Privacy Policy

1. Information we collect

Account information. When you create an account we collect what your sign-in method provides: your email address (email/password or Google sign-in), your name and profile photo if Google provides them, or your mobile phone number (phone sign-in). Passwords are handled by Google Firebase Authentication; we never see or store them.

Preferences. The deal categories and price groups you follow, which channels you want alerts on (email, text message, browser push), and a phone number for text alerts if you provide one.

Browser push tokens. If you enable browser notifications, your browser gives us a push token that lets us send notifications to that browser. It doesn't identify you on its own.

Likes. Which deals you've "loved". Only the total count per deal is public; which deals you liked is visible only to you.

Technical information. Our hosting provider records standard server logs, such as IP address, browser type, the pages requested and timestamps, for security and troubleshooting. Phone sign-in uses Google reCAPTCHA to prevent abuse, which is subject to Google's Privacy Policy and Terms.

What we don't collect. We don't use advertising trackers or analytics tools, and we don't sell, rent or trade personal information.

2. How we use your information

• To create and secure your account and sign you in.
• To send the deal alerts you ask for, by the channels you choose, for the categories and price groups you follow.
• To show which deals you've liked and keep accurate like counts.
• To operate, secure and improve the Service, including preventing abuse and fixing problems.
• To respond to your questions and requests, and to meet legal obligations.

We only use your information for these purposes, or for others you consent to or that the law permits.

3. Consent and deal alerts

Deal alert emails and text messages are only sent if you switch them on in your notification preferences. Email alerts are off for new accounts until you opt in. Every alert email identifies GotDeals and includes a working unsubscribe link, which takes effect immediately. You can also change any channel at any time under Preferences. To stop text alerts, turn them off in Preferences. To stop browser push alerts, turn them off in Preferences or block notifications in your browser.

You may withdraw consent to other uses of your information at any time, subject to legal or contractual restrictions. Withdrawing consent may mean we can't provide parts of the Service; for example, we can't send alerts without a way to reach you.

4. Service providers and where your information is stored

We use trusted service providers to run the Service. They process personal information on our behalf, only for that purpose:

• Google (Firebase and Google Cloud): sign-in, database, file storage, hosting, push notifications and reCAPTCHA. Our data is stored in the United States.
• Sender.net: delivers alert emails (your email address and the alert content).
• Twilio: delivers text-message alerts if you turn them on (your phone number and the alert content).
• Google Gemini API: helps write deal descriptions and images from the deal's web page and our staff's notes. No user personal information is sent to it.

Because these providers are located or store data outside Canada, mainly in the United States, your information may be processed there and may be accessible to courts, law enforcement and national security authorities of those countries under their laws. We use contracts and safeguards to protect it. For questions about how our service providers outside Canada handle personal information, contact our privacy contact at info@gotdeals.ca.

We may also disclose information if required by law, to protect the rights or safety of our users or others, or as part of a business transaction such as a merger or sale, where the information remains protected by this policy.

5. Retention

We keep account information, preferences and likes for as long as your account is active. When you delete your account (see below) we delete your profile, preferences, push tokens and likes within 30 days, except where we must keep information to meet legal obligations. Server logs are kept for a limited period by our hosting provider and then deleted automatically. Aggregate records, such as how many alerts were sent for a deal, contain no personal information.

6. Your rights

You may ask to access the personal information we hold about you, to correct it, or to delete your account and its information. Email info@gotdeals.ca from the address on your account, or tell us the phone number you signed in with; we may need to verify your identity. We'll respond within 30 days. If you're not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta. If you live in Quebec, you may also have rights under Quebec's privacy law.

7. Security

We protect personal information with safeguards appropriate to its sensitivity, including encrypted (HTTPS) connections, access controls that prevent other users from reading your data, restricted administrative access, and secrets kept in Google Secret Manager. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach that poses a real risk of significant harm, as the law requires.

8. Cookies and local storage

We don't use advertising or tracking cookies. Your browser stores a sign-in session (through Firebase Authentication) so you stay signed in, and a push-notification service worker if you enable browser alerts. reCAPTCHA may set its own cookies when you use phone sign-in. You can clear these in your browser settings; you'll then need to sign in again.

9. Children

The Service is not intended for children under 13, and we don't knowingly collect their personal information. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

10. Changes to this policy

We may update this policy from time to time. We'll change the effective date above and, for significant changes, notify you on the Service or by email before they take effect.

11. Contact

Privacy contact: GotDeals Inc
PO Box 99900 UB 895 236, RPO Callaghan, Edmonton AB T6W 4R5
info@gotdeals.ca