Privacy policy

1. Who we are

Avenue.io Inc. (“Avenue.io”, “we”, “us”) is a software company based in Alberta, Canada. This policy explains how we handle personal information when you use our website at avenue.io and our products: Alberta.io, Attractionator, YourCadets, GeoJSON.cloud and AeroVenture, including their websites, web applications, mobile apps and games (together, the “Services”).

Some Services may show an additional notice with details that apply only to them. Where that notice and this policy differ, the more specific notice applies.

2. Information we collect

Information you give us

• Account details, such as your name, email address and password. Passwords are stored by our authentication provider in hashed form; we cannot see them. If you sign in with Google or Apple, we receive your name and email address from that provider.
• Content you add, such as website pages, events, staff listings, sponsor details, files, maps and geospatial data. GeoJSON.cloud processes files in your browser and does not upload them unless you choose to save them to your account.
• Payment details. Payments are handled by Stripe or, for app and game purchases, by Apple, Google or Valve. We receive confirmation of payment and limited details such as the card type and last four digits, but never your full card number.
• Messages you send us, such as support requests, feedback and newsletter or launch-news sign-ups.

Information collected automatically

• Technical and usage data, such as your IP address, browser and device type, operating system, pages viewed, and the date and time of your visit. Our hosting provider records this in server logs.
• Error reports, which can include device details and what the app was doing when it failed.
• Cookies and similar technologies that keep you signed in, remember your preferences and keep the Services secure. We do not use advertising cookies.

Information from mobile apps

• Location. Some apps, such as attraction apps built on Attractionator, can use your device's location to show where you are on a map. They do so only if you allow it in your device settings, and you can turn it off at any time.
• Push notifications. If you allow notifications, we store a device token so we can send them. You can turn notifications off in your device settings.
• Device identifiers and diagnostics needed to deliver the app, prevent abuse and fix crashes. We do not use them to track you across other companies' apps or websites.

3. How we use information

• To provide, maintain and improve the Services, including creating and securing your account.
• To process payments and manage subscriptions.
• To send messages about your account, such as receipts, security alerts and important changes.
• To send newsletters, briefings or launch news you have asked for. Every such email includes a way to unsubscribe.
• To answer your questions and provide support.
• To understand how the Services are used, in aggregate, so we can make them better.
• To detect and prevent fraud, abuse and security problems, and to comply with the law.

We rely on your consent to collect and use personal information, which may be implied where the purpose is obvious, such as using your email address to sign you in. You can withdraw consent at any time, subject to legal or contractual limits, though some Services may then stop working for you.

4. How we share information

We do not sell or rent personal information. We share it only in these cases:

• Service providers who process information on our behalf, under contracts that require them to protect it and use it only to provide their services to us. They are listed below.
• Organizations you use our products with. If you use an app or website that an attraction or a cadet group runs on our platform, that organization can see the information you give through it, and its own privacy practices also apply.
• Public content. Content you choose to publish, such as a group website, a shared map or a public profile, can be seen by anyone.
• Legal reasons, when we believe in good faith that the law requires it, or to protect the rights, property or safety of our users, the public or Avenue.io.
• Business transfers. If Avenue.io or one of its products is sold or merged, personal information may transfer to the new owner, who must continue to protect it under this policy.

Our service providers

5. Where information is stored

We are based in Canada, but many of our service providers store and process information in the United States and other countries. When information is outside Canada, it is subject to the laws of that country and may be accessible to its courts and authorities.

6. How long we keep information

We keep personal information for as long as your account is active or as needed to provide the Services. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep some records longer for legal, tax, accounting or security reasons. Backups are overwritten on a regular cycle.

7. Deleting your account and data

You can ask us to delete your account and the personal information linked to it at any time:

• Where an app or product offers it, use the delete account option in its settings.
• Or email hello@avenue.io from the email address on your account, telling us which product you use. We will confirm your request and complete it within 30 days.

Deleting your account removes your profile and the content you created, except content that others have the right to keep, such as records a cadet group or attraction must retain, and records we are legally required to keep.

8. Your rights

You can ask to access the personal information we hold about you, have it corrected, or withdraw your consent to its use. Depending on where you live, you may have other rights, such as data portability or objecting to certain processing. To make a request, email hello@avenue.io. We may need to confirm your identity first, and we will respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

9. Security

We protect personal information with safeguards suited to its sensitivity, including encryption in transit, access controls and reputable infrastructure providers. No system is perfectly secure, and we will notify you and the authorities of a breach where the law requires.

10. Children

Our Services are not directed to children under 13, and we do not knowingly collect personal information from them. YourCadets sites are run by adult volunteers on behalf of cadet groups; those groups are responsible for getting any consent needed before publishing information about cadets. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our Services change. We will post the new version here with a new date and, for significant changes, tell you by email or in the Services before they take effect.

12. Contact us

Questions or requests about privacy can go to hello@avenue.io, or to Avenue.io Inc. in Alberta, Canada.