Privacy Policy

Overview

Canopy (“we”, “us”, “our”) provides hospitality software for bookings, guest communication, operations, direct commerce, and property management. This policy explains how we collect, use, and safeguard personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Information We Collect

We collect personal information that you voluntarily provide when you:

• Create or use an operator, staff, or guest account
• Book a stay, event, experience, or day-use session
• Make a purchase through a Canopy-powered shop or guest portal
• Send messages, upload files, sign agreements, or request support
• Use Canopy websites, admin tools, mobile apps, or embedded booking widgets

Payment information (credit card details) is processed securely by Stripe and is never stored on our servers.

How We Use Your Information

• To process and manage bookings and purchases
• To communicate with you about your reservation (confirmations, check-in details, follow-ups)
• To operate guest portals, staff task flows, access-code workflows, and support conversations
• To send newsletters or promotional offers only with consent
• To improve, secure, and debug Canopy services and app experiences
• To comply with legal obligations

Third-Party Services

We use the following third-party services to operate our business:

• Stripe — payment processing
• Resend — transactional and marketing email delivery
• Vercel — website hosting and analytics
• PostgreSQL/Supabase — database and file storage
• Google Analytics — aggregate website and app usage analytics
• Sentry — error and crash diagnostics

These providers have their own privacy policies and process data on our behalf. We do not sell or share your personal information with unrelated third parties.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected — typically for the duration of your account, booking, guest, or operator relationship plus any period required for tax, security, dispute, audit, or legal obligations. You may request deletion of your data, subject to records we must keep by law.

Your Rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent for marketing communications
• Request deletion of your personal data

Cookies & Analytics

Canopy uses essential cookies and local storage to maintain sessions, preferences, security controls, and mobile app functionality. We may use Google Analytics to understand usage patterns such as page views, device type, and session duration, and Sentry to capture error context when failures occur. We do not sell personal information or use your data for cross-app or cross-site advertising tracking.

Operators and Guests

Canopy customers control their own guest, staff, property, and booking data. When you interact with a Canopy-powered property, that operator may also provide its own privacy notice and may be responsible for how it collects and uses information through its Canopy account.

Contact Us

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

Canopy
Ontario, Canada
hello@getcanopy.ai