Privacy Policy

1. Introduction

ELBO ("we", "our", "ELBO") is committed to protecting your privacy. This policy explains how we collect, use, share, and protect your personal information in accordance with the Act respecting the protection of personal information in the private sector (Quebec Law 25) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

2.1 Information You Provide

• Account information: username, email address, password (encrypted)
• Profile: avatar, biography, language preferences
• Communications: chat messages, debate content
• Payments: billing information (processed by Stripe/PayPal)

2.2 Information Collected Automatically

• Usage data: pages visited, session duration, actions taken
• Technical data: IP address, browser type, operating system
• Cookies: see our Cookie Policy

2.3 Audio and Video Data

During live debates, we transmit your audio/video stream via LiveKit. These streams are not recorded or stored by ELBO, unless you explicitly enable a recording feature.

3. How We Use Your Information

• Provide and improve our services
• Manage your account and purchases
• Personalize your experience
• Communicate with you (support, updates)
• Ensure security and prevent fraud
• Moderate content via our AI systems
• Generate anonymized statistics
• Comply with our legal obligations

4. Sharing Your Information

We do not sell your personal data. We may share your information with:

• Service providers: Supabase (database), Vercel (hosting), Stripe/PayPal (payments), LiveKit (WebRTC), Google (AI API)
• Other users: your public profile, username, avatar, level
• Legal authorities: if required by law or to protect our rights
• Potential acquirers: in case of merger or acquisition

5. Data Security

We implement appropriate security measures:

• Data encryption in transit (HTTPS/TLS)
• Password encryption (bcrypt)
• Secure authentication via Supabase Auth
• Restricted access to sensitive data
• Monitoring and anomaly detection

However, no Internet transmission is completely secure. You use the service at your own risk.

6. Data Retention

We retain your data as long as your account is active or as necessary to provide our services. After account deletion:

• Account data: deleted within 30 days
• Financial data: retained according to legal requirements (7 years)
• Anonymized data: may be retained indefinitely

7. Your Rights

Under Law 25 and PIPEDA, you have the right to:

• Access: Obtain a copy of your personal data
• Rectification: Correct inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a structured format
• Objection: Object to certain processing
• Withdrawal of consent: Withdraw your consent at any time

To exercise these rights, contact us at admin@elbo.world. We will respond within 30 days.

8. Protection of Minors

ELBO is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you are a parent and believe your child has provided us with information, contact us so we can delete it.

9. International Transfers

Your data may be transferred and stored on servers located outside Canada (particularly in the United States via our cloud service providers). These transfers are made with appropriate safeguards in accordance with applicable law.

10. Changes to This Policy

We may update this policy periodically. Significant changes will be notified by email or via the platform. The "Last updated" date will be updated accordingly.

11. Privacy Officer

In accordance with Law 25, we have designated a privacy officer:

If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (CAI).

12. Contact Us