Your privacy

Who we are

Arthur is run by Vengeance Foundation, a registered charity at 806-88 Bernard Ave., Toronto, Ontario M5R 1R7 (charity number 724771357RR0001). When this page says “we”, it means us. We follow Canada’s privacy law (PIPEDA) and, for people in Quebec, Quebec’s privacy law.

Our Privacy Officer is David Choi. For anything about your information, write to hello@arthur.rocks.

What we keep, and why

• Your account: your name, email and the password you chose (stored scrambled, never readable), plus what you add to your profile. So you can sign in and take part.
• Gifts: your name, email and, for a tax receipt, your address, with the amount, date and which charity and fund it went to. Charities must keep these to issue receipts and for the Canada Revenue Agency.
• Tickets and fees to apply: your name, email, what you bought and when. So the organizer knows who’s coming and can check you in.
• What you do on Arthur: volunteering, applications, stories, the community points and boons they earn, and your level.
• Notes from producers: when you apply or volunteer, the people running it can leave notes about working with you, a thumbs up or down with the reason, or, for harassment, threats, violence or theft, a safety report. Producers and organization staff across Arthur can read them, so organizations can book people safely. You and the public can’t. A safety report is checked by Arthur before anyone else sees it, and anything unfair is taken down.
• Feedback you send: what you write, any screenshot, and the page, device, window size, errors on the page and the few pages you’d just visited, plus a scrambled form of your network address to stop spam. Only so we can find and fix the problem.
• Visits: we count which pages are viewed and where visitors came from, with no tracking cookies and nothing that follows you around the web.

We don’t sell your information, and we don’t use it for advertising.

Card details

Payments are handled by Stripe. Your card number goes straight to Stripe and never reaches Arthur. We see only what we need to record the payment, such as the amount, the last four digits and the billing address you give for a receipt.

What’s public

• Organizations’ pages, initiatives and stories, including the producer’s name on an initiative and the storyteller’s name on a story.
• Totals raised. Never one person’s gift on its own.
• Your name as a donor only if you say yes: “Thank me by name” on Discover, or a charity’s own list of supporters when it shows one. Gifts you give anonymously never show your name.
• Your level and tags. The Community Tree’s “Up next” list shows boons without names.

Who helps us run Arthur

• Supabase: our database and file storage, hosted in Canada.
• Vercel: the servers that show the pages, running in Montréal.
• Stripe: payments, and payouts to the people Arthur pays.
• Resend: sending our emails.

Vercel, Stripe and Resend are American companies, so some information is handled in the United States. It’s protected by our agreements with them, but while it’s there it can be reached by courts and authorities under the law there. Stripe’s own use of your information is in Stripe’s privacy policy. For people in Quebec: this means your information is handled outside Quebec.

Cookies

One: the cookie that keeps you signed in. No advertising or tracking cookies.

How long we keep it

Your account until you ask us to close it. Records of gifts and receipts for as long as Canadian tax law requires charities to keep them, generally at least six years. Everything else for as long as it’s useful for running Arthur, and we delete it when you ask unless the law says we must keep it.

What you can ask for

• A copy of what we keep about you. Signed in, you can download it yourself from Settings → Privacy. Notes from producers are included without who wrote them; a safety report can be held back where sharing it could put someone at risk, as the law allows.
• Corrections to anything that’s wrong. Much of it you can change yourself in Settings.
• To stop being emailed, or to stop showing your name anywhere it shows.
• To close your account and delete what we don’t have to keep.

Write to our Privacy Officer at hello@arthur.rocks. We answer within 30 days. If you’re not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or in Quebec to the Commission d’accès à l’information.

If something goes wrong

We keep a record of every privacy incident. If one puts you at real risk of significant harm, we’ll tell you and the Privacy Commissioner as soon as we can, and what we’re doing about it.

Age

Accounts are for people 14 and older. Buying tickets, paying a fee to apply, or receiving a boon is for people 18 and older, or younger with a parent’s or guardian’s OK.

Changes

If we change this page in a way that matters, we’ll say so on Arthur and change the date at the top.