Privacy Policy
Version 0.5.0-draft · Effective 2026-10-22
Draft privacy guidance for the UNPLUG concept and prototype. No pilot is running; verification and payments are unavailable. Pending legal review before launch.
Who we are
UNPLUG is operated by The Upper Room Ventures Incorporated, headquartered in Edmonton, Alberta. We are the data controller for personal information collected through the UNPLUG service.
Security safeguards
Encryption in transit and at rest, role-based access, and audit logs on sensitive operations.
1. What we collect
Real verification is unavailable; verification screens do not collect government ID or selfies. Prototype data includes email and profile data you supply (display name, photo, vibe tags, dietary information, mode preferences), event attendance and ratings, in-app actions, device/browser metadata, and a hashed IP address attached to each legal-document acceptance for audit purposes.
2. Why we collect it
To support prototype profiles, preferences and feedback, to maintain a verifiable record of which legal terms you accepted and when, to detect and prevent fraud and ban evasion, and to improve the service.
3. Legal basis (Canada)
Our privacy practices are intended to respect applicable Canadian and Alberta privacy requirements, including PIPEDA and Alberta PIPA where applicable. This is not a certification of legal compliance. You may withdraw consent subject to legal and contractual obligations.
4. Service providers (processors)
The prototype uses Lovable-managed Supabase for authentication, database and storage, and Lovable-managed email for account and contact messages. SMS and identity verification are unavailable. Processor relationships and contract terms require owner confirmation before launch. We do not sell personal information. Information is disclosed to law enforcement only when legally compelled. Any future event sharing would be limited to other members at your table and the hosting venue (first name and reservation details).
5. Retention
We retain personal information only as long as needed for the purposes above. You may request deletion of your account at any time. Records required to meet tax, accounting, or other legal obligations — including payout records and any T4A information slips issued under the Income Tax Act — may be retained for the period required by law even after a deletion request, and only for that purpose.
6. Your rights
You have the right to access, correct, and request deletion of your personal information, and to withdraw consent. For these requests, contact hotdrop.founder@gmail.com.
7. Complaints
If you believe your information has been mishandled, contact us first. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or, for Alberta-regulated matters, the Office of the Information and Privacy Commissioner of Alberta (https://oipc.ab.ca).