Privacy Policy

Canappon is operated as a sole proprietorship in Ontario, Canada, under the registered business name “Canappon.” We handle information about users, advertisers, visitors and people contacting us under this Policy and applicable law.

This Policy covers information under our control. Check the practices of advertisers and external registration services when you communicate directly with them. Using processors does not remove legal accountability that remains with Canappon.

We handle email addresses, authentication identifiers, display names, avatars, biographies, activity areas, spoken languages, website and social links, language and visibility settings, account status and related information. Optional details are stored when you provide them.

Amazon Cognito handles passwords and authentication; our application database does not store your password itself. Google sign-in supplies necessary authentication information, such as email and basic profile details, through Google and Cognito. We do not request access to Google Drive, Gmail, calendars or contacts for Google sign-in.

For the 18+ confirmation, we record an account identifier, confirmation date and time, and method; we do not require your date of birth. Terms acceptance and acknowledgement of this Policy include versions, timestamps, the account identifier, and the registration method through which it was recorded.

Depending on the features you use, we handle text, photos, listed contact details, addresses or map positions, conditions, prices, publication status, expiry, edit history and similar information for Jobs, Housing, Marketplace, Services, Coupons and Community. This includes drafts and photos not yet published.

We store saved items, saved-search criteria including search terms and map bounds, thread-notification choices, relationships to your posts and replies, notification preferences, delivery targets and results. These support personal account features rather than general disclosure to other users.

Coupon records include coupon and user identifiers, time of use, conditions at that time, and cancellations with reasons. You and authorized administrators can access relevant records as needed for the feature. Coupon actions are not a payment feature requiring or storing card details.

Contact-form replies, optional names, categories and messages are delivered through AWS email services to our Google Workspace mailbox. We may handle reports, appeals, inquiries and replies, review outcomes, moderation actions and related records.

Operational logs may contain access times, IP addresses, visited URLs, browser and device information, processing results, identifiers and other technical data. Do not include identification documents, passwords, verification codes or card numbers in ordinary posts or inquiries. If identity verification is necessary, we will explain its purpose and the information needed.

We use information as needed for the following purposes. Where a new purpose requires consent, we will explain it and obtain the required consent before proceeding.

• Authentication, account management, age and legal confirmations, profiles, listings and posts
• Search, region and map display, saved items and searches, My Community and coupon records
• Selected search, reply and expiry notifications, and necessary account, safety and operational communications
• Contact handling, reports and fraudulent-job reviews, rights protection, abuse prevention and troubleshooting
• Understanding and improving service usage, compliance with law and lawful requests

If you enable a public profile, its selected public details, registration period and public listings may be visible to signed-out visitors. We do not automatically put your account email, drafts, saved searches or personal use history on that profile.

Public listings and Community text and photos may be viewed or saved by signed-out visitors, search engines and others. Personal information you include in content, photos or public contact details may become public too. Check the visibility and required-field guidance on each form.

Some information, including Marketplace contact details and certain coupon details and codes, requires sign-in to view. This is not a guarantee of confidentiality; authorized viewers may save or reshare it. Administrative access is assigned according to permissions.

Apart from processing, lawful requirements, publication you direct and operation of the requested features, we do not disclose personal information for unrelated purposes. We do not sell personal information or provide user information for unrelated advertising or external AI training.

AWS provides authentication through Cognito, databases through Aurora, storage and delivery through S3 and CloudFront, hosting through Amplify, email through SES, and maps and address search through Amazon Location, among other operational services. We use Google for Google sign-in, our Google Workspace mailbox and production Google Analytics.

Our principal application databases and storage are based in a Canadian AWS region. This does not mean all processing, including global delivery networks, authentication, support and Google services, is confined to Canada. Information processed abroad may be subject to local laws and lawful government or court access.

If you follow an external application, advertiser contact, social, booking or event-registration link, check that operator’s terms and privacy information. Google sign-in and Google Workspace handling of our contact mailbox are separate uses.

We use cookies and browser storage for sign-in, authentication, language and related functions. Some processes, such as email verification, may retain in-progress information in the browser session. Restricting cookies can prevent features such as sign-in from working.

We use Google Analytics 4, provided by Google, only when enabled in production and after you allow analytics cookies. It does not load before a choice or after refusal, and development does not send analytics data to Google. To count page visits and navigation, page categories, browser and device information, approximate location and cookie identifiers may be processed and sent to Google.

Google Analytics excludes authentication, profile-editing and administration pages and removes search conditions and URL identifiers from page information sent. We do not deliberately send names, email addresses or post bodies as analytics events, or use analytics for advertising personalization. Canappon does not sell analytics data. User and event data retention follows the GA4 property's retention settings; aggregate reports may be retained separately.

Choose through the notice and Details and settings, and change your choice at any time through Cookie settings in the footer. The choice is stored in this browser for about six months. Refusal does not prevent using the site. Withdrawal stops future Google Analytics transmission and removes analytics cookies the site can delete, but does not automatically erase information already received by Google. Cookie settings also links to Google's explanation of its data use.

We count daily views of public pages without cookies or persistent visitor identifiers. This counting operates before a cookie choice and after refusal, and is not linked to account information. AWS processes the public page identifier and viewing time; the metrics exclude search terms, post content, email addresses, authentication details and referrer URLs. AWS processes IP addresses and other information to handle the connection, but our metrics logs do not store IP addresses or browser information. Individual view records expire after 30 days and daily summaries after 365 days. These are page-view counts, not visitor counts, and may differ from actual readership due to blocked requests, bots and other factors. Your Google Analytics choice applies separately.

In addition to authentication, account-security and necessary operational messages, features and settings can generate Community replies, saved-search matches and listing-expiry notices. Manage replies through thread and notification settings, search alerts through saved searches, and expiry notices through notification settings.

Optional emails include a link to stop that category or all optional emails without signing in. Opening the page alone changes nothing; confirm the stop action. New reply and expiry email preferences start disabled. Existing stored choices are preserved. We record the category, time, method and explanation version of preference changes. Authentication, security and necessary moderation messages are not stopped by optional-email choices. Registration does not require blanket consent to advertising broadcasts. Delivery may be delayed, fail or be duplicated.

Active account and listing information is retained according to the features provided, your settings and publication status. For inquiries and operational records, we assess the necessary period using the response purpose, dispute or abuse concerns, legal duties, sensitivity and applicable law. Not every category has a uniform automatic deletion period.

Ordinary operational targets are 90 days for completed notifications and delivery records, about one year after the last handling of a resolved report, seven days for unused temporary uploads, and about two years for optional-email preference evidence. Inquiries are reviewed by the mailbox operator about one year after resolution. About 90 days after completed withdrawal, we remove the link to the original authentication identifier, while retaining minimal profile identifiers needed for conversation structure. Records needed for disputes, abuse investigations or legal preservation are managed separately and their necessity is reviewed.

We delete or anonymize personal information no longer needed. We may retain minimal information needed for legal preservation, rights claims, abuse investigations or completion of deletion. Backups and caches can retain earlier copies until their normal replacement or retention periods expire.

We use measures appropriate to the information, including authentication, permissions, non-public storage, and encryption in transit and at rest. For a breach, we will assess circumstances, contain harm and make reports and notifications required by law. We cannot guarantee absolute security or freedom from incidents.

Withdrawal deletes the authentication account, public profile, saved information and notification preferences, and unpublishes Jobs, Housing, Marketplace, Services and Coupons. Listing text, contacts and photos are deleted or replaced with deleted-content placeholders. Processing occurs in stages; failures may delay completion.

Choosing deletion for Community replaces your text and photos with deleted-content indicators while retaining others’ replies and conversation structure. Choosing retention without your name removes the displayed name and profile link but keeps text and photos. These may still identify you, so this is not complete anonymization.

Minimal profile identifiers and processing records showing withdrawal, and coupon-use records detached from your account, may remain. The current completion process deletes your legal-acceptance and age-confirmation records. Re-registering with the same email creates a new account.

We cannot collectively recall delivered emails, copies held by others or external search caches. Contact the privacy mailbox for additional deletion or other requests about information we hold.

Use My page for profile, visibility, saved information and notification settings, and the account deletion page to withdraw.

You may contact us about purposes, access, correction, deletion, withdrawal of consent and complaints concerning your information. We may verify identity in a proportionate way without seeking excessive details. We will respond according to applicable legal deadlines and requirements, explaining refusals, limitations or extensions to the extent permitted.

Withdrawing consent may make features requiring that information unavailable. Other people’s information, lawful preservation and retention duties can limit access or deletion. This Policy does not waive statutory rights. You may also contact or complain to a competent authority, including the Office of the Privacy Commissioner of Canada.

We display the update date on this page. Material changes to purposes, visibility and similar practices will receive the required notice or consent process. We do not treat earlier consent as blanket permission for unrelated use.

Privacy Officer / Canappon (Ontario, Canada): privacy@canappon.com. You can also use the contact form.