Privacy Policy

Last updated: August 27, 2026

1. Who we are and who is accountable

EventOSports (EventOSports Inc., Québec, Canada) is a local sports social network that lets you create, discover and join sports activities near you, at eventosports.com (the "Service").

Your personal information is protected first and foremost under Quebec's Act respecting the protection of personal information in the private sector (as modernized by Law 25) and applicable Canadian laws. This policy explains, in plain language, what we collect, why, who we share it with and what your rights are.

Person in charge of the protection of personal information: Samuel Pinault-Gallant, founder — privacy@eventosports.com.

2. What we collect

We only collect what's needed to run the Service:

Your account: email address, password (hashed — we never see it in clear text) or Google sign-in, preferred language.
Your profile: display name and avatar, and if you choose to provide them: bio, city, cover photo, favorite sports, skill levels, gallery photos.
Your activities: the events you create or join, including the location (a listed venue, a map pin or an address you provide).
Your interactions: private and group messages, friend requests, friends list, blocks, notifications.
Facility bookings: if a venue manager adds you as a participant to a booking, your name and email may be stored with that booking.
Waitlist: if you sign up, your email and the date of your consent.
Your acceptances: if you create an organization, we keep the date, the version of the Terms of Use you accepted and the display language, as proof of your acceptance.

3. Your display name and avatar stay public

Even if you set your profile to "private", your display name and avatar remain visible to others. This is needed so people can identify you in an activity, a chat or an invitation. The "private" setting hides everything else: bio, city, photos and friends list.

4. Why we collect it (purposes)

Create your account, identify you and secure your sign-ins.
Show activities and sports venues around you (geolocation of events and venues).
Let you organize activities, join them and communicate with other members.
Send you Service emails (account confirmation, password reset, invitations, notifications) — you can opt out by category in your preferences.
Adapt the language and content to your preferences.
Prove your acceptance of the Terms of Use (organization creation) and respond to a dispute or legal obligation.

We don't sell your information, we don't run targeted advertising and we use no ad-tracking tools.

5. Consent and withdrawal

By creating your account, you consent to the collection and use described here, for these specific purposes. You must be 16 or older to create an account: this is an eligibility rule EventOSports sets for its members' safety, not a threshold imposed by law.

You can withdraw your consent at any time: manage notification emails by category in your preferences, or write to privacy@eventosports.com for any other withdrawal. Some withdrawals may prevent us from providing the Service.

If you add another person to a booking or invite them by email, you confirm you have their permission to give us their contact information.

6. Privacy by default

Your privacy settings (profile, photos, friends list) default to the most private level. You choose — at signup or in your profile — whether to open up your visibility to find playing partners more easily.

7. Who we share your information with

We share your information only with the providers that run the Service, and only as needed:

Supabase — database and authentication (hosted in Canada, ca-central-1 region).
Vercel — website hosting (United States).
Resend — sending our transactional emails (United States).
Mapbox — map display and address geocoding (United States).
Google — only if you choose Google sign-in (we then receive your Google email, name and avatar).

8. Communication outside Quebec

Some of our providers store or process information outside Quebec (elsewhere in Canada and in the United States). Before any communication outside Quebec, we assess the privacy factors (nature of the information, purpose, the provider's contractual and technical protections), as the law requires. Write to us to learn more.

We may also disclose information when the law requires it (court order, authorized body) or as part of a sale or transfer of our business — the acquirer will then have to protect your information in a manner equivalent to this policy.

9. Retention and destruction

We keep your information while your account is active, then only as long as needed for the purposes described or our legal obligations.

When your account is deleted, your profile, photos and files are removed from our systems, including file storage. An anonymized trace (cryptographic fingerprint, no personal information) is kept for audit purposes. Messages you sent to other people may remain visible to them.

Proof of acceptance of the Terms of Use (organization creation) is kept while the organization exists, then for as long as needed for a legal obligation or to defend a right; when your account is deleted, it is dissociated from your identity.

10. Your rights

Access: know what information we hold about you and get a copy, free of charge.
Rectification: have inaccurate or incomplete information corrected (most of it can be edited directly in your profile).
Withdrawal of consent: see the Consent section.
Erasure: request the deletion of your account and your information.
Portability: receive the computerized information you provided to us in a structured, commonly used technological format.

To exercise a right — including deleting your account and your information — write to privacy@eventosports.com. We acknowledge your request, then handle it within 30 days at most. If we need more time, we'll let you know before the deadline and explain why. Deletion is carried out by our team upon your request.

11. Cookies

We only use essential cookies: the ones that keep your session signed in plus a few technical markers. No advertising cookies, no third-party analytics, no profiling. If that ever changes, this policy will be updated and your consent requested where required.

12. Security

We protect your information with measures that are reasonable and proportionate to its sensitivity: encrypted communications (HTTPS), row-level access control in the database, restricted administrative access and logs free of personal information. No system is infallible, but we're committed to maintaining and improving these protections.

13. Privacy incidents

If a privacy incident occurs (unauthorized access, use or disclosure), we assess it, record it in a register and, if it presents a risk of serious harm, we notify Quebec's Commission d'accès à l'information and the affected people, as the law requires.

14. Questions and complaints

A concern or complaint about your information? Write to privacy@eventosports.com first — we're committed to responding quickly. You can also reach out at any time to Quebec's Commission d'accès à l'information (cai.gouv.qc.ca).

15. Reports and moderation

When you report content or a profile, we record your report: the reason, any free-text details, a frozen copy of the reported content at the time of the report, and the account identifiers involved. Purpose: keeping the community safe and moderating the Service (serious and legitimate interest, s. 4 and 5 of Law 25). This information also concerns third parties (the reported person): within the Service, it is only accessible to designated moderators — neither the reported person nor other members can see it, and we do not disclose the identity of the person who reports. Anyone may exercise their right to access their own information by writing to us; we apply it in accordance with Law 25, which provides for exceptions to protect third parties and the source of a report.

Planned retention: the frozen copy and free-text details are deleted 12 months after the report is closed, and the remaining record 24 months after (except under legal hold for disputes or serious incidents, or while a report is still open). These periods are being finalized and may be adjusted.

If the reported person's account is deleted, identifiers are dissociated from the record. The frozen copy of the reported content may be kept only as long as strictly necessary for moderation or a legal obligation, then destroyed per the timelines above.

16. Changes to this policy

If we change this policy, the last-updated date above changes and, for any significant change, we notify you (by email or in the Service) before it takes effect. Changes never apply retroactively to what you had consented to.