1. Introduction

About This Policy

Platsana ("we", "our", or "us") is committed to protecting the personal information of all individuals who interact with our Application. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over your information.

This policy applies to two categories of users: yoga studio owners and managers who subscribe to Platsana ("Studio Users"), and the end customers of those studios who make payments through the Application ("End Consumers"). Where this policy distinguishes between these two groups, it will do so explicitly.

This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy law.

2. Information We Collect

What We Collect and Why

We collect only the information necessary to provide and operate the Application.

From Studio Users, we collect name, email address, payment information for subscription billing, and usage and activity data generated through use of the Application. This is collected to create and manage your account, process your subscription, and operate the platform on your behalf.

From End Consumers, we collect name, email address, and payment information at the point of purchase when they pay a studio through the Application. This data is collected solely to facilitate and record that transaction. End Consumers transact with the studio directly; Platsana is the platform through which that transaction is processed, not a party to it.

3. How We Use Your Information

Purpose of Processing

All data collected is used exclusively to operate and maintain the Application. We do not use any data for advertising, profiling, or any commercial purpose beyond delivering the service.

Specifically, we use data to:

Create and manage Studio User accounts
Process Studio User subscription payments
Facilitate payments from End Consumers to studios
Deliver transactional and service-related emails
Maintain the technical operation of the Application

4. Third-Party Services

Sub-processors and Service Providers

To operate the Application, we engage the following third-party service providers. Each processes only the data necessary for their specific function and is bound by their own privacy and security obligations.

Stripe / Stripe Connect — payment processing. Stripe handles all payment card data directly and in accordance with PCI-DSS standards. We do not store or have access to full card details. Stripe Connect is used to facilitate payments from End Consumers to studios through the Application. Stripe's privacy policy is available at stripe.com/privacy.
Supabase — database and backend infrastructure. Account, usage, and transaction data is stored in Supabase's managed database platform. Supabase's privacy policy is available at supabase.com/privacy.
Vercel — cloud infrastructure and hosting. Application data is served through Vercel's platform. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.
Resend — transactional email delivery. Email addresses are shared with Resend solely to deliver emails related to account activity and use of the Application. Resend's privacy policy is available at resend.com/legal/privacy-policy.

We do not sell data to any third party. We do not share information with any party beyond those listed above.

5. Studio Users and End Consumer Data

Our Role as a Data Processor

When Studio Users collect and manage personal information belonging to their own customers through the Application, Platsana acts as a data processor on their behalf. Studio Users are responsible for ensuring their collection and handling of End Consumer data complies with all applicable privacy laws, including obtaining any necessary consents.

Platsana is not a party to the contract between a studio and its customers. Any disputes between a studio and its customers regarding payments, memberships, or services are the sole responsibility of the studio.

6. Data Retention

How Long We Keep Your Data

We retain personal information for as long as an account is active or as necessary to provide the Application. Upon request for account deletion, we will remove personal data from our systems within a reasonable timeframe, except where retention is required by law or for legitimate purposes such as resolving disputes or maintaining financial records.

7. Your Rights

Access, Correction, and Deletion

Under PIPEDA and applicable Canadian law, you have the right to request access to the personal information we hold about you, request corrections to inaccurate information, and request deletion of your personal data, subject to any legal obligations we may have to retain it.

To exercise any of these rights, please contact us using the details in Section 9 below.

8. Security

How We Protect Your Data

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.

9. Contact

Questions and Requests

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Platsana
contact@platsana.com

10. Changes to This Policy

Policy Updates

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by a prominent notice within the Application prior to the change taking effect. Your continued use of the Application following any update constitutes acceptance of the revised policy.