Privacy Policy

Last updated: March 2026

1.Overview

Let's Be Heard is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and your rights under the Personal Information Protection and Electronic Documents Act (PIPEDA).

2.Information We Collect

  • Account information: email address.
  • Authentication data: password hash (for email/password accounts) or OAuth provider link.
  • Survey responses: stored anonymously. Responses cannot be linked to your account.
  • Login events: IP address and user agent are logged for security purposes.

3.How We Use Your Information

  • To verify your residency and manage your account.
  • To send important account notifications.
  • To maintain platform security and prevent abuse.

4.Anonymity of Survey Responses

Survey responses are stored separately from your account with no technical link between the two. Running totals are only published when the privacy threshold (minimum 1,000 responses) is met. Administrators cannot see individual responses or identify who submitted them.

5.Data Residency

All data is stored in Canada (AWS ca-central-1 region, Montreal). Your data never leaves Canadian jurisdiction.

6.Data Retention

  • Account data: retained until you request deletion.
  • Survey responses: retained indefinitely (anonymous).
  • Login events: retained for security monitoring.

7.Your Rights (PIPEDA)

You have the right to:

  • Access: download a copy of all your personal data from Account Settings.
  • Correction: update your profile information at any time.
  • Deletion: request account deletion by contacting an administrator (self-service coming in a future update).

8.Third-Party Services

  • Stripe: used for payment processing (when enabled). We do not store payment card details.
  • AWS: hosting, database, email delivery, and file storage -- all within Canada.

9.Contact

For privacy questions or to exercise your rights, contact the Let's Be Heard team through the platform's feedback form.