Sporvio Privacy Policy

Last Updated: 2026-10-12

Who We Are (Data Controller)

The Sporvio service ("Sporvio", the "Service") is currently operated by 1001588189 Ontario Inc. (operating as Sporvio), incorporated in Ontario, Canada.

• Operator / Data Controller: 1001588189 Ontario Inc. (operating as Sporvio)
• Contact: privacy@sporvio.com
• Privacy Officer: We have designated a Privacy Officer who is accountable for our compliance with this policy and applicable privacy laws, reachable at privacy@sporvio.com.

This policy explains what personal information we collect, why, how we share it, how long we keep it, and the choices and rights you have.

1. Information We Collect

1.1 Information You Provide

• Account: Email; password (stored only in hashed form, never in plaintext).
• Profile: Nickname, avatar, bio, sport levels, date of birth, city/region, and gender. Gender and certain profile fields are optional. We collect date of birth to confirm you meet our minimum age (see Children's Privacy).
• Optional contact: Phone number.
• Organization affiliation (optional): If you choose to verify an organization, we collect the organization you select, the verified email domain, the time of each verification and the verification status (active or expired). A verification stays active for one year from your last verification, and for a school for no more than 8 years from your first verification; after that it becomes expired unless you verify again. You can also choose to add the start and end months of your time there; these do not affect any limits. We keep only an irreversible fingerprint of the email address you verified, so that one address can verify only one account, and we do not store the address itself. Organization verification is available only to users aged 18 and over.
• Coach profile (optional): If you create a coach profile, we collect the bio, qualifications, specialties and photos you provide, and a record of the venues and organizations you link with or unlink from.
• Reviews: Reviews you submit after a class you checked in to, including star ratings, tags and optional text about the coach, the course and the venue.
• User content: Content you create on the Service — events, club announcements, chat/direct messages, listings, reviews, and photos you upload.
• Competitive records: Match results, ratings, and win/loss history generated when you record matches or participate in ranked play.
• Payment: Online payments in the Service (court bookings, wallet top-ups, venue memberships, venue-hosted events, and venue store orders) are processed by Stripe. Personal Plus and Pro subscriptions are bought in the Sporvio app and paid through the Apple App Store or Google Play, which process those payments; we receive only the subscription status and purchase records, through RevenueCat, and never your payment details. We never see or store your full card number; we keep only what Stripe returns to us — card brand, last four digits, expiry, and a card fingerprint used to recognise a saved card — together with the transaction record. Fees for events organised by users or clubs are settled between you and the organiser outside the Service; an organiser may show you a payment QR code, and payments made that way are not processed by Sporvio.

Photos and avatars. We treat photos and avatars you upload as ordinary user content. We do NOT use facial recognition, do NOT create or store biometric identifiers or face templates/embeddings from your photos, and do NOT use your images to identify or verify you. If we ever introduce any feature that processes biometric information, we will obtain any consent required by law (including Illinois BIPA and Quebec Law 25) and update this policy first.

1.2 Information We Collect Automatically

• Usage data: Features used, taps, and session activity, to operate and improve the Service.
• Device information: Device model, operating system version, and IP address (used for security and fraud prevention).
• Crash and diagnostic logs: We collect crash and diagnostic logs to fix problems and improve stability. We do not currently use third-party analytics tools; if we begin using one, we will list it in this policy and update the sub-processor list before doing so. We do not use usage data for advertising.

1.3 Permissions and Device Data

We only access the following with your permission, and you can change these permissions at any time in your device settings:

• Push notifications: With your permission we collect a device push token (via the Apple Push Notification service and Expo) so we can send you the notifications you enable.
• Photos and camera: With your permission we access your photo library and camera so you can upload images. We only access the specific items you select.
• Location: With your permission we read your device location only for the features that need it — checking in at a venue, sharing your location in a chat, and showing venues by distance — and only while you use that feature. We do not track your location in the background. You can withdraw this permission at any time in your device settings.

1.4 Sign-in Providers

You can sign in with email and password, Apple, or Google (the options available depend on your device). If you choose Apple or Google Sign-in, we receive only the limited information that provider is authorized to share — typically your email and name. If you sign in with Apple and choose Hide My Email, we use Apple's private relay email address and will not attempt to obtain your real email. You can link or unlink these providers at any time in Settings.

2. How We Use Information

• Provide the Service: Create and operate your account, events, clubs, bookings, payments, chats, and follow/block/report features.
• Improve the Service: Understand how the Service is used, fix bugs, and develop new features.
• Recommendations: Recommend events, clubs, and players to you (see Personalization). We do not use your data for cross-context behavioral advertising.
• Security and fraud prevention.
• Customer support.
• Legal compliance.
• Affiliation features: Show a verification mark on your profile, let you find people from the same organization, apply the organization-only limits that organisers set on events and clubs, and recommend people who share your affiliation. You choose who can see your affiliation (everyone, verified members of the same institution, or only you), and you can remove it at any time.
• Vee, event assistant and image checks: When you ask Vee (the AI assistant in the Sporvio app) a question, your question, the recent messages in that conversation and the search details needed to answer it (such as sport, area or dates) are sent to an AI service (Anthropic) to generate a reply. Vee conversations are stored only on your device and are not kept on our servers; clearing the conversation in the app deletes it. We record only how many questions you ask each day, to apply usage limits. When you use the event assistant, the text and images you submit are sent to an AI service (Anthropic) to draft or recognise event details; images uploaded to events are automatically screened by an AI service (OpenAI) for prohibited content.
• Coach pages and reviews: Showing a coach's profile, the venues and organizations where the coach is active, and the courses the coach teaches at each; showing student reviews labelled with the course and venue; showing course and venue reviews on course pages and venue pages; and inviting students who checked in to a class to leave a review.

We map specific data to specific purposes, including: date of birth to verify you are old enough to use the Service; city to surface nearby clubs and events; optional gender for profile display and matching; device push token to deliver the notifications you enable; and photos only as content you choose to post.

Consent (PIPEDA)

We collect, use, and disclose your personal information with your consent. By creating an account and using the Service, you consent to the collection and use described in this policy. Where information is sensitive or used for a new purpose, we seek your express consent (for example, device permissions). Some information is optional; if you choose not to provide it, certain features may be unavailable, but this will not affect your ability to use the core Service.

Legal Bases for Processing (where the GDPR applies)

Where the GDPR applies to you, we rely on the following legal bases:

• Contract (Art. 6(1)(b)): Creating and operating your account and providing core features, including processing your bookings and payments.
• Legitimate interests (Art. 6(1)(f)): Security and fraud prevention, IP/security logging, improving the product, and basic recommendations. You can object to processing based on legitimate interests (see Your Rights).
• Consent (Art. 6(1)(a)): Push notifications, camera/photo-library access, optional phone number, and location features.
• Legal obligation (Art. 6(1)(c)): Complying with applicable law.

Personalization

We use basic profiling to recommend events, clubs, and players to you, based on the sports you select, your sport levels, your city, who you follow, the events and clubs you take part in, and the events you mark as not interested. We do not use machine-learning models for these recommendations. This is not solely-automated decision-making that produces legal or similarly significant effects. You can change the sports you select in Settings, mark an event as not interested, or contact support to object to this processing.

Electronic Communications

We send service-related messages (security, account, and notifications you enable) as part of operating the Service. We will send promotional or marketing emails or pushes only where permitted under Canada's Anti-Spam Legislation (CASL) — generally with your consent — and every such message will identify us and include an easy way to unsubscribe.

3. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. Because we do not sell or share, we do not provide a "Do Not Sell or Share My Personal Information" link; if this ever changes, we will update this policy and provide the required opt-out. We share information only as follows:

• Other users: Content you post (events, announcements, listings, reviews, photos, and profile fields) is visible to other users and may be public depending on where you post it and your settings. Your nickname, avatar, and sport levels are visible to others. Direct messages are visible to the recipient(s). If you opt in to public leaderboards, your competitive records — including ratings, rankings, and win/loss history — become visible to other users on the applicable leaderboards. This visibility is off by default and you can turn it off at any time.
• Coach profiles and reviews: Your coach profile becomes public once at least one venue or organization has activated you. It shows your profile, the venues and organizations that activated you, and the courses you teach at each (times, locations and prices). Until then it is not public. Venues and organizations cannot edit your public profile. Reviews of you appear with your coach profile, labelled with the course and venue, and are not removed if you unlink from a venue. Reviews you submit are public and show your nickname and avatar, labelled with the course and venue. A coach can reply to reviews about them, and a venue can reply to reviews of its courses and venue.
• Venues and brands: When you book, register or buy at a venue, that venue receives the information needed to provide the service, along with any additional information you choose to share with it (such as an emergency contact or health notes). Venues that belong to the same brand may, as set by the brand, share the customer records they keep about you — such as your name and contact details, balances, memberships and passes, booking and visit history, and the venue's notes and tags — with the other venues in that brand. When a venue you have used joins a brand, your basic profile is shared with the brand's other venues and we notify you in the app; sensitive information such as health notes, emergency contacts and date of birth is shared with the brand only if you choose to share it. You can change or withdraw what you share with each venue or brand at any time under "Shared with venues" in Settings.
• Service providers / contractors: Our backend hosting providers (listed below) process personal information on our behalf, under contract, solely to provide services to us, and is contractually restricted from using it for any other purpose. Expo and Apple (APNs) receive a device push token to deliver push notifications. We use Sentry (Functional Software, Inc.) for crash and error monitoring to detect and fix problems; it receives technical and device data and error context. We do not currently use third-party analytics tools; if we begin using one, we will list it in this policy and update the sub-processor list before doing so. We use Google for maps/location features (Google Maps/Places for venue and location search and geocoding) and for Google Sign-In, and Apple for Sign in with Apple; each receives only the data needed to provide that feature. Our service providers are contractually required to protect your data with the same or equivalent safeguards described in this policy and to use it only to provide services to us. These disclosures do not constitute a "sale" or "share" under the CCPA/CPRA.
• Legal and safety: When required by law or a valid government/court request, or to protect the rights, safety, and property of Sporvio, our users, or the public.
• Enforcement: To investigate or address violations of our Terms.

We may access and review user content, including reported messages, where necessary to investigate reports, enforce our Terms, protect safety, or comply with the law.

Current sub-processors (as of October 2026): Supabase Inc. (database/backend hosting; on AWS) — Canada/US; Amazon Web Services — Canada/US; Expo (push token delivery); Apple Inc. (APNs; Sign in with Apple); Google LLC (Google Sign-In; Google Maps/Places for venue & location search and geocoding) — US; Stripe, Inc. (payment processing — card details are entered directly into Stripe's secure components) — US; RevenueCat, Inc. (managing personal Plus and Pro subscriptions bought through the App Store or Google Play; receives your account ID and purchase records, not your email address) — US; Functional Software, Inc. (Sentry — crash & error monitoring) — US; Anthropic, PBC (recognising spreadsheet columns and categories when a venue imports its records; drafting and recognising event text and images submitted to the event assistant; generating replies to questions asked of Vee) — US; Mux, Inc. (video processing and streaming for venue videos) — US; OpenAI, L.L.C. (automated screening of video thumbnails and event images for prohibited content) — US. We will update this list before engaging a new sub-processor for analytics.

When a venue imports its records into Sporvio, we use an AI service (Anthropic) to recognise the columns and categories in its spreadsheets; personal information is masked before anything is sent. When you ask Vee a question, your question and the recent messages in that conversation are sent to Anthropic to generate a reply. When you use the event assistant, the text and images you submit are sent to Anthropic to draft or recognise event details; images you upload to events are screened by OpenAI for prohibited content.

Analytics and crash reporting. We use Sentry, listed above, only for crash and error reporting. We do not currently use third-party analytics tools; if we begin using one, we will name it here before doing so and, where required, provide a way to opt out. Usage data is used only to operate and improve the Service and never for advertising or cross-context behavioral tracking.

4. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights. You can exercise them in-app or by emailing privacy@sporvio.com.

• Access: Request access to the personal information we hold about you and how it has been used or disclosed.
• Rectification / Correction: Edit your profile in-app, or ask us to correct inaccurate or incomplete information.
• Erasure / Deletion: Permanently delete your account and personal data from within the app (Me → Settings → Account → Delete account). This is a full account deletion, not a deactivation. A deletion request is subject to a 30-day withdrawal period, during which you may withdraw the request by signing in to the app. When the withdrawal period ends, we delete or anonymize your personal data (in any event within 31 days of the request), except where retention is required by law, for fraud/abuse prevention, to resolve disputes or enforce our Terms, or in routine backups (purged on the backup cycle). Content others have already received (for example, messages in their inbox) or aggregated/anonymized data may persist. You can also request account and data deletion without the app by emailing privacy@sporvio.com, or via the account-deletion page at https://www.sporvio.com/delete-account. We verify your identity against the account on file before deleting.
• Restriction: Ask us to restrict processing in certain circumstances.
• Data Portability / Export: Download a copy of your data in a portable format (JSON) in the app (Me → Settings → Export my data), or request it at privacy@sporvio.com.
• Object: Object to processing based on legitimate interests, including recommendations/profiling.
• Withdraw Consent: You may withdraw consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice — including by turning off device permissions (push, photo library, camera) or deleting your account. Withdrawing consent does not affect processing already carried out, and withdrawing some consents may mean we can no longer provide parts of the Service.
• Automated decisions: We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
• Right to Lodge a Complaint: You may complain to a supervisory authority. In Canada, that is the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca; you may also contact your local data protection authority.

We may decline a request only where permitted by law and will explain why. We verify your identity (by matching information to the account/email on file) before fulfilling access, deletion, or correction requests.

Response timing: We respond without undue delay and within one month (30 days) of receipt. For complex or numerous requests we may extend by up to two further months and will tell you within the first month. (California-specific timing is described in the California section below.)

5. Data Storage, Security, and Breach Notification

• Storage: Data is stored with our hosting providers, primarily in Canada. See Cross-Border Data Transfer below.
• Encryption and backups: Our hosting provider encrypts stored data at rest. We keep continuous backups of our database that can restore it to any point within the past 7 days, used only for disaster recovery; data is deleted from backups as they roll over and is kept in backups for no more than 30 days.
• Safeguards: We protect your personal information with organizational and technical safeguards appropriate to its sensitivity, including bcrypt password hashing (a strong one-way hash, so we never see your plaintext password), HTTPS/TLS in transit, access controls limiting who on 1001588189 Ontario Inc. (operating as Sporvio) can access user data, and confidentiality obligations for anyone with access.
• No system is fully secure: While we work to protect your information, no method of transmission or storage is 100% secure.
• Breach notification: If a breach of security safeguards involving your personal information occurs and creates a real risk of significant harm, we will notify you and report it to the Office of the Privacy Commissioner of Canada as soon as feasible, will keep records of breaches as required by PIPEDA, and (where the GDPR applies) will comply with our notification obligations under Articles 33–34, and we will also notify affected users and any regulators as required by applicable U.S. state data-breach notification laws.

6. Data Retention

We retain personal information only as long as needed to provide the Service and for the purposes described in this policy, or as required by law. General guidance:

• Account and profile: Retained while your account is active. A request to delete your account is subject to a 30-day withdrawal period; when it ends, your account and profile are deleted or anonymized (in any event within 31 days of the request).
• Incomplete registrations: Where registration is not completed, the account and any information provided are deleted after 7 days.
• Dispute evidence files: Booking proofs, match proofs, and support attachments you upload are retained for 180 days after your account deletion is completed, so that a dispute can still be raised or answered during that period, and are then deleted.
• Backups: Data in backups is deleted as backups rotate and is retained in backups for no more than 30 days.
• Payment and order records: Retained for as long as needed for accounting, tax, refunds and dispute resolution, and as required by law.
• Server, API, and database logs (including IP addresses): Retained by our hosting providers for security, fraud prevention, and troubleshooting, for up to 30 days.
• Crash and error reports: Retained to diagnose and fix problems, for up to 90 days.
• In-app usage records and privacy-setting change records: Each retained for 24 months from the date recorded and then deleted; deleted earlier if your account is deleted.
• Chat / direct messages: Retained while your account is active.
• Vee conversations: Stored only on your device and not kept on our servers; deleted when you clear the conversation in the app or delete the app.
• Paused clubs: When a personal subscription is cancelled or downgraded, clubs over the plan's limit are paused and kept, with their members, events and points history, for the period in section 22.7 of our Terms of Service (at most 6 months), and are then disbanded. A custom club link that is no longer in use is held for 6 months before it can be given to anyone else.
• Organization affiliation: Retained until you remove it or delete your account, whichever comes first; removal is permanent. The email fingerprint is kept only while the affiliation exists.
• Coach profile: Retained until you delete the coach profile or your account, and removed from public pages when deleted. Scheduling, attendance and pay records kept by a venue or organization are its business records and are retained as long as its bookkeeping requires; after you delete your account, only your name remains in those records.
• Reviews: Retained until you delete the review, and removed from public pages when deleted. If you delete your account, your reviews stay public without your nickname or avatar and are shown as from a "Deleted user"; the star rating and text are kept.
• Legal-hold / fraud records: Retained as required to meet legal obligations, resolve disputes, prevent fraud, or enforce our Terms.

Where we cannot give a fixed period, we use criteria such as legal obligation and legitimate operational need.

6.1 Anti-Fraud and Anti-Money-Laundering Records

To detect and prevent fraud, account takeover, payment abuse and money laundering, and to meet our obligations under applicable payment-network and anti-money-laundering rules, we keep a limited set of irreversible one-way digests (hashes) derived from: your mobile number, email address, payment-card fingerprint and device identifier.

• We do not keep the underlying values in this record. A digest cannot be reversed to recover the original number, address, card or device.
• Purpose limitation. These digests are used only to recognise repeat or linked activity for fraud and anti-money-laundering screening. They are not used for advertising, profiling or personalisation.
• Retention period: 24 months from the transaction or event that produced the record, after which the digest is deleted — or longer only where a law requires it.
• This record is kept after account deletion for the period above, because deleting it on request would defeat its purpose. This is the fraud-prevention exception described under "Erasure / Deletion" in Section 4.
• Challenging a decision. If you believe a fraud or anti-money-laundering decision about you is wrong, contact privacy@sporvio.com. A person — not an automated process alone — will review it and tell you the outcome. You may also complain to the Office of the Privacy Commissioner of Canada or, if you live in Quebec, the Commission d'accès à l'information du Québec (see Section 8).

7. Cross-Border Data Transfer

Sporvio is based in Canada. Your primary database is hosted in Canada. Some data may also be stored or processed in the United States by the service providers listed above.

• Canada benefits from an EU adequacy decision for commercial data covered by PIPEDA.
• Where we transfer data internationally (for example, to the US), we rely on appropriate safeguards such as standard contractual clauses and/or, where a sub-processor is certified, the EU-US Data Privacy Framework. You may request a copy of the relevant safeguards via privacy@sporvio.com.
• While your data is in another country, it is subject to that country's laws and may be accessed by its courts, governments, and law-enforcement or national-security authorities. We remain accountable for your personal information and require our service providers to protect it to a comparable standard.

8. Your Privacy Rights by Region

Canada (PIPEDA) — Home Jurisdiction

We handle your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. Challenging our compliance: if you have a privacy concern, contact us first at privacy@sporvio.com. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

Quebec residents have additional rights under Quebec's Law 25, including data portability and the right to contact our designated person responsible for the protection of personal information at privacy@sporvio.com, and may complain to the Commission d'accès à l'information du Québec (CAI). Before transferring personal information outside Quebec (for example, to servers in the United States), we conduct a privacy impact assessment as required by Law 25, taking into account the sensitivity of the information, the purposes of its use, the protective measures (including contractual) that would apply, and the legal framework of the destination jurisdiction, and we transfer only where the information would receive adequate protection.

United States — California (CCPA/CPRA)

This section applies to California residents. We do not sell or share personal information.

Categories of personal information we collect, sources, purposes, and recipients:

• Identifiers (email, nickname, IP address, device identifiers, push token) — collected directly from you and automatically from your device.
• Customer records (hashed password, optional phone number) — directly from you.
• Payment information (card brand, last four digits, expiry, card fingerprint, transaction records) — from you and from our payment processor; we never receive your full card number.
• Internet/network activity (usage events, crash/diagnostic logs) — automatically from your device.
• Geolocation — precise device location, only with your permission and only within the features described in Section 1.3 (venue check-in, sharing location in chat, distance to venues).
• Audio/visual (photos you upload) — directly from you.
• Professional/sport profile and demographic data (sport levels, city, date of birth/age, optional gender) — directly from you.
• Inferences (basic recommendations) — derived from the above.

Sources: directly from you; automatically from your device; and (if/when you enable Apple/Google sign-in) from those providers. Business/commercial purposes: to provide and improve the Service, recommendations, security and fraud prevention, support, and legal compliance. Categories of recipients: service providers/contractors (the hosting, payment, push-notification, and crash-reporting providers listed above) and legal/government recipients.

Sensitive Personal Information (SPI): Account log-in credentials (email and password) and the contents of your private direct messages are SPI. We use SPI only to provide and secure the Service and prevent fraud. We do not use or disclose SPI to infer characteristics, so we do not provide a "Limit the Use of My Sensitive Personal Information" link. You may still contact us at privacy@sporvio.com.

Your California rights: Right to Know/Access (including for the 12-month period preceding your request), Delete, Correct, Opt-Out of Sale/Sharing, Limit Use/Disclosure of Sensitive PI, and Non-Discrimination. We will not discriminate against you for exercising your rights — we will not deny you the Service, charge different prices, or provide a different level or quality of service. We retain each category of personal information for the periods described in Data Retention.

How to submit a request: Use in-app deletion or email privacy@sporvio.com (Sporvio operates primarily online, so email is our designated method). We verify your identity by matching information to the account/email on file before fulfilling a request. You may use an authorized agent with written authorization, and we may still verify your identity. California response timing: we acknowledge receipt within 10 business days and respond within 45 calendar days, extendable by an additional 45 days with notice.

We do not sell or share personal information at all, and in particular we do not sell or share the personal information of any user we know to be under 16.

European Union / United Kingdom

The Service is intended for users in Canada and the United States and is not directed at the EU/UK. If you access it from the EU/UK, you may contact us at privacy@sporvio.com, and the GDPR rights and legal bases described in this policy apply to you to the extent the GDPR applies.

China

The Service is offered in Canada and the United States and is not directed to users in mainland China.

9. Cookies and Similar Technologies

• App: We store a login token on your device to keep you signed in.
• Website: We use only the storage strictly necessary to keep you signed in and make the site work.
• We do not use third-party advertising or cross-site tracking cookies.

Do Not Track / Global Privacy Control. Because we do not sell or share personal information and do not use cross-site/cross-context tracking, there is nothing for an opt-out-preference signal to opt out of. If our practices change, we will honor GPC as a valid opt-out and update this policy.

10. Children's Privacy

The Service is not directed to children under 14, and the minimum age to register is 14.

• Age screening: During registration we ask for your date of birth. If you indicate that you are under 14, you cannot register, and the information you entered is deleted within 24 hours.
• Accounts later found to be under 14: If we learn that an existing account belongs to a child under 14, we suspend the account and give the account holder 30 days to confirm their age. If the age is not confirmed within that period, we delete the account, except for records we are required by law to keep.
• Parents/guardians: If you are a parent or guardian and believe your child under 14 has provided us with personal information, please contact us at privacy@sporvio.com. We will verify the request, delete the child's account and associated personal information promptly, and in any case within 30 days, and respond within 30 days.

Organization verification is available only to users aged 18 and over.

11. Accessibility

We are committed to making Sporvio accessible and are working toward conformance with WCAG 2.1 AA and our obligations under the Accessibility for Ontarians with Disabilities Act (AODA). If you encounter an accessibility barrier, contact us at support@sporvio.com and we will work with you to provide the information or service in a suitable way.

12. Changes to This Policy

We may update this policy from time to time. We will revise the "Last Updated" date above, and material changes will be notified via the app or email. Your continued use of the Service after an update means you accept the revised policy.

13. Contact Us

For privacy questions, to exercise your rights, or to raise a complaint about how we handle your personal information:

• Email: privacy@sporvio.com
• Privacy Officer: accountable for our compliance, reachable at the email above. If you are not satisfied with our response to a privacy complaint, you may escalate to the Office of the Privacy Commissioner of Canada (or, for Quebec residents, the Commission d'accès à l'information du Québec) as described in Your Privacy Rights by Region.
• Operator: The Service is currently operated by 1001588189 Ontario Inc. (operating as Sporvio), Ontario, Canada. Reach us at the email above. Mailing address: 706-15 Wertheim Ct, Richmond Hill, ON L4B 3H7, Canada.
• We respond without undue delay and within 30 days (subject to the extensions described above and California-specific timing).