Legal

Privacy Policy

Last updated: June 2025

1. Who We Are

Obsidian Room operates obsidianroom.ca — a private, members-only lifestyle community based in Calgary, Alberta, Canada. We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

2. Information We Collect

We collect the following categories of information:

  • · Account information — email address, password (hashed), membership tier, account status.
  • · Profile information — display name, bio, photo, seeking, category, city-level location, and optional website URL.
  • · Identity verification — processed by Stripe Identity. We do not store government ID documents; Stripe retains these per their own privacy policy.
  • · Payment information — processed by Stripe. We store only your Stripe customer ID and subscription status. We never store full card numbers.
  • · Usage data — messages, event ticket purchases, content uploads, and interactions within the platform.

3. How We Use Your Information

  • · To create and manage your membership account.
  • · To verify your identity as required for community safety.
  • · To process payments for memberships and event tickets.
  • · To operate the member directory, messaging, and events systems.
  • · To send transactional emails (account activity, event notifications, lottery results).
  • · To enforce our community rules and Terms of Service.

4. Discretion & Confidentiality

We understand that our members value discretion above all else. We do not sell, rent, or share your personal information with any third party for marketing purposes. Member profiles are visible only to other approved members. Your real identity is never publicly displayed — only your chosen display name.

5. Third-Party Services

We use the following trusted third-party providers:

  • · Supabase — database and authentication (Canada Central region).
  • · Stripe — payment processing and identity verification.
  • · Vercel — website hosting.
  • · Resend — transactional email delivery.

Each provider operates under their own privacy policy and data processing agreements.

6. Data Retention & Deletion

You may request account deletion at any time by contacting us at obsidianroomyyc@gmail.com. Upon deletion:

  • · Your profile, bio, and photos are permanently deleted.
  • · Messages are deleted from both sides of the conversation.
  • · Ticket purchase records are kept in anonymized form for financial audit purposes.
  • · Referral history is preserved in anonymized form.
  • · Admin action logs are retained for legal protection.

7. Your Rights

Under PIPEDA and PIPA, you have the right to access, correct, or request deletion of your personal information. To exercise any of these rights, contact us at obsidianroomyyc@gmail.com.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated to members by email. Continued use of the platform following notice of changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries: obsidianroomyyc@gmail.com