Privacy notice

Who we are

IHARC Labs is part of the Integrated Homelessness & Addictions Response Centre. IHARC is operated by BuildX Community Response Team, a registered nonprofit. Contact hello@iharc.ca for privacy questions or requests concerning IHARC Labs hosting.

Information used to provide hosting

• Account and authentication information, including your email address, account membership, sign-in records, and the authentication methods you configure.
• Hosting information, including selected plans, domain names, website files and databases, backup copies, resource usage, and service-operation records.
• Billing information, including Stripe customer and subscription identifiers, invoice and payment status, and information you provide during checkout. Payment-card details are entered through Stripe's hosted payment interfaces.
• Support correspondence and technical records used to investigate problems, protect accounts, and operate the service. Technical records may include IP addresses, request details, timestamps, and error information.

We use this information to authenticate you, provide and recover hosting, process billing, communicate about your service, investigate failures, and protect the platform. Customer websites can collect their own visitors' information; the website operator is responsible for explaining that collection and handling requests about it.

News links

When you use our news-link tool, we store the public destination URL and available preview information, such as the publisher, title, description, and a preview image. This lets a shared link show a preview and take readers to the original article, including if a sharing platform removes part of the link. We do not store article bodies or a history of what recipients read.

A shared news link is public: anyone with it can see the destination and preview. Your browser contacts the original publisher when you open the article. The service and its providers may process ordinary request details needed to deliver and protect the tool.

Analytics and advertising measurement

With your permission, we use Google Analytics and Google Ads measurement on IHARC Labs and the customer portal to understand visits, hosting-plan interest, and whether a hosting service becomes paid. We use this measurement to evaluate our advertising and service. Google's advertising identifiers may be used after you accept so that an advertising visit can be attributed to a later conversion.

We do not send account email addresses, authentication data, support messages, customer website content, news article URLs or titles, or payment-card details to Google. Verified billing events may send the invoice transaction identifier, service value, and consented advertising attribution needed to measure paid hosting and avoid duplicate conversion records. You can accept, decline, or reopen your cookie choices from the site footer. Declining does not affect hosting, account, or essential service cookies.

Service providers

The following providers support the service and process information for their respective functions:

• Microsoft Azure: hosting infrastructure, backup storage, operational monitoring, secret storage, and transactional email through Azure Communication Services.
• Supabase: account authentication, the platform database, news-link records and preview image storage, and database backups. Its leaked-password protection uses the Have I Been Pwned password-screening service.
• Stripe: checkout, recurring billing, payment methods, invoices, and billing self-service.
• Vercel: delivery of the IHARC Labs public website and news-link service.
• Google: optional Analytics and Ads measurement after you accept analytics cookies.

Our current hosting infrastructure and primary platform database are located in Canada. Providers may process some information in other countries to deliver their services. Domain names used for public HTTPS certificates may appear in public certificate-transparency records.

Sessions and security

The customer account uses authentication cookies and browser session storage to keep you signed in and complete authentication flows. Our providers process technical information needed to deliver and secure their services. Your own hosted website may use additional cookies or analytics under your control.

Access controls, encrypted connections, protected credentials, and backups help safeguard information. Support access to hosting content may be needed to investigate a problem or recover a service. Do not send account passwords, payment-card details, or recovery keys in support messages.

Retention and deletion

Daily website backups provide up to seven restore points. After a hosting service ends, its data remains recoverable for 30 days. Deleted backup copies remain recoverable in protected storage for seven additional days. That protection does not extend access to an ended service, and deletion is not immediate removal from every backup.

Account, billing, support, and security records are separate from hosted website data. Contact us for access, correction, or deletion requests concerning these records. We will explain any information that must be retained for an outstanding issue or applicable legal requirement rather than promise a deletion date that does not apply to it.

Your questions and requests

Email hello@iharc.ca to request access to or correction of your personal information, discuss deletion, or raise a privacy concern. We may need to verify your identity before disclosing or changing account information. For information collected by a customer's website, contact that website's operator.

See the hosting terms for service, billing, cancellation, backup, and support details.