This Odeumate User Privacy Policy (this "Privacy Policy") describes how Broken Leg Software, Inc. d/b/a Odeumate and its affiliates (collectively "Odeumate", "we", "us", and/or "our") collects and processes your personal information for our own purposes when you interact with Odeumate and our websites, services, content, and any related software, mobile applications, and other applications (collectively, "Services").
When you access or use our Services, you acknowledge that you have read this Privacy Policy and understand its contents.
Applicable Law
We are a British Columbia corporation subject to the Personal Information Protection Act, SBC 2003, c. 63 ("PIPA"), which is BC's primary private-sector privacy law. The federal Personal Information Protection and Electronic Documents Act (PIPEDA) applies where PIPA does not — principally to data flows involving federally regulated activities or transfers outside British Columbia.
What This Privacy Policy Covers
This Privacy Policy applies when you:
- visit, interact with, or use any Odeumate Services or websites that link to this Privacy Policy;
- create or administer your Odeumate account;
- receive communications from, or otherwise interact with us;
- complete a questionnaire, support ticket, or other information request forms;
- engage in a contracting process with Odeumate;
- register or take part in our marketing, learning, or training events; and
- offer or integrate your application, content, product, or services on or through Odeumate Services.
This Privacy Policy does not apply to personal information we collect as an employer, or to third-party products and services.
Personal Information We Collect
Information You Provide To Us
- Account information — email address, password, authentication credentials.
- Contact and professional information — name, address, phone number, company name, job title, department, industry.
- Payment information — credit card and bank account information, VAT numbers, tax identifiers.
- Communications information — feedback, queries, chat/email/call history.
- Financial information — bank routing and account information for regulatory clearance.
- Audio and video recordings — event or meeting recordings (with notice and consent where required).
- Contractor or vendor information — TIN, invoices, contracts, financial information.
- Advertising and marketing information — interests and communication preferences.
Information We Collect Automatically
- Usage and interaction information — URL clickstream, content viewed, page response times, download errors, page interaction data.
- Log data and device information — IP address, device/browser type, operating system, time zone, access dates and times.
- Inferred location information — based on IP address lookup.
- Location information — GPS, wireless, or Bluetooth technology (when permission is granted).
- Cookies and similar tracking technologies — as described in our Cookie Notice.
Information We Collect from Other Sources
- Other Odeumate users — contact information via referrals or our referral programs.
- Third-party service providers — identity verification, risk management, fraud prevention data.
- Public and third-party sources — social profiles, marketing data from aggregators, events, and social media.
How We Use Your Personal Information
- User Account — register, create, and administrate your account.
- Process Transactions — payments, registrations, memberships, and purchases.
- Providing Services — deliver and assess eligibility for our Services.
- Communications — service updates, security alerts, support messages, and responding to inquiries.
- Improvement — measure, troubleshoot, develop, and improve our Services.
- Personalization — recommend Services and personalize your experience.
- Marketing — send promotional messages and personalize advertising. Where required by Canada's Anti-Spam Legislation (CASL) or other applicable law, we obtain your express or implied consent before sending commercial electronic messages, and include an unsubscribe mechanism in each message.
- Security — prevent and investigate security and fraud issues.
- Legal Compliance — comply with legal and regulatory obligations.
How We Disclose Your Personal Information
- Within your organization — in accordance with your account settings and preferences.
- Third-party transactions — for services available through our platform.
- Service providers — cloud computing, payments, analytics, customer support, etc.
- Business advisors — lawyers, bankers, auditors, and insurers.
- Authorized representatives, vendors, and contractors of Odeumate customers.
- Advertising services — to serve relevant ads and measure effectiveness.
- Legal protection — to comply with law, enforce our terms, and protect rights and safety.
- Affiliates — within the Odeumate corporate group.
- Business transfers — mergers, acquisitions, or sale of assets.
- With your consent.
How Long We Keep Your Personal Information
We keep your personal information for as long as required to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. After expiry, your personal information will be deleted, anonymized, or irreversibly destroyed in accordance with applicable laws.
International Transfers
Personal information may be stored and processed in your region, in Canada, in the United States, or in any other country where we or our service providers maintain facilities. We maintain primary data centers in Canada. When transferring personal information from jurisdictions restricting such exports, we adopt appropriate data transfer tools such as standard contractual clauses or consent.
Cookies
We use cookies and similar technologies to recognize your browser, provide our Services, and improve your experience. The types of cookies we use include:
- Essential cookies — required for the Services to function, including authentication, session management, and security. These cannot be disabled.
- Preference cookies — store your settings and preferences to personalize your experience.
- Analytics cookies — help us understand how the Services are used so we can improve them. These are only set with your consent where required by law.
You can control non-essential cookies through your browser settings. Disabling certain cookies may affect your ability to use some features of the Services.
Security
We design our systems with your security and privacy in mind. We maintain compliance programs, use industry-standard encryption for data in transit, and implement technical, physical, and organizational safeguards. However, no security measure is 100% secure. You are responsible for protecting your password, limiting device access, and signing out after sessions.
Your Rights and Choices
Depending on your location, you may have the right to:
- Ask whether we hold personal information about you, and request copies.
- Request correction of inaccurate personal information.
- Request deletion of your personal information.
- Request restriction of processing.
- Object to certain processing.
- Request portability of personal information.
- Withdraw your consent at any time.
- Opt out of disclosure for targeted advertising.
- Unsubscribe from promotional communications.
- Submit a complaint to a data protection authority.
We will respond to access and correction requests within 30 business days of receipt, as required by PIPA s. 29. In some cases we may extend this period; if so, we will notify you of the extension and the reason for it.
To exercise any of these rights, please contact our Privacy Officer at privacy@odeumate.com.
Withdrawing Consent
You may withdraw consent to the collection or use of your personal information at any time by contacting our Privacy Officer at privacy@odeumate.com. Withdrawal of consent does not affect the lawfulness of any collection or use that occurred prior to withdrawal. Please note that if you withdraw consent for certain uses (such as providing the Services), we may be unable to continue providing those Services.
Children's Personal Information
We do not provide our Services to children. We do not knowingly collect personal information from children under the age of 16 without parental consent. If you learn that a child has provided us with personal information, please contact us.
Complaints
If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to make a complaint to the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC):
- Website: oipc.bc.ca
- Phone: 250-387-5629
- Toll-free: 1-800-663-7867
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will post a notice and seek consent when required by applicable laws.
Privacy Officer
Broken Leg Software Inc. d/b/a Odeumate has designated a Privacy Officer responsible for ensuring compliance with this Privacy Policy and with applicable privacy law. To reach our Privacy Officer with questions, concerns, or requests:
- Email: privacy@odeumate.com
- Mail: Broken Leg Software Inc. d/b/a Odeumate, British Columbia, Canada
Additional Information for US State Residents
Residents of US states with applicable privacy laws — including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Nevada, and others — may have rights similar to those described in this Privacy Policy. Depending on your state and our relationship with you, these rights may include:
- The right to confirm whether we process your personal information and to access it.
- The right to correct inaccurate personal information.
- The right to delete personal information we hold about you.
- The right to data portability — to obtain a copy of your personal information in a portable format.
- The right to opt out of the sale or sharing of your personal information and targeted advertising.
- The right to opt out of profiling that produces legal or similarly significant effects.
- The right to appeal a decision we make in response to a privacy rights request.
We do not sell personal information. We do not engage in profiling that produces legal or similarly significant effects without consent. To exercise any of these rights, contact us at privacy@odeumate.com. We will respond within the timeframe required by your state's applicable law.
Additional Information for California Residents
The following additional disclosures are required by the California Consumer Privacy Act and the California Privacy Rights Act (together, the "CCPA").
Categories of Personal Information
Categories we have collected and disclosed in the preceding twelve months include: identifiers, personal information per Section 1798.80(e), characteristics of protected classifications, commercial information, internet/electronic network activity, geolocation data, audio/visual/electronic information, professional/employment information, inference data, and sensitive personal information.
Your CCPA Rights
You may ask us to provide descriptions of personal information we hold, provide access and portability, update or correct your information, delete certain information, and opt out of "sale" and "sharing." We will not discriminate against any consumer for exercising their CCPA rights.
To exercise your rights, contact us at privacy@odeumate.com.