Privacy Policy

Stroam Inc. ("Stroam", "we", "us") is a Canadian business headquartered in Ontario. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our website at stroamapp.com or join the Stroam waitlist (together, the "Site"). We follow the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy law.

Who we are and how to contact us

Stroam Inc. is incorporated in Ontario, Canada. Our designated Privacy Officer is responsible for compliance with this Policy and with PIPEDA.

Reach the Privacy Officer at privacy@stroamapp.com. We respond to access, correction, and deletion requests within 30 days, as required by PIPEDA.

What information we collect

We collect only what we need to run the waitlist and keep the Site working:

• Waitlist signup details: your email address, the city you tell us you are in, whether you are joining as someone looking for street food or selling it, and your marketing-consent choice.
• Referral context: if you arrive through a shared link or campaign, we record the referring source and campaign tag so we understand which channels bring people to the waitlist.
• Technical log data: IP address, browser type, and requested pages, kept in short-lived server logs and first-party performance metrics. We use this to keep the Site secure and fast. We never use it for advertising.
• Bot-protection signals: signups are verified by Cloudflare Turnstile, which processes limited device information to distinguish people from bots.

What we do not collect

• No account or password. The waitlist does not create an account.
• No payment information. Nothing on this Site is for sale.
• No precise device location. We only use the city you type in yourself.
• No third-party advertising trackers or cross-site cookies.

How we use your information

• To hold your place on the waitlist and contact you about launch access in your area.
• To send launch news and early-access updates only if you ticked the consent box, as required by Canada's Anti-Spam Legislation (CASL). Every email includes a working unsubscribe link, honoured promptly.
• To decide where Stroam launches first, using aggregate counts of signups by city and audience.
• To protect the Site against spam, abuse, and automated signups.

Who we share it with

We never sell personal information. We share it only with service providers who help us operate the Site, each bound to use it solely on our instructions: Supabase for database hosting, Vercel for website hosting, Cloudflare for bot protection and content delivery, and our email delivery provider for the launch updates you have consented to receive.

Cross-border transfers

Some of our service providers process data on servers located outside Canada, principally in the United States. While the information remains under our control, it is subject to the laws of the jurisdiction where it is processed, which may include lawful access requests from foreign authorities.

How long we keep it

We keep waitlist information until Stroam launches in your area and your signup is converted or closed out, or until you ask us to delete it, whichever comes first. Server logs are retained for a short operational window and then deleted.

You can leave the waitlist at any time by emailing privacy@stroamapp.com or using the unsubscribe link in any email we send.

Your rights

• Access: ask us what personal information we hold about you.
• Correction: ask us to fix inaccurate or incomplete information.
• Deletion: ask us to remove your information from the waitlist.
• Withdrawal of consent: stop marketing emails at any time; withdrawing consent does not affect the lawfulness of anything done before withdrawal.
• If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

Security

Waitlist data is encrypted in transit (TLS) and at rest, stored with a reputable cloud database provider, and accessible only to the small number of people who need it to operate the waitlist.

Children

The Site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has joined the waitlist, contact us and we will delete the record.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected in the "Last updated" date above and, where we have your email, flagged in our next update to you. Continued use of the Site after a change means you accept the updated Policy.