Privacy Policy

1. Who We Are

BookFlip Technologies Inc. (“BookFlip”, “we”, “us”) operates the BookFlip marketplace platform at bookflip.ca. We are the data controller for personal data collected through the Service. Our Data Protection Officer can be reached at privacy@bookflip.ca.

2. Information We Collect

• Account data: name, email address, password (hashed), city, province/state, country.
• Profile data: biography, avatar photo, preferred meeting point.
• Transaction data: book listings, exchange and purchase records, messages between users, reviews.
• Billing data: commission invoices, payment method status (we do not store raw card numbers — these are held by Stripe, Inc.).
• Device and usage data: IP address, browser type, IANA timezone, access logs, and cookies.
• Location data: approximate location via browser geolocation API (only with your permission).

3. How We Use Your Information

• Providing and operating the Service, including matchmaking between buyers and sellers.
• Processing commission invoices and subscription payments.
• Sending transactional notifications (exchange requests, acceptance, billing).
• Improving and personalising the Service.
• Preventing fraud, abuse, and policy violations.
• Complying with legal obligations (e.g. tax reporting, CRA requirements).

Our legal bases for processing include: performance of our contract with you; compliance with legal obligations; our legitimate interests in operating a safe and lawful marketplace; and, where required, your consent.

4. Sharing of Information

We do not sell your personal data. We share data only:

• With other Users as necessary to facilitate a transaction (e.g. your city and first name are shown to a counterparty).
• With service providers such as Stripe (payments), Supabase (database), Vercel (hosting), and email delivery providers, under data processing agreements.
• For legal compliance when required by law, court order, or government authority.
• In a business transfer if BookFlip is acquired or merges with another entity (you will be notified).

5. International Transfers

Your data may be processed in Canada, the United States, and other countries where our service providers operate. Transfers outside the European Economic Area are protected by Standard Contractual Clauses or an equivalent transfer mechanism recognised by applicable data protection law.

6. Data Retention

We retain your account data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations (e.g. tax records for 7 years under Canadian law). Transaction records and commission invoices are retained for the period required by applicable law. You may request deletion of your personal data at any time, subject to settlement of outstanding balances and legal retention requirements.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you (data export available in Account Settings).
• Correct inaccurate data.
• Request erasure (“right to be forgotten”) — available through Account Settings after clearing outstanding balances.
• Object to or restrict processing.
• Data portability (receive your data in a structured machine-readable format).
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your supervisory authority (e.g. the Office of the Privacy Commissioner of Canada, the ICO in the UK, or your national DPA in the EU).

To exercise any of these rights, contact privacy@bookflip.ca. We respond within 30 days.

8. Cookies and Tracking

We use strictly necessary cookies to operate the Service (session management) and, with your consent, analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings. We do not serve third-party advertising cookies.

9. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will delete it promptly.

10. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no system is completely secure. You use the Service at your own risk.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on the platform. Continued use of the Service after the effective date of changes constitutes acceptance.

12. Contact

BookFlip Technologies Inc.
Ottawa, Ontario, Canada
Privacy: privacy@bookflip.ca