e.g., to validate who can redeem a reward). Such sharing would only happen with your consent or as part of a disclosed program. 

Legal and Compliance Reasons 

We may disclose your information when we believe, in good faith, that such disclosure is necessary to: 

• Comply with the Law: If we receive a request through legal processes (such as a subpoena, court order, or government demand) that we determine we are legally required to respond to, we may release the requested information. We will review each request carefully and push back when appropriate (for example, if a request is overly broad). Where allowed, we may notify you of such requests. 

• Enforce Our Rights: We may share data if necessary to enforce our Terms of Use or other agreements, or to collect outstanding debts (for example, we might engage a collections agency for overdue advertiser payments and provide them with the minimum necessary info). 

• Prevent Harm: We may disclose information if we believe it’s necessary to investigate or address possible fraud, security threats, or technical issues, or to protect the rights, property, and safety of our users, the public, or Northsocial.ca. For instance, if we suspect an account is being used for phishing or spreading malware, we might share relevant information with law enforcement or other companies to coordinate protection. 

• Meet Regulatory Requirements: As a Canadian service, we may also disclose information to the Office of the Privacy Commissioner of Canada (or other privacy regulatory bodies) if required as part of an investigation or audit into our privacy practices, or to report a security breach affecting personal information (as required by law). 

We will not hand out personal information to law enforcement or government authorities without a valid legal reason. If we think a request is too broad, we will challenge it or ask that the scope be narrowed. Transparency is important to us – and while we must comply with law, we remain committed to the privacy and rights of our users. 

Business Transfers 

In the event that Northsocial.ca (Zynim Media Inc.) is involved in a potential or actual merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be transferred as part of that transaction. For example, if another company acquires us or our assets, personal data of our users would likely be one of the assets transferred. 

If such a transfer happens, we will ensure that your personal information remains subject to privacy protections consistent with those in this Policy. We will also provide notice to users (for example, via email and/or a prominent notice on our site) if your personal information will become subject to a different privacy policy as a result of a business transfer. 

Cross-Border Disclosure 

Because we use certain service providers that operate outside of Canada (for instance, global cloud or email services), and because the public content of our Platform can be accessed from anywhere in the world, personal information may be transferred across provincial or national borders. We store all personal data that you provide in private areas of the Platform exclusively on servers in Canada, and only public content or certain technical data may be processed or cached on servers outside Canada as needed to provide the service. When information is in another jurisdiction, it may be accessible by courts, law enforcement, and national security authorities of that jurisdiction under its laws. The Privacy Commissioner of Canada requires transparency about such foreign data transfers, so we want you to be aware that your data, while predominantly stored in Canada, could be transmitted through or reside in other countries for the reasons stated above. We discuss our cross-border data practices in more detail in Section 6 below. 

No Selling of Personal Information 

We do not sell your personal information to data brokers or marketers. “Selling” in this context means exchanging personal data for money or other valuable consideration to a third party for their own use (as defined by certain privacy laws like the California Consumer Privacy Act). We may share data as described in this Policy (with service providers, with advertisers in limited ways, etc.), but always for the purposes of providing our service or as otherwise outlined, not for the recipient’s independent use beyond supporting our service or as required by law. If in the future we consider any new data sharing that could be considered a “sale” under privacy laws, we will update this Policy and provide opt-in/opt-out choices as required by law. (Note: Since Northsocial.ca is a Canadian-focused service, we adhere to PIPEDA which doesn’t use the term “sale” of data in the same way, but we abide by the spirit of not exploiting your data for profit.) 

Cross-Border Data Transfer 

Northsocial.ca is a Canadian service with a primarily Canadian user base. We have designed our infrastructure to keep your personal data in Canada whenever possible. Where Data May Go: All content and personal information that you share in private contexts (such as private messages, private posts, or private groups) is stored, processed, and transmitted exclusively on servers located in Canada. Content that you post publicly (for example, public posts or comments, Marketplace listings, or business profile information) may be stored, cached, or transmitted on servers outside of Canada (for instance, via global content delivery networks) in order to deliver the service efficiently to users everywhere. We maintain backup copies of all data, including public content, on servers in Canada. We will also notify you at the time of posting if the content you are sharing will be public and thus potentially stored internationally. 

Foreign Laws and International Access: Whenever data is stored or transmitted outside of Canada, it may become subject to the laws of those foreign jurisdictions. For example, information processed on servers in the United States might be accessible to U.S. law enforcement or government agencies under U.S. laws (such as the USA PATRIOT Act or the CLOUD Act). Likewise, if you or other users access Northsocial.ca from outside of Canada, your data will travel through and be stored on networks and servers in those other countries as part of providing the service. This means that even though we store your data in Canada by default, when you use the Platform abroad or interact with users in other countries, some data transmission across borders is inevitable (e.g., your messages will travel to whatever location your recipient is in). 

Our Safeguards: Regardless of where your data travels, Northsocial.ca remains committed to protecting your privacy. In accordance with the principles of Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), when we transfer personal information to third parties or across borders for processing, we ensure that an equivalent level of privacy protection is applied. We choose reputable service providers and bind them with agreements to safeguard your information, including requirements for confidentiality, security measures, and limits on use of your data strictly for providing our services. We also continue to store primary copies or backups of your personal data in Canada whenever feasible and apply Canadian privacy standards to all personal information we handle. 

Despite these efforts, no method of data transfer or storage is completely without risk. Foreign governments or courts could, under their local laws, access personal information that is stored within their jurisdiction without notice to you or us. We want you to be aware of this inherent risk in cross-border data flows. By using Northsocial.ca, you understand that while we will do our best to keep your data in Canada and protect it, some data (especially public content or data necessary to deliver the service to users outside Canada) may be processed outside Canada and subject to foreign legal jurisdiction. We will continue to update our infrastructure and practices to minimize cross-border data exposure and will update this Policy as those efforts progress. 

Data Retention and Disposal 

We keep your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required or permitted by law. How long we retain specific data varies depending on the type of data and the purposes of processing. Here are some general guidelines: 

• Account Data: Information associated with your account (profile info, posts, etc.) is kept until you delete your account or until it is no longer needed to provide the services. If you delete your account, we will initiate deletion of personal information associated with your account, as described in Section 9.4 (Right to Erasure). Inactive accounts may be retained for a period of time in case you return, but we may delete or anonymize accounts that have been inactive for an extended duration (after providing notice if required). 

• Content: Content you post is retained until you delete it or as part of account deletion. If you remove a specific post or comment, it will no longer be visible to other users, but residual copies may remain temporarily in backup storage. We typically cycle through backups on a rolling basis (for example, backup snapshots might be kept for 30 days), after which deleted content should be fully expunged. Content that violated our terms and was removed by moderators may be retained internally for a longer period (to allow review or appeals, or to support investigations in case of illegal content). 

• Transactional Records: If you engage in transactions (e.g., advertising purchases or Marketplace sales through our payment tools), we may retain records of those transactions for a period required for financial reporting and compliance (for instance, Canadian tax law may require retaining records for 6 years). 

• Logs and Analytics: Our server logs and analytics data may be retained for a shorter period for troubleshooting and analysis (often 12-24 months), and then either deleted or anonymized (aggregated). If analytics data is aggregated (so it no longer identifies you), we may retain it longer for historical trends. 

• Legal Requirements: We might need to retain certain data for longer if required by law or if necessary to resolve disputes or enforce our agreements. For example, if we receive a legal order to preserve data, we will comply and keep the relevant information for as long as instructed. Similarly, if we are handling a dispute or claim involving a user, we might retain data until it is resolved. 

When we no longer have a legitimate need or legal obligation to retain your personal information, we will securely delete or anonymize it. We use reasonable measures to securely dispose of or destroy personal information to prevent unauthorized parties from accessing it. For example, digital data may be securely erased, and physical media containing personal data will be shredded or destroyed. 

Security Measures 

We take the security of your personal information seriously. Northsocial.ca implements administrative, technical, and physical safeguards designed to protect your data against unauthorized access, loss, theft, or alteration. Some of the security measures we employ include: 

• Encryption: The Northsocial.ca website and app employ encryption protocols (such as HTTPS/TLS) for data in transit. This means that information exchanged between your device and our servers is encrypted. For sensitive data (like passwords and authentication tokens), we also apply hashing or encryption at rest in our databases. 

• Access Controls: We restrict access to personal information to employees, contractors, and agents who need that information to operate, develop, or improve our Platform. These individuals are bound by confidentiality obligations. Within our organization, user data can only be accessed with appropriate privileges, and we regularly review those access permissions. 

• Authentication: To protect your account, we store your password in a hashed form (using a secure one-way hashing algorithm) – which means we do not store your actual password in plaintext. We encourage you to choose a strong, unique password for Northsocial.ca and to enable any additional security features we may offer (such as two-factor authentication) when they become available. 

• Monitoring and Testing: Our systems are monitored for suspicious activity. We employ firewalls and intrusion detection systems to guard our network. We also conduct periodic security audits and tests (including vulnerability assessments and potentially penetration testing by security professionals) to evaluate and improve our security posture. 

• Secure Development Practices: Our engineering team follows secure coding guidelines. We keep our software and third-party libraries up-to-date to patch known vulnerabilities. We also apply the principle of least privilege in system design – each component of our infrastructure has access only to the data and resources necessary for its role. 

• Backups and Recovery: We perform regular backups of critical data to prevent loss. These backups are stored securely (encrypted where possible). We have a disaster recovery plan in case of system failures, to restore availability of the Platform quickly. 

Despite our efforts, no security measures are infallible. The internet is not 100% secure, and we cannot guarantee that data breaches will never occur. In the event of a data breach that poses a real risk of significant harm to you, we will notify you and the appropriate authorities as required by law and will take steps to mitigate the breach. We also remind users to play a role in protecting their information: please keep your account credentials safe, avoid sharing your password, and alert us immediately if you suspect any unauthorized access to your account. 

Your Rights and Choices 

As a Northsocial.ca user, you have certain rights and choices regarding your personal information. We strive to provide you with access to your data and control over how it is used, in line with Canadian privacy principles and other applicable laws. Here is an overview of your rights and how to exercise them: 

Right to Access Your Information 

You have the right to request access to the personal information we hold about you. This is sometimes called a “Data Access Request.” Subject to certain exceptions (e.g., if providing access would reveal personal information about another individual or other confidential information), we will provide you with a copy of your personal information in our records, typically within 30 days of your request as required by PIPEDA. 

• How to Request Access: You can initiate an access request by contacting us at [email protected] with the subject “Data Access Request.” To protect your data, we will need to verify your identity before releasing information (for example, by confirming control of your account or asking for certain identifying details). 

• Format: We will typically provide the information in a concise, understandable form, and if feasible, in a commonly used electronic format. If you need an alternative format for accessibility reasons, please let us know. 

• Scope: Access will include what personal data we have about you, the purposes for which we use it, and which third parties (if any) it has been disclosed to. We’ll omit any information that is proprietary (e.g., internal assessments) or that cannot be provided for legal reasons. If we cannot provide certain data, we’ll explain why. 

Right to Correction (Rectification) 

We aim to keep your personal information accurate and up-to-date. If you discover that any information we have about you is incorrect or incomplete, you have the right to request that we correct it. 

• Self-Service: Many profile details can be corrected by you directly by logging into your account settings (e.g., you can update your email address, profile picture, or other optional info). We encourage you to make sure your profile information is current. 

• Requesting Corrections: For information not editable by you (or if you prefer us to handle it), you can send a correction request to [email protected] describing the inaccuracy and the desired correction. We may ask for documentation if needed (for example, if you claim we have your date of birth wrong, we might request verification). We will correct verified inaccuracies within a reasonable time and send you confirmation. If for some reason we cannot fulfill the requested correction, we will explain the reason (such as if we disagree that the data is incorrect and it’s an evaluative opinion rather than factual data). 

Withdrawal of Consent 

In cases where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. For instance, if you consented to receive our newsletter or to let us access your device location, you can change your mind later. 

• Marketing Emails: Each marketing or promotional email we send will include an “unsubscribe” link. You can click that at any time to opt out of future marketing emails. (Note: You will still receive transactional or service emails like account notifications or password resets, as these are not marketing communications.) 

• App Permissions: If our mobile app requests permissions (like access to your contacts or photos) and you granted them, you can usually revoke those permissions in your device’s settings. 

• Profile Visibility: If you consented to appear in certain public listings (for example, being listed as a member of a group), you can typically change the visibility in settings or by leaving the group. 

• Effect of Withdrawal: Withdrawing consent will stop the future processing of the relevant information, but it does not undo processing that has already occurred. For example, if you withdraw consent for us to use your location, we will stop tagging new posts with location data, but any past posts you made that included location might still display the previously provided location info (you could delete those posts if you choose). 

Please note that withdrawing consent in some cases might limit your ability to use certain features. For instance, if you withdraw consent for us to process your personal information entirely, we may need to close your account if we cannot provide the service without the data. We will inform you if that is the case. 

Deletion of Account and Data (Right to Erasure) 

You have the option to delete your Northsocial.ca account if you no longer wish to use our service. Deleting your account is the primary way to request deletion of your personal data from our systems. 

• How to Delete Your Account: You can initiate account deletion in your account settings under “Delete Account” (or by contacting support if you have trouble using the automated process). We may ask you to confirm this action (and re-enter your password) because it is irreversible. 

• Deletion Process: Once deletion is confirmed, we will begin the process of removing or anonymizing personal information associated with your account, as described in our Data Retention section. The process may take a short period of time to complete, but your profile and content will become inaccessible to other users promptly. 

• Data That May Remain Temporarily: Some information might not be fully deleted immediately for reasons outlined under Data Retention (e.g., it’s stored in a backup or is needed for legal compliance). However, such data will be sequestered (isolated from active use) and protected until it can be safely deleted. Also, note that content you submitted that was shared with others (like posts you made in a group that were reshared by others) might persist under another user’s account. We will do our best to delete your contributions from our platform, but we cannot delete data that resides in someone else’s account. For instance, messages you sent to a friend will reside in their inbox; those messages will no longer be linked to your profile (the sender will appear as “Deleted User”), but the friend will still have the message in their possession. Similarly, if you posted a comment on someone else’s post and then deleted your account, your comment may remain (possibly attributed to an anonymized “Deleted User”). 

• Partial Deletions: If you do not want to delete your entire account but want certain content removed (e.g., you posted something publicly and now want it erased), you can always individually delete posts, comments, or other content from within the Platform. Such deletions will take effect as described in Section 7 (the content will be removed from active view and then eliminated from backups over time). If any residual traces remain on our servers after you delete content, we will clear them out in accordance with our standard retention policy. 

• Important Note: Deleting your account does not guarantee that all public traces of your activity are gone. As mentioned, search engines or third-party archives might have cached copies of your public posts or profile information. Northsocial.ca cannot remove content from those external systems, and such content may remain available through those services even after it is deleted from our Platform. 

PIPEDA (the Canadian privacy law) doesn’t explicitly provide a “right to erasure” like the GDPR in Europe does. However, organizations are expected to destroy personal information that’s no longer needed for the purpose it was collected (and no legal requirement to keep it). We interpret a user’s account deletion as a clear indication that the data is no longer needed for the purpose of providing the service, so we act accordingly unless retention is required for a specific legal reason. 

Portability 

While not explicitly mandated by PIPEDA (data portability is something proposed in Canada’s forthcoming Consumer Privacy Protection Act, CPPA), we support the idea of data portability as a courtesy to our users. This means you have the right to obtain a copy of your personal data in a format that you can take to another service. 

• What Can Be Ported: Upon request, we can provide you the main personal data you have provided to us or that was generated through your use of Northsocial.ca, in a commonly used electronic format (such as JSON or CSV files). This could include your profile information, the posts and comments you have made, messages (possibly in a machine-readable dump), and any transaction history. We will not include data that pertains to others (e.g., messages others sent to you—those other users would have to request their own messages). We also may not include any proprietary assessments or internal notes (like internal risk scores or moderation decisions), but you’ll get the raw data that you created. 

• How to Request Portability: You can contact [email protected] with the subject “Data Portability Request.” For now, this process might be manual, but we’ll compile your data and provide it to you securely (likely by secure download or encrypted email). We will need to verify your identity to ensure we’re exporting the data to the rightful owner. 

• Relationship to Access Requests: This ties into the access request right – essentially, when you request access to your data, the copy we give you can also be used for portability. We will make sure it’s in an understandable and structured form that could be imported into other tools or services if you so choose. 

We do not currently have an automated “download your data” button, but as our platform grows, we may implement that for your convenience. 

Challenging Compliance and Privacy Questions 

If you have questions, concerns, or complaints about our privacy practices, including how we handle your personal information, we encourage you to contact us. We take your privacy rights seriously and will work to address your inquiry: 

• Contacting Northsocial.ca: You can reach our privacy team at [email protected]. Please provide detail about your question or concern, and if it’s a specific request (like access or correction), make it clear in your communication. We may need to verify your identity for security reasons before providing certain information or making changes. 

• Response Timeline: We will acknowledge receipt of your inquiry, and aim to respond within 30 days or sooner as required by law. If we need more time to address a complex issue, we will let you know and provide a reason for the delay. 

• Privacy Commissioner: If you are not satisfied with our response to a privacy issue, you have the right to escalate your concern to the Office of the Privacy Commissioner of Canada (OPC). The OPC can be contacted via their website (priv.gc.ca) or by phone at 1-800-282-1376. They also have online forms and addresses available for submitting complaints. We would appreciate the opportunity to address your concerns first, but you may directly approach the OPC at any time. 

We will document and investigate all privacy complaints. If a complaint is found to be justified, we will take appropriate measures, including, if necessary, amending our policies and practices. 

Other Choices and Preferences 

In addition to the rights above, we provide various controls within the Platform for you to manage your experience: 

• Privacy Settings: We may offer settings that let you configure who can see your profile or certain content (for example, the ability to make your profile visible only to friends vs. public, or to make a specific post visible to a group vs. the entire site). Please review your account settings to adjust these to your comfort level. 

• Notifications: You can control the push or email notifications you receive from us. For instance, you might toggle whether you want to be emailed when someone sends you a message, or if you prefer only an in-app notification. These controls are typically in your profile or notification settings. 

• Cookies: As mentioned in Section 3, you can manage cookies through your browser or our provided tools, which gives you control over analytics and advertising related cookies. 

• Profile Visibility on Search: If we allow search engines to index user profiles, we may provide an option to hide your profile from public search results. This might be a toggle like “Allow search engines to index my profile.” Turning it off would include a directive in your profile page to discourage indexing (though it’s ultimately up to search engines to honor it). 

We encourage you to familiarize yourself with the available settings and tools. We’ve designed them to give you meaningful control over your personal information and how it’s shared on Northsocial.ca. If you need any assistance finding or using these options, please contact our support team. 

Children’s Privacy 

Northsocial.ca is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, you must not use Northsocial.ca or submit personal information to us. If we learn that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information as soon as possible, unless we are legally obligated to retain it. 

We encourage parents and guardians to educate their minors about online safety and to monitor their use of internet services, including Northsocial.ca. 

If you are a parent or guardian and you discover that your child under 18 has created an account or provided us with personal information, please contact us at [email protected]. We will delete the account and any related information promptly upon verification of the request. 

Updates to this Policy 

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will revise the “Last Updated” date at the top of the Policy. For significant changes, we will provide a more prominent notice (for example, by posting a notice on our website homepage or by emailing you, if you have provided an email address). 

Significant changes might include, for example: expanding how we use personal data beyond the purposes listed, changing how third parties are involved in data processing, or launching new features that affect privacy in a meaningful way. If we plan to use your personal information in a manner materially different from that stated at the time of collection, we will seek your consent for those new uses as required by law. 

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of Northsocial.ca after any changes to this Privacy Policy means you accept the revised terms, so it’s important you understand them. If you do not agree with a change, you should stop using the Platform and may delete your account as outlined above. 

Contact Us 

If you have any questions or comments about this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights, please reach out to us: 

• Email (Privacy Inquiries): [email protected] 

• Mail: Zynim Media Inc. – Privacy Officer, 8465 Harvard Place, Unit 12, Chilliwack, BC, Canada, V2P 7Z5 

• Support Contact: For general support or questions unrelated to privacy, you can contact [email protected]. But if it’s privacy-specific, use the privacy email so it reaches the right team. 

If you need to escalate a privacy concern, you may also contact the Office of the Privacy Commissioner of Canada as noted in Section 9.6. We appreciate your trust in Northsocial.ca and are committed to protecting your privacy and providing a safe community for all users. Thank you for taking the time to read our Privacy Policy. 

Use of AI Systems and Access to User Content 

AI and Public Content 

Northsocial.ca acknowledges that public content on the Platform may be accessible to external AI systems. Any content you post publicly (such as public posts, public Marketplace listings, or comments in public groups) may be visible to third-party internet users, including automated crawlers used by large language model (LLM) providers and other AI services. This means that public information on Northsocial.ca could potentially be collected and analyzed by AI algorithms operated by companies such as OpenAI, Google, Anthropic, or others. While we do not actively distribute your content to such services, we cannot prevent publicly available information from being accessed and used by these tools in accordance with their own data usage policies and applicable copyright laws. In short, if you post content publicly on Northsocial.ca, it might end up being part of the data that external AI systems train on or respond with, much like any other public website on the Internet. Please consider this when posting public content. We will clearly inform you when you are about to post something publicly, so you are aware of its visibility. 

Protection of Private Content 

We are committed to safeguarding your privacy. Content you post in private areas of the Platform – such as private messages, private groups, or any area marked as private – will not be shared with or made accessible to third-party AI platforms or scraping technologies. Northsocial.ca implements technical and policy-based controls to ensure that this private content remains protected from unauthorized access, including by automated systems. For example, we use measures like the robots.txt standard and other access controls to discourage or prevent web crawlers from accessing user pages that contain private or sensitive information. Additionally, any internal AI tools we might use for moderation (as described below) are designed to respect the confidentiality of private content. In summary, your private communications and posts on Northsocial.ca are not voluntarily provided to external AI datasets, and we actively seek to block or deter any automated scraping of such content. 

Northsocial.ca’s Use of AI Tools 

Northsocial.ca may develop or utilize internal AI systems for purposes such as content moderation, personalized feed recommendations, or user safety enhancements. These internal AI tools operate under our control and are bound by the same privacy commitments outlined in this Policy and our Terms of Use. Specifically: 

• Content Moderation: We might use AI or machine learning algorithms to help detect content that violates our community guidelines (for example, identifying spam or explicit imagery). Any use of your content by such AI is solely to flag potential issues for review; the content is not used to train external models nor is it shared outside our organization. The AI moderation tools do not publish or distribute your private content – they only analyze it internally and alert our moderators if needed. 

• Feed Personalization: To improve your experience, we may use algorithms (some AI-driven) to suggest content that you might find interesting (for instance, highlighting posts or groups that align with your interests). These algorithms might consider your activity on the Platform (like pages you follow or content you engage with) to make recommendations. This process is automated, and while it profiles your usage to a degree, it does not reveal your personal data to any outside entity. 

• Respect for Content Rights: Any use of your content by Northsocial.ca’s AI tools will be limited to what is necessary to provide, maintain, or improve Platform services, and will comply with applicable copyright laws and the terms outlined in our Terms of Use and Privacy Policy. We will not republish, commercialize, or redistribute your original content outside of the Platform via AI without your explicit permission. For example, we won’t take a poem you wrote and posted to a private group and then use an AI to publish it elsewhere.