Privacy Policy

Last updated: 2024-12-01

TL;DR: We respect your privacy. Your UBC credentials never leave your device, we only store minimal data needed for the service, and we never sell your information.

1. Information We Collect

Personal Information

When you register for an account, we collect:

  • Email address (for account identification and notifications)
  • Name (optional, for personalization)
  • Password (encrypted and stored securely)
Course Monitoring Data

To provide our service, we store:

  • Course URLs and names you choose to monitor
  • Notification preferences (Discord webhooks, email settings)
  • Monitoring history and statistics
  • Seat availability data for tracked courses
Technical Information

We automatically collect:

  • Log data (IP addresses, browser type, access times)
  • Usage analytics (feature usage, error reporting)
  • Performance metrics (response times, system health)

2. Data Access and Security

No Personal UBC Data Required

We do not require or store any UBC login credentials. Our service accesses only publicly available course information from UBC's course catalog and registration system. No personal UBC account access is needed.

3. How We Use Your Information

We use collected information for:

  • Service Delivery: Monitoring courses and sending notifications
  • Account Management: User authentication and subscription management
  • Communication: Service updates and support responses
  • Improvement: Analyzing usage to enhance our service
  • Security: Detecting and preventing abuse

4. Information Sharing

We do not sell, trade, or rent your personal information. We may share data only in these limited cases:

  • Service Providers: Trusted third parties (hosting, payment processing) under strict contracts
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfer: In the event of a merger or acquisition (with notice)

5. Third-Party Services

Discord Integration

If you provide a Discord webhook URL, notifications are sent directly to Discord's servers. Review Discord's privacy policy for their data handling practices.

Payment Processing

We use Stripe for payment processing. Your payment information is handled entirely by Stripe and never stored on our servers. Review Stripe's privacy policy for details.

Analytics

We use privacy-focused analytics to understand service usage. No personally identifiable information is shared with analytics providers.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

  • Personal information is deleted within 30 days
  • Course monitoring data is anonymized for analytics
  • Some data may be retained longer for legal compliance

7. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information
  • Deletion: Request deletion of your account and data
  • Portability: Export your data in a common format
  • Objection: Opt-out of certain data processing
Exercise Your Rights

Contact us at privacy@coursesmonitor.ca to exercise any of these rights. We'll respond within 30 days.

8. Cookies and Local Data

We use cookies and local storage for:

  • Essential: User authentication and security for your account
  • Functional: Remembering your preferences and settings
  • Analytics: Understanding service usage patterns (anonymized)

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the service.

9. International Users

Our services are hosted in Canada. If you're accessing from outside Canada, your data may be transferred to and processed in Canada, which has privacy protections substantially similar to EU standards.

10. Children's Privacy

Our service is intended for university students (18+). We do not knowingly collect information from children under 18. If you believe we have collected such information, contact us immediately.

11. Security Measures

We implement industry-standard security measures:

  • Data encryption in transit and at rest
  • Regular security audits and updates
  • Access controls and monitoring
  • Secure development practices

12. Changes to This Policy

We may update this privacy policy periodically. We'll notify you of significant changes via:

  • Email notification to your registered address
  • Notice on our website and dashboard
  • In-app notifications for major changes

13. Contact Information

Questions About Privacy?

We're here to help explain our privacy practices: