Privacy Policy

This Privacy Policy explains how Bunkmate (“we”, “us”), based in Montreal, Canada, collects, uses, shares and protects your personal information. We comply with Canada’s PIPEDA and anti-spam law (CASL), and, where applicable, the EU/UK GDPR.

1. Information we collect

• Account & profile: name, email, password (hashed), phone, photo, bio, skills, languages, location and travel plans.
• Listings & applications: properties, openings, applications, messages and reviews you create.
• Usage: pages viewed and basic, privacy-friendly analytics.
• Payments: handled by Stripe; we store a customer reference and subscription status, not your card details.

2. How we use it

• operate the marketplace — matching, applications, messaging and reviews;
• send transactional and account emails (you can opt out of non-essential ones);
• maintain safety, prevent fraud and abuse, and meet legal obligations;
• improve the Service.

3. Email & marketing (CASL/CAN-SPAM)

We send transactional emails (e.g. application updates) and, where we have consent or an existing business relationship, invitation/marketing emails. Every non-essential email includes an unsubscribe link, and you can manage email preferences in your account settings.

4. Who we share with

We share data only as needed to run the Service: with other users as part of the marketplace (e.g. a host sees an applicant’s profile after they apply), and with service providers who process data on our behalf, including Vercel (hosting), Neon(database), Vercel Blob (image storage), Stripe (payments) and our email provider. We do not sell your personal information.

5. International transfers

Our providers may process data in Canada, the United States and the EU. Where required, we rely on appropriate safeguards for cross-border transfers.

6. Data retention

We keep your data while your account is active and as needed for legal, security and accounting purposes. When you delete your account, we delete or anonymise your personal data, subject to limited retention required by law.

7. Your rights

You can access, correct, export or delete your data, and withdraw consent to non-essential emails, at any time from your account settings or by contacting us. Depending on your region you may have additional rights under PIPEDA or GDPR. You may also lodge a complaint with your local data protection authority.

8. Security

Passwords are hashed, traffic is encrypted in transit (HTTPS), and access to data is limited. No system is perfectly secure, but we work to protect your information.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

10. Contact

For privacy requests, contact info@richereverydayineveryway.com.

This document is a general template and not legal advice. Please have it reviewed by qualified counsel for your jurisdiction.