Privacy Policy

1. Our commitment

Source2Table is operated from British Columbia, Canada. We handle personal information in accordance with British Columbia's Personal Information Protection Act (PIPA) and, where applicable, comparable Canadian privacy laws. We collect and use only the personal information reasonably necessary for the purposes described here.

2. What we collect

Depending on how you use Source2Table, we may collect:

Account information — name, email address, phone number, password (stored only in hashed form), account role (consumer/vendor/admin), subscription tier, and account creation date.

Producer profile information (Producers only) — business name, category, practices, address, hours, description, photos, contact information.

Location — with your permission, we use your device location to show nearby Producers on the discovery map. You can revoke this permission at any time in your device settings. We do not collect background location.

Device and usage information — device type, operating system, app version, IP address, general geographic region derived from the IP, referring pages, and interactions with the app (screens viewed, buttons tapped, searches, favourites, reviews, messages).

Transactional and subscription information — plan, billing cycle, subscription status, payment attempts. Payment card details are handled by our payment processor (e.g., Apple, Google, or Stripe) and never stored on our servers.

Communications — messages you send to other users through the platform, customer-support emails, and product feedback.

3. Why we collect it

We use personal information to:

• create and secure your account;
• provide app features (discovery, map, favourites, messages, reservations, reviews, subscriptions);
• personalize your experience;
• send transactional emails such as restock alerts and reservation reminders;
• support you when you contact us;
• prevent fraud, abuse, or safety issues;
• comply with legal obligations;
• improve the app through analytics performed on aggregated or de-identified data.

4. Legal basis and consent

Under PIPA, we rely on your consent (given when you accept this policy and when you enable location or notifications) and on legal grounds that permit the collection, use, and disclosure of personal information without consent in limited circumstances (for example, to comply with law or protect safety).

You can withdraw consent for optional processing at any time by adjusting your settings or contacting us. Withdrawing consent may limit features that depend on that information.

5. Who we share it with

We share personal information only where necessary:

• Cloud hosting (data storage) — for example MongoDB Atlas or an equivalent provider.
• Authentication — Firebase Authentication.
• Maps and geocoding — Google Maps Platform.
• Email — Resend, from `hello@source2table.com`.
• Payment processing — the applicable app store (Apple/Google) or Stripe if enabled.
• Analytics — providers that help us understand aggregate usage.
• Legal or regulatory authorities — when required by law or to protect rights or safety.

We do not sell personal information.

6. Where information is stored

Personal information is stored on servers located in Canada or the United States and may be accessed by service providers in other jurisdictions to provide the platform. Those service providers may be subject to disclosure laws in their countries.

7. How long we keep it

We keep personal information only as long as reasonably necessary for the purposes described here or as required by law. When you delete your account, we delete or anonymize personal information within a reasonable period, except where retention is required for legal, accounting, fraud-prevention, dispute-resolution, or backup purposes.

8. How we protect it

We use reasonable safeguards including encryption in transit, access controls, hashed passwords, audit logging of admin actions, and security monitoring. No system can be guaranteed to be completely secure. If a security incident affects your information we will notify you as required by law.

9. Your rights

You have the right to:

• access your personal information;
• correct it if it is inaccurate;
• withdraw consent for optional processing;
• ask questions or make a complaint;
• delete your account.

To exercise these rights, contact our Privacy Officer at privacy@source2table.com. We will respond within the timelines required by PIPA.

10. Cookies and similar technology

The mobile app uses local storage and secure device keychains to keep you signed in and remember your preferences. If you use the web version, we use a small number of cookies for the same purposes and for basic analytics. We do not use advertising tracking cookies.

11. Children

Source2Table is not intended for children under 13 (or the applicable minimum age in your jurisdiction). If we learn that we collected personal information from a child without valid consent we will delete it.

12. Third-party links and services

The app links to third-party services (Google Maps, app-store billing pages, Producer external websites). Their privacy practices are governed by their own policies.

13. Changes to this policy

If we make a material change to this policy we will require you to accept the updated version before you keep using features that require acceptance. Historical versions are preserved.

14. Contact / Privacy Officer

Privacy Officer, Source2Table privacy@source2table.com

If we cannot resolve a privacy concern, you can also contact the Office of the Information and Privacy Commissioner for British Columbia (OIPC) at oipc.bc.ca.