Legal

Privacy Policy

How we handle information on this site and in BC + AI programs.

This page explains what BC + AI Ecosystem Association collects on bc-ai.ca, who we share it with, and how to reach us about your own data.

Last updated: August 28, 2026

What we collect

If you become a member, we collect your name, email, and phone number. We use your phone number for membership administration and to send you a private member WhatsApp invitation. Your number does not appear in the public member directory. We also collect anything you add to your profile: bio, links, skills, and avatar photo. If you subscribe to our newsletter, we collect your email. Signing in uses a one-time email link, so there’s no password to store.

Member WhatsApp group

Joining is optional. If you accept the invitation, WhatsApp and Meta process your phone number, and other group members can see your phone number. We do not add members to the group automatically.

Fellowship applications

If you apply for a BC + AI fellowship, we collect the contact details, project proposal, work plan, success metric, experience, links, availability confirmation, and consent information you submit. Applications are stored in a private Notion database and shared with the fellowship selection team. Resend sends the transactional application receipt. If you separately choose the optional newsletter checkbox, we also send your email to Beehiiv for BC + AI marketing email. Newsletter consent is not required to apply.

Before applications open you can join a fellowship waitlist. That collects your email and, if you choose, one short note about what you would want to build. Waitlist entries are stored separately from applications and are used only to email you once when the call opens. The same optional newsletter choice applies and is never required.

Payments

Stripe handles membership payments. Your card number never touches our servers. We keep the billing records needed to run membership, such as your Stripe customer ID, subscription status, membership tier, price, renewal dates, invoices, and payment-event records.

Certificates

When you join, we send your name and email to Certifier, which issues and emails your membership certificate.

Photos and uploads

Member avatars and event photos are stored in Cloudflare R2, a file storage service.

Newsletter

Newsletter subscriptions are managed in Beehiiv. You can unsubscribe from any newsletter email at any time.

Events

Event registration happens on Luma. When you RSVP to an event, that goes through Luma’s own systems under its privacy policy, not ours.

Site analytics

We use Google Analytics and Vercel Analytics to see which pages get visited and how the site performs. Both may set cookies or similar tracking in your browser.

We also use first-party activity logs to understand which content gets viewed. These record page paths, visit times, whether a page stayed visible for 30 seconds, and directory filter types and result counts. They do not record page query strings, passwords, sign-in tokens, form contents, or raw email addresses. Browser activity collection respects Do Not Track and Global Privacy Control browser signals.

For signed-in visitors, activity uses a coded identifier that changes daily. Authorized support staff can match this identifier to an account when investigating a support or security concern. Sign-in outcomes are recorded separately for troubleshooting; a failed attempt does not prove the account owner made it. We use aggregate content reports to improve the site. A page view does not tell us that someone liked a page.

For security and support, we separately record directory requests and sign-in stages, including whether an email was accepted, delivered, delayed, or rejected. Directory requests may use a coded network identifier that changes daily; we do not store the raw IP address in these records or use this identifier to measure content interests. These operational records are collected independently of browser analytics preferences. A shared network does not identify a particular person, and unusual activity alone does not prove misuse.

Detailed activity and diagnostic records are stored in Neon for up to 30 days. Content and operational daily totals, without visitor or network identifiers, are retained for 13 months. Authorized administrators can review detailed records in the private operations dashboard. Our Vercel hosting logs follow their configured retention period. Private support exports are deleted within 30 days. You can contact us below about access or deletion.

Where things run

The site is hosted on Vercel. Our member database runs on Neon. Resend sends our transactional email: sign-in links, receipts, and welcome messages.

Who we share your data with

We share data only with the services on this page, and only as needed to run them: Stripe, Neon, Notion, Resend, Vercel, Certifier, Cloudflare R2, Beehiiv, Luma, WhatsApp and Meta, and Google Analytics. Each has its own privacy policy, and some store data outside Canada. We don’t sell your data.

How long we keep it

We keep membership and profile data while your membership is active. If you cancel or ask us to delete your data, email us and we’ll take care of it. We still keep records required for legal or accounting reasons.

We keep fellowship applications only as long as needed to administer the program and meet legal obligations. You can use the contact details below to ask about a copy or deletion.

Your rights

Email hello@bc-ai.ca or use our contact page to ask what we hold about you, get a copy, or have it deleted.

Questions

Questions about this policy go to hello@bc-ai.ca.