Privacy Policy

1. Scope

This Privacy Policy explains how Social Seconds collects, uses, discloses, retains, protects, and otherwise processes personal information through the website, application, member portal, application process, identity verification process, payments, memberships, event request process, event-night platform, events, chat or digital continuation tools, support, marketing, Signature Experiences Concierge, Experiences & Partnerships, member cards, and related Services.

2. Accountability and Privacy Contact

Social Seconds is responsible for personal information under its control. Questions regarding this Privacy Policy, privacy practices, access requests, correction requests, deletion requests, withdrawal of consent requests, or privacy complaints may be directed to:

• Privacy Officer, Social Seconds Group Inc.
• privacy@socialseconds.ca
• Toronto, Ontario, Canada

3. Privacy Principles

Social Seconds manages personal information in accordance with applicable Canadian privacy law, including PIPEDA where it applies, and the principles of accountability, identified purposes, meaningful consent, limiting collection, limiting use, disclosure and retention, safeguards, openness, individual access, accuracy, and complaint handling.

4. Personal Information We Collect

The personal information Social Seconds collects may include:

• Account and contact information: name, email, phone number, city, province, country, login credentials, member ID, application ID, profile ID, and account status.
• Application information: date of birth or age, relationship status, event preferences, cohort interests, profile information, eligibility responses, written answers, availability, and information submitted during application or review.
• Identity verification information: verification status, provider session IDs, government ID verification result, selfie/liveness result, name/date-of-birth match results, timestamps, expiry or stale-verification status, audit logs, fraud signals, and related metadata. Raw government ID images, selfie images, and biometric templates are intended to be processed by the third-party provider, not stored in Social Seconds’ own systems unless separately disclosed.
• Payment information: payment status, transaction IDs, payment processor customer identifiers, subscription identifiers, invoice identifiers, checkout records, billing records, renewal information, refund records, taxes, chargebacks, plan, billing interval, renewal dates, failed payment status, and limited payment metadata. Social Seconds does not store full card numbers in its own systems.
• Membership information: tier, billing interval, upgrade and downgrade history, cancellation status, Founding Elite status, partner perk usage, member card number or credential status, and benefit eligibility.
• Event information: event requests, selections, payment deadlines, confirmations, check-in status, attendance status, participant code, table assignments, round participation, event benefits or passes, final-vote status, post-event eligibility, and event audit records.
• Preference and matching information: private votes, final preferences, ratings, match signals, compatibility scores, curator notes, introduction status, acceptance or expiry status, reassignment information, and feedback.
• Moderation and safety information: attendance history, late cancellation or no-show history, responsiveness, complaint records, support actions, safety notes, policy compliance, internal community standing, and review outcomes.
• Media and profile content: photos, profile images, media preference, event photos or videos where captured, messages to support, feedback, testimonials if provided, and user-submitted content.
• Chat and communication information: chat messages where offered, reports, blocks, support communications, email/SMS/push records, notification preferences, consent records, unsubscribe status, and delivery data.
• Technical and usage information: IP address, device identifiers, browser type, operating system, log data, session data, authentication tokens, cookie data, analytics, error logs, and security events.

5. Sensitive Personal Information

Some information processed by Social Seconds may be sensitive, including government identification information, biometric information, date of birth, identity verification status, private voting and preferences, match signals, chat reports, participation records, moderation records, media preference, and event attendance history. Social Seconds uses enhanced safeguards and limits access to sensitive information to authorized purposes and personnel.

6. Purposes of Collection, Use, and Disclosure

Social Seconds may collect, use, and disclose personal information to:

• Create, authenticate, administer, and secure accounts.
• Review applications, event requests, membership eligibility, and event attendance eligibility.
• Verify identity, prevent fraud, protect event integrity, and support participant safety.
• Process payments, subscriptions, renewals, upgrades, downgrades, cancellations, refunds, credits, taxes, receipts, and chargebacks.
• Operate event-night flows, including check-in, table assignment, pairing, voting, final preferences, curator support, event benefits, event conclusion, and post-event introductions.
• Provide membership benefits, partner perks, member tools, member card administration, NFC credential administration, Signature Experiences Concierge, and event priority features.
• Facilitate At First Light introductions, matching, reassignment logic, digital continuation, and chat where applicable.
• Maintain community standards, participation standards, moderation, complaint handling, safety reviews, and enforcement.
• Communicate operational notices, event reminders, payment deadlines, identity verification links, policy notices, support responses, and service updates.
• Send marketing or promotional communications with consent or where permitted by law.
• Improve services, event design, matching quality, safety processes, member experience, and platform performance.
• Comply with legal obligations, enforce terms, preserve evidence, respond to lawful requests, and protect rights, safety, and property.

7. Consent and Withdrawal of Consent

Social Seconds relies on consent and other grounds permitted under applicable privacy law to collect, use, and disclose personal information. Consent may be express or implied depending on the sensitivity of the information and the circumstances.

Social Seconds will seek express consent for sensitive uses such as identity verification involving biometric processing where required or appropriate under applicable law.

You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may limit or prevent use of the Services, including event attendance, identity verification, payment processing, matching, chat, memberships, or other features that require the information.

8. Identity Verification and Biometric Processing

Social Seconds requires identity verification before event participation. Verification may be conducted through Didit or another identity verification provider selected by Social Seconds.

The provider may collect and process government ID images, selfie images, biometric identifiers, liveness data, device information, fraud signals, and related data to verify identity and prevent fraud.

Social Seconds intends to store verification results and operational metadata, not raw biometric templates or raw identity documents, unless separately disclosed and permitted or required by law. The third-party provider may retain information according to its own terms, privacy policy, legal obligations, and retention practices.

You may be required to re-verify identity if verification expires, becomes stale, is questioned, fails, is rejected, or is required before a future event.

9. Matching, Introductions, and Decision-Support Processing

Social Seconds may process participant preferences, event participation information, event interaction data, profile information, participation history, policy compliance information, and operational information to facilitate event composition, introductions, matching, moderation, fraud prevention, participant safety, and platform operations.

Social Seconds may use automated systems, algorithms, artificial intelligence tools where used, machine-learning tools where used, proprietary scoring, and decision-support technologies to assist with participant review, event administration, event composition, introductions, moderation, fraud prevention, communications, safety review, and platform operations. These systems may be used independently or with human review. Social Seconds is not required to disclose proprietary algorithms, scoring methodologies, weighting systems, or operational decision-making processes.

10. Third-Party Processors and Service Providers

Social Seconds may disclose personal information to third-party service providers that assist in operating, securing, supporting, and improving the Services. Providers may include:

• Didit or another identity verification provider for identity verification, government ID validation, liveness detection, biometric comparison, and fraud prevention.
• Square and its affiliated entities, or another payment processor selected by Social Seconds, for payment processing, subscriptions, renewals, refunds, credits, invoicing, and related financial transactions.
• Supabase or other database, authentication, storage, and backend infrastructure providers.
• Vercel or other website hosting and deployment infrastructure providers.
• Resend or other email, SMS, push notification, and communication service providers.
• Analytics, security, fraud prevention, monitoring, and error-logging providers.
• Technology, artificial intelligence, machine-learning, and decision-support providers used to support platform operations, where applicable.
• Customer support, moderation, and ticketing providers.
• Photographers, videographers, venues, contractors, event hosts, and event service providers where necessary to facilitate events.
• Professional advisors, insurers, accountants, auditors, and legal counsel where reasonably necessary.

Service providers are expected to use personal information only for authorized purposes and to maintain safeguards appropriate to the sensitivity of the information. Some service providers may process, access, or store information outside Canada.

11. Cross-Border Processing

Personal information may be processed, stored, or accessed in Canada, the United States, or other jurisdictions where Social Seconds or its service providers operate. Information processed outside Canada may be subject to foreign laws and lawful access requests by courts, governments, law enforcement, or regulators in those jurisdictions.

12. Disclosure to Other Participants

• Social Seconds may disclose limited profile, first-name, event-code, check-in, table-assignment, or introduction information as needed to operate events, seating, name tags, introductions, or chat.
• Social Seconds will not intentionally disclose private votes, final preferences, rejection signals, participation history, identity verification documents, biometric data, payment details, or internal curator notes to other participants.
• If a mutual At First Light introduction is released, Social Seconds may share names, limited profile details, contact or communication access, or other information necessary to facilitate the introduction.

13. Chat and Moderation Records

Where Social Seconds offers chat or digital continuation tools, Social Seconds may collect, store, and review messages, reports, blocks, attachments, and related metadata to provide chat, investigate reports, enforce policies, maintain safety, and comply with legal obligations. Social Seconds does not guarantee that every message is monitored in real time.

14. Media

Event media may be captured and used as described in the Media Policy. Media preference information may be used operationally to help hosts, curators, photographers, and videographers avoid featuring users who request no-media treatment. Social Seconds may retain media for promotional, archival, legal, operational, and brand purposes, subject to reasonable removal requests and applicable law.

15. Cookies, Analytics, and Tracking

Social Seconds may use cookies, pixels, analytics tools, logs, and similar technologies to operate the website, remember sessions, secure accounts, improve performance, measure marketing, prevent fraud, and understand usage.

16. Data Retention

Social Seconds retains personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide the Services, maintain participant safety, preserve platform integrity, comply with legal obligations, resolve disputes, enforce agreements, and protect the rights and interests of Social Seconds and its participants.

Retention periods may vary depending on the nature of the information, applicable legal requirements, and legitimate operational needs. Social Seconds may retain identity verification status and metadata, event participation records, membership records, support requests, moderation records, complaint files, incident reports, transaction records, tax and accounting records, matching preferences, introduction records, and platform usage information as reasonably necessary.

Incident reports, complaints, moderation records, safety concerns, fraud investigations, identity-verification concerns, and legal matters may be retained for longer periods where reasonably necessary to protect participants, enforce policies, support future moderation decisions, respond to legal claims, or comply with legal obligations.

17. Access, Correction, and Deletion Requests

Subject to applicable law, individuals may request access to personal information held by Social Seconds, request correction of inaccurate information, or request deletion of certain personal information. Requests may be submitted to privacy@socialseconds.ca.

Certain information may not be eligible for deletion, including information retained for legal, regulatory, tax, accounting, insurance, audit, fraud prevention, security investigation, complaint handling, dispute resolution, incident investigation, legal claim, contractual, community-standard, court order, law enforcement, or business record purposes.

Deletion of an account does not guarantee immediate deletion of all associated records, backups, logs, historical event records, complaint records, moderation records, safety-related records, fraud-prevention records, or information required to protect Social Seconds, its participants, or the public.

18. Safeguards

Social Seconds uses reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. Safeguards may include encryption in transit, encryption at rest where appropriate, role-based access controls, least-privilege access, administrative access logging, audit records, two-factor authentication for administrative access where practicable, service-role and server-side handling for sensitive operations, restricted access to identity verification/payment/moderation information, secure third-party processors, contractual safeguards, and incident-response procedures.

19. Breach Notification

If Social Seconds experiences a breach of security safeguards involving personal information under its control and determines that the breach creates a real risk of significant harm, Social Seconds will notify affected individuals and report to the Office of the Privacy Commissioner of Canada or other applicable regulator where required. Social Seconds will also keep required breach records.

20. Children and Minors

The Services are intended for adults who are at least 25 years old. Social Seconds does not knowingly accept applications, accounts, memberships, event requests, or event participation from individuals under 25 years old.

Social Seconds does not knowingly collect personal information from minors under 18. If Social Seconds becomes aware that it has collected personal information from a minor, it will take reasonable steps to delete or restrict that information, subject to legal, safety, fraud-prevention, dispute, or recordkeeping obligations.

21. Changes to this Privacy Policy

Social Seconds may update this Privacy Policy from time to time. Material changes will be communicated as required by law. Continued use of the Services after an update may constitute acceptance where permitted by law.