Privacy Policy

1. Introduction

Canadian News Dashboard ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service at cannewsdash.com.

This policy is intended to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Alberta Personal Information Protection Act (PIPA). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: When you sign in via OAuth, we receive your name, email address, and a unique identifier from the authentication provider.
• Email subscriptions: If you subscribe to the Daily Digest, we store your email address and your digest preferences.
• Notification preferences: Your opt-in choices for browser push notifications and alert settings are stored in our database.

2.2 Information Collected Automatically

• Usage data: We collect anonymised analytics data including page views, session duration, and feature interactions to improve the Service.
• Browser storage: We use localStorage to remember your preferences such as sidebar state, theme, notification settings, and reading history. This data is stored locally on your device and is not transmitted to our servers unless explicitly required by a feature.
• Server logs: Our servers automatically record standard log data including IP addresses, browser type, referring pages, and timestamps for security and diagnostic purposes.

2.3 Information We Do Not Collect

We do not collect payment information, government identification numbers, or sensitive personal information as defined under PIPEDA. We do not knowingly collect information from children under the age of 13.

3. How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your session
• Deliver the Daily Digest and other email communications you have opted into
• Send browser push notifications for breaking news, sports alerts, and BoC rate announcements you have enabled
• Personalise your experience (reading list, saved articles, notification preferences)
• Analyse usage patterns to improve the Service
• Detect, investigate, and prevent fraudulent or abusive activity
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal information on the following legal bases:

• Consent: For email subscriptions and push notification opt-ins, where you have given explicit consent.
• Contract performance: To provide the features you have requested, such as account-based reading lists and personalised digests.
• Legitimate interests: For security monitoring, fraud prevention, and service improvement analytics.
• Legal obligation: Where required by applicable Canadian law.

5. Cookies and Local Storage

The Service uses a session cookie to maintain your authenticated state. This cookie is essential for the Service to function and cannot be disabled while you are signed in.

We use localStorage (not cookies) to store your UI preferences, notification settings, and reading history locally on your device. You can clear this data at any time through your browser settings. Clearing it will reset your preferences to defaults.

We do not use third-party advertising cookies or cross-site tracking technologies.

6. Data Sharing and Disclosure

We may share your information in the following limited circumstances:

• Service providers: We use trusted third-party infrastructure providers (hosting, database, email delivery) who process data on our behalf under strict data processing agreements.
• Authentication provider: Sign-in is handled through Manus OAuth, which processes your credentials according to their own privacy policy.
• Legal requirements: We may disclose information if required to do so by law or in response to a valid legal process (e.g., court order or government request).
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will delete or anonymise your personal information within 30 days, except where retention is required by law.

Server log data is retained for up to 90 days for security and diagnostic purposes. Anonymised analytics data may be retained indefinitely.

8. Your Rights

Under PIPEDA and Alberta PIPA, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Withdrawal of consent: Withdraw consent for email communications or push notifications at any time.
• Deletion: Request deletion of your account and associated personal data.
• Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not handled your information appropriately.

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days.

9. Data Security

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), hashed session tokens, and access controls on our database.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will provide a more prominent notice. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

You may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or the Office of the Information and Privacy Commissioner of Alberta at www.oipc.ab.ca.