Privacy Policy

01 — Who we are

About GroupFlow

GroupFlow ("we", "us", or "our") is a software product under development, intended to help university project teams collaborate more effectively. This page explains what personal information we collect through our waitlist, why we collect it, and how we handle it.

For questions about this policy, contact us at privacy@groupflow.ca.

02 — What we collect

Information we collect

When you sign up for our waitlist we collect:

• First name and last name — so we can address you personally when we reach out.
• Email address — to notify you when GroupFlow launches and send relevant product updates.
• How you heard about us — an optional field to help us understand which channels are most effective. This is never shared externally.

We do not collect payment information, government identifiers, or any sensitive personal data through this waitlist.

03 — How we use it

How your information is used

We use the information you provide solely to:

• Notify you when GroupFlow is ready for early access.
• Send occasional product updates or announcements related to GroupFlow's launch (maximum a few emails before launch — we respect your inbox).
• Understand how people discovered GroupFlow so we can focus our efforts.

We will never use your information for unrelated marketing, sell it to third parties, or share it with advertisers.

04 — Data storage

Where your data is stored

Your waitlist data is stored securely using Supabase, a hosted database platform. Data is encrypted in transit (TLS) and at rest. Supabase stores data in data centres located in the United States. By submitting your information you consent to this cross-border transfer.

Access to the database is restricted to GroupFlow's development team and is protected by service-level authentication. We do not grant third parties access to your raw data.

05 — Retention

How long we keep your data

We retain waitlist entries for as long as needed to operate the waitlist and notify you at launch. If GroupFlow does not launch, or you request deletion, your data will be permanently removed within 30 days.

06 — Your rights

Your rights under PIPEDA & CASL

As a Canadian resident you have the right to:

• Access the personal information we hold about you.
• Correct any inaccurate information.
• Delete your data from our waitlist at any time.
• Withdraw consent to receive communications from us.

To exercise any of these rights, email us at privacy@groupflow.ca with the subject line "Data Request". We will respond within 30 days.

07 — Changes

Changes to this policy

We may update this policy as GroupFlow evolves. Material changes will be communicated via email if you are on our waitlist. The "Effective date" at the top of this page will always reflect the latest revision.