Privacy policy

The short version

We collect the minimum info needed to verify you're a Canadian student and issue you a personal discount code. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We don't sell your personal information, and we don't use it for third-party advertising.

Who we are

SoftMoc Campus is operated by SoftMoc Inc. at campus.softmoc.com. For any privacy question, request, or complaint, contact campus@softmoc.com.

What we collect

• Account info: first and last name, date of birth (to confirm 16+), personal email.
• School info: the Canadian institution you're enrolled at and — if applicable — your school email.
• Verification documents: student ID, enrollment letter, or timetable that you upload.
• Coupon and redemption activity: codes we've issued to you, when they were used, and by which channel.
• Technical data: IP address, browser/device metadata, and basic log data required to run and secure the service and to prevent fraud.

Why we collect it (purposes)

• Verify your student status.
• Deliver the discount benefit and communicate about your membership.
• Prevent, detect, and investigate fraud and abuse of the program.
• Internal program reporting in aggregate form.
• Meet our legal, regulatory, and contractual obligations.

We do not sell your personal information. We do not use it for third-party advertising. We only send marketing messages if you separately opt in.

AI processing

To keep verification fast, uploaded documents are analyzed by an AI system that extracts key details (name, school, dates) and estimates authenticity. Borderline results are reviewed by a human on our team before a decision is finalized. If you receive an automated decision you disagree with, you can request a human review at any time by emailing campus@softmoc.com.

Consent

We collect your consent at signup (with explicit checkboxes) and again when you upload a document. You can withdraw consent at any time by closing your account (email us and we'll do it), which will stop future processing and trigger the deletion timelines below.

Retention

• Verification documents: automatically deleted from storage 30 days after your application reaches a final decision.
• Extraction summary + document hash + decision record: retained for fraud prevention, audit, and to defend our decisions. No document images are kept.
• Account data: kept while your account is active, plus a reasonable period after (up to 24 months) to satisfy audit and fraud controls.
• Coupon and redemption records: kept for financial and program reporting for up to 24 months.
• Audit logs: kept 24 months.

Safeguards

We use industry-standard safeguards: TLS in transit, encryption at rest for the database and document storage, private (non-public) storage buckets, role-restricted staff access, access logging, and regular review of who can see what.

Who we share with

We use a small set of trusted service providers, each bound by a written agreement with PIPEDA-compatible safeguards:

• Hosting & database: Supabase (managed Postgres, auth, storage).
• Email delivery: Resend (transactional emails).
• AI document analysis: our AI processing partner, used solely to extract details from uploaded documents.
• SoftMoc internal systems: to issue and honor coupons, and for legitimate business operations of the program.
• Legal authorities: where we're required by law, court order, or valid legal process.

Some of these providers may process data outside Canada (typically in the United States and the EU). When they do, they're contractually required to maintain protections equivalent to PIPEDA. We never share your info with SoftMoc's marketing partners, and we don't sell it.

Your rights

Under PIPEDA you can ask us to:

• Access the personal information we hold about you.
• Correct any information that's inaccurate.
• Delete your account and associated data.
• Withdraw your consent to further processing.
• Receive a copy of your data in a portable format.
• File a complaint.

Email campus@softmoc.com and we'll respond within 30 days. If you're not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Minors

SoftMoc Campus is available to Canadian students aged 16 and older. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us information, email us and we'll delete it.

Changes to this policy

If we update this policy, we'll post the revised version at campus.softmoc.com/privacy and update the "Effective" date above. For material changes we'll email active members ahead of time.

Contact

Questions, requests, or complaints? Email campus@softmoc.com.