Legal
Privacy Policy
WindsorDesi collects only the personal information each feature needs. This policy explains what that is, why, and what you can do about it, in line with Canada's PIPEDA and CASL.
Last updated: September 16, 2026
1. What we collect
- Account details: your name, email address, and (if you add one) phone number.
- Profile preferences you choose to share: languages, community background, and what brings you to WindsorDesi.
- What you post: classified ads, events, listing details, messages, and submissions.
- IP address: recorded when you sign in, post, or give newsletter consent, for security, fraud prevention, and our consent records.
- Behavioural data: the pages and features you use — see "Behavioural tracking" below.
- Payment token: when you pay, Stripe gives us a customer reference. We never receive or store your card number.
2. How we use it
- Running and personalizing the platform — your account, saved items, notifications, and inbox.
- The newsletter — only if you opt in, and you can unsubscribe at any time.
- Payment processing — subscriptions, boost credits, and other purchases.
- Moderation and fraud prevention — reviewing reported content and detecting duplicate or abusive accounts.
- Transactional emails — account verification, password resets, billing, and ad expiry reminders.
3. Behavioural tracking
We use behavioural information in three plain ways:
- Newsletter segments. If you are a newsletter subscriber with an account, we tag your subscription with interests based on what you do on the site — for example, whether you own a business listing, post classified ads, save events, joined recently, or have visited the Real Estate Corner more than once — so the newsletter can be more relevant to you.
- Business listing statistics. We count views and clicks on business listings (calls, WhatsApp, email, website, directions) so owners can see how their listing performs. These counts are not linked to you.
- Site analytics. We use Google Analytics to understand how the site is used overall, such as which searches are common and which features are used.
4. Who we share it with
We do not sell your personal information. We share it only with the service providers that run parts of WindsorDesi for us:
- Stripe — payment processing
- beehiiv — newsletter delivery
- Resend — transactional email
- Twilio — SMS verification codes
- Google Analytics — web analytics
- Google and Facebook — only if you choose to sign in with them
- Cloudflare — bot protection on forms, and file storage
- Anthropic (Claude API) — drafting articles and event listings from public sources and submissions, always reviewed by a person before publishing
- Vercel and Neon — website hosting and database
- Sentry and Better Stack — error and uptime monitoring
We may also disclose information where the law requires it.
5. Where your information is stored
Several of the providers above are based in the United States, and your personal information may be stored and processed in the United States or other countries outside Canada. While it is there, it is subject to the laws of that country and may be accessible to its courts, law enforcement, and national security authorities.
6. Cookies
We use a sign-in cookie to keep you logged in, Google Analytics cookies to measure site use, and Cloudflare Turnstile to check that forms are submitted by people rather than bots.
7. Newsletter consent records
When you subscribe to the newsletter we record the date, how you signed up, and your IP address at the time, as Canada's anti-spam law (CASL) requires. We never pre-check a newsletter box or assume consent. We keep this minimal record even after you unsubscribe or delete your account, so we can show that we had your consent when we emailed you.
8. Your rights
- Access: ask us for a copy of the personal information we hold about you.
- Correction: update your details from your account profile, or ask us to correct them.
- Deletion: delete your account from your account profile, or email us. Your account is deactivated immediately and your personal information is permanently deleted within 30 days. Posts you made stay on the site but are shown as "Posted by a WindsorDesi member", and we keep only the minimal consent record described above.
- Unsubscribing: use the link at the bottom of any newsletter.
We respond to access and correction requests within 30 days.
9. Contact us
For privacy questions or requests, email hello@windsordesi.com. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.