Privacy Policy

What We Collect

• Email address - When you subscribe to our newsletter, enter a contest, or create an account
• Browsing data - Pages you visit and events you click on
• Device and browser identifiers - First-party cookies or similar browser storage used to recognize returning visitors, measure site use, and attribute advertising
• Account information - If you create an account, we store your user ID and authentication tokens
• Phone number and text messages - When you text our number, (902) 800-5556, sign up for text updates at halifamous.ca/sms, or sign in with a texted code, we receive your mobile number and any messages you send us
• Raffle purchases - When you buy a raffle or 50/50 ticket at checkout.halifamous.ca, our checkout partner Rafflify collects your name, email, and payment details. We receive your order details (such as ticket numbers) to show your receipt — never your payment card information

Why We Collect It

• Newsletter - To send you weekly updates about Halifax events and culture
• Contests - To enter you in draws and notify winners
• Analytics - To understand what content resonates and improve our recommendations
• Accounts - To let you manage your preferences and contest entries
• Text messages - To answer the questions you text us, and to send the text updates you signed up for
• Raffles - To show your ticket receipt and support winner verification
• Advertising - To show you relevant Halifamous ads and invite you to subscribe. We share hashed (irreversibly encoded) identifiers like your email with advertising platforms such as Meta for audience matching - never your raw personal information, and we never sell it.

Third-Party Services

We use these services to operate Halifamous. Your data may be stored on their servers in the United States or European Union:

• Beehiiv - Newsletter delivery (Privacy Policy)
• PostHog - Analytics (Privacy Policy)
• Supabase - Database and authentication (Privacy Policy)
• Resend - Transactional emails (Privacy Policy)
• Rafflify - Licensed e-raffle supplier that processes raffle ticket purchases at checkout.halifamous.ca (Privacy Policy)
• Twilio - Delivers our text messages (SMS and RCS) (Privacy Policy)
• Anthropic - Writes the replies to questions you text us. It receives your message and our recent replies to you, not your phone number, and does not use them to train its models. (Privacy Policy)
• Meta (Facebook & Instagram) - Advertising and audience matching. We upload hashed email identifiers to show relevant ads; you can opt out via your Meta ad preferences. (Privacy Policy)

Creators Hub and Instagram

Creators who work with us on a campaign can connect an Instagram Professional account through Instagram Login. This is optional and separate from your Halifamous login.

• What we collect - We ask Instagram for two permissions. The first lets us read your profile (username, name, bio, profile picture), your follower, following and post counts, and the list of your posts. The second lets us read insights: reach, likes, comments, saves and shares for the campaign posts you log with us, and a summary of your audience (the top cities and countries your followers are in, age ranges, gender split, and your reach over the last 30 days). Instagram returns audience figures only as ranges and totals, never individual followers. We store a long-lived access token so we can do this without asking you to sign in again.
• Why - To show you your own results and audience summary on your dashboard, to judge fit for a campaign (for example, how much of your audience is in Halifax), and to report campaign results to the partner who funded that campaign. We only pull post insights for posts you have logged.
• What we never do - We never post on your behalf, never read your messages or comments, and never see your password.
• Retention - We keep the connection until you disconnect it in your dashboard or remove Halifamous inside Instagram. If a token cannot be renewed it expires after 60 days and we stop reading anything.
• Deletion - Removing Halifamous under Instagram Settings, then Apps and Websites, deletes your Instagram record with us and gives you a confirmation code. Full instructions are on our Instagram data deletion page.

Creators Hub: YouTube and TikTok

Creators who work with us on a campaign can also connect a YouTube channel or a TikTok account. You must be 18 or older to take part in the Creators Hub or connect an account. Connecting is optional, and each platform is connected and disconnected separately.

YouTube

• Our YouTube connection uses YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service, and Google's use of your data is covered by the Google Privacy Policy.
• What we read - We ask Google for two read-only permissions. The first (youtube.readonly) lets us read your channel ID, name, handle, profile picture, subscriber, view and video counts, and your list of videos. The second (yt-analytics.readonly) lets us read YouTube Analytics for the campaign videos you log with us: views, watch time, likes, comments, shares, and the country and estimated city of viewers. YouTube returns these as totals, never individual viewers.
• What we store - Your channel ID, handle and the profile fields above, the permissions you granted, an access token and refresh token, and the numbers for the campaign videos you log, with the time we read them. We refresh or delete stored YouTube numbers within 30 days.
• Who sees it - You, on your dashboard, and Halifamous staff running your campaign. A campaign sponsor sees a video's numbers only if you tick "Share this video's numbers" for that sponsor on that campaign. Sponsors see each creator's YouTube numbers separately; we do not add them into campaign totals.
• Disconnecting - Choose Disconnect on your dashboard. We revoke our access with Google straight away and delete your stored YouTube data within 7 days. You can also remove Halifamous at any time from your Google account's third-party access page. We check every connection at least every 30 days, and when access has been removed we delete your stored YouTube data within 30 days.
• Limited Use - Halifamous's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube data only to show you and, where you opt in, your campaign sponsor the results described above. We never use it for advertising, never sell it or give it to data brokers, and never use it to train AI or machine learning models. It is encrypted in transit and at rest.

TikTok

• Our TikTok connection uses TikTok Login Kit and the TikTok Display API. TikTok's handling of your data is covered by the TikTok Privacy Policy.
• What we read - We ask TikTok for four permissions: your basic profile (ID, display name, avatar), your username and profile link, your follower, following, like and video counts, and your list of public videos with each video's views, likes, comments and shares. TikTok does not give us your audience's location, age or gender.
• What we store - Your TikTok ID, username and the profile fields above, the permissions you granted, an access token (valid 24 hours) and a refresh token (valid up to a year), and the numbers for the campaign videos you log, with the time we read them.
• Who sees it - You, on your dashboard, and Halifamous staff running your campaign. A campaign sponsor sees a video's numbers only if you tick "Share this video's numbers" for that sponsor on that campaign.
• Disconnecting - Choose Disconnect on your dashboard, or remove Halifamous from the apps connected to your account in TikTok's settings. Either way we revoke our token (if TikTok has not already) and delete your stored TikTok data.

For both platforms: we never post, comment or upload on your behalf, never read your messages, and never see your password. Connected numbers are never used to rank creators publicly. Your access tokens are kept only on our servers, never sent to your browser, and are not readable by other users. We store this data with our database provider (Supabase) in Canada; Google and TikTok process it on their own systems, which may be outside Canada. Connecting is your consent to the uses above, and you can withdraw it at any time by disconnecting. Step-by-step deletion instructions are on our creator data deletion page.

Cookies

We use first-party cookies and similar browser storage for essential account sessions, an anonymous Halifamous visitor identifier, analytics through PostHog, and advertising measurement through Meta. These may include hfm_anon_id, Meta's _fbp/_fbc identifiers, and service-specific analytics or authentication storage. You can clear or block them in your browser settings, though blocking essential storage may prevent account features from working.

Sponsor Reports

We may share aggregate statistics with sponsors (e.g., "500 people viewed this event"). We never share individual-level data about readers or sell your personal information. Creators who take part in a sponsored campaign are covered by the Creators Hub sections above.

Your Rights

• Access - Request a copy of your data by emailing us. We respond within 30 days
• Correction - Ask us to fix any incorrect information
• Deletion - Request we delete your data (we'll anonymize it to preserve aggregate analytics). Data read from Instagram, YouTube or TikTok is deleted outright, never anonymized; see the Creators Hub sections above.
• Unsubscribe - Every newsletter has a one-click unsubscribe link that works within 10 business days
• Withdraw consent - You can withdraw consent at any time, for example by unsubscribing or disconnecting a platform. Numbers you already chose to share in a finished sponsor report cannot be recalled

How We Protect Your Data

We protect personal information with safeguards suited to its sensitivity: encrypted connections, access limited to staff and systems that need it, and platform access tokens kept on our servers only, never in your browser. If a breach creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.

Data Retention

• Email addresses - Until you unsubscribe or request deletion
• Analytics data - Up to 2 years
• Account data - Until you delete your account
• Phone numbers and text messages - Until you text STOP or ask us to delete them

Newsletter & Email

We follow Canada's Anti-Spam Legislation (CASL). Newsletter subscription requires explicit opt-in - we never pre-check the box. Entering a contest does not automatically subscribe you to our newsletter. Every marketing email includes our contact information and a working unsubscribe link.

Text Messages

• Asking us what's on - Text (902) 800-5556 and we reply with event picks. We only reply to messages you send us. Texting us does not sign you up for anything else.
• Text updates - We only send updates to numbers that signed up at halifamous.ca/sms.
• Stopping - Reply STOP at any time and we stop texting you. Reply START to undo it, or HELP for help.
• Costs - Message and data rates from your carrier may apply. We never charge for texts.
• No sharing - We do not sell or share your phone number or your consent to receive texts with third parties for their own marketing. Only the service providers listed above handle them, to deliver and answer your messages.

Contact & Complaints

Our Privacy Officer is accountable for how Halifamous handles personal information. For privacy questions or to exercise your rights, contact our Privacy Officer at:

Halifamous Media
2755 King Street, #601
Halifax, NS B3K 0M1, Canada
hello@halifamous.ca

If you're not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

Updates

We may update this policy from time to time. The "Last updated" date at the top will always reflect the most recent version.