Website legal
Website Privacy Policy
1. Who is responsible
Heydao Technologies Inc. operates this website and is responsible for the personal information described in this policy. For privacy questions, rights requests or complaints, contact our Privacy Officer at privacy@heydao.app.
2. Information we collect
Visit and interaction information: page path, visit time, time on page, scroll depth, page sections reached, button clicks, interface language, referring website or campaign parameters, device type, browser, and approximate country-level region.
Waitlist: the email address you submit, interface language, submission time and source.
Partnership inquiries: business name, city, venue address, contact name, preferred contact method and contact details, plus any venue link or notes you choose to provide.
No-account gathering applications: the gathering identifier, the name you enter, contact-method type and contact detail, your age declaration, application and review status, submission and decision times, and a salted one-way hash derived from the submission IP. We do not require a no-account applicant to create an account. The browser stores a random status token in session storage; our server stores only its hash so that the same browser can check status, view a hidden address after approval, or withdraw.
No-account organization-event registration: a verified Canadian university organization may require a phone number, email address, or both. We also record whether you separately consent to future event updates from that organization, and the time and version of that consent. A guest registration counts toward capacity but does not create a Heydao account or join the event chat.
Direct contact: your email address, message, attachments and internal records needed to handle your request. To protect forms and interfaces, we also briefly process a technical rate-limit record derived from the request IP address.
Please do not send identity documents, health information, payment-card information or another person’s sensitive information unless it is necessary for your request.
3. Why we use information
We use this information to operate and protect the website, understand whether pages work and are useful, send launch updates you request, respond to contact or partnership inquiries, process no-account applications and status checks, prevent duplicates or abuse, coordinate gatherings, maintain necessary records, and comply with law. Depending on applicable law, we rely on your consent, steps taken at your request, our legitimate interests in operating and protecting the website and gathering applications, or legal obligations.
A no-account applicant's name and contact detail are shown only to the gathering host and approved collaborators who still have review permission, for this gathering's review, contact, safety and attendance coordination. We do not provide that contact detail to other attendees or use it for future marketing by Heydao or the host.
Organization-event registration details are shown only to authorized administrators of that organization for review and event coordination. The organization may use the contact details for future event updates only if you separately opt in. You can withdraw that consent from the original status page, and the organization must honor unsubscribe requests.
We do not sell website personal information or use it for third-party advertising or cross-site behavioural profiles.
4. Website analytics and browser storage
We use first-party event analytics controlled by Heydao. We do not use third-party advertising analytics, cross-site tracking, session replay, cookies or persistent device identifiers. Analytics events use a random identifier generated for each page view and are not combined with waitlist emails, partnership applications or App accounts. Raw events are retained for no more than 90 days, then deleted or kept only as non-personal aggregate results.
Our servers process IP addresses when receiving network requests. Full IP addresses are not written to analytics events. Rate-limit records used to prevent abuse are stored briefly as non-readable derived values and are automatically removed after the rate-limit window.
The website uses localStorage only to remember the Chinese or English interface preference you select. It is not used for analytics, advertising or cross-site tracking. The website does not send analytics events when Do Not Track or Global Privacy Control is enabled.
5. Providers and international processing
We use hosting, database, email, domain and security providers to operate the website, including Vercel, Supabase and Resend. Partnership applications are also sent to a Heydao business mailbox accessible only to authorized personnel. No-account applications are received by an interface hosted on Vercel and stored in Supabase; apart from the host and collaborators described above, they are not provided to merchants or other third-party event operators. Providers may process this information only to provide services to us or as required by law, not for their own advertising.
These services may process data in Canada, the United States or other regions where they operate. We use contracts and other appropriate measures required by applicable law to protect information processed across borders.
6. Retention
Waitlist records are kept until the relevant launch notices are complete, you unsubscribe, or the list is no longer needed. Partnership and contact records are kept while the request is handled and afterward only as needed for reasonable follow-up, audits, disputes or legal obligations. No-account application records, including contact details and the IP hash, are kept for no more than 30 days after the gathering ends and are then automatically deleted; they are also deleted if the gathering is deleted. Raw website analytics events are kept for no more than 90 days. Rate-limit records are normally removed within hours after the applicable window ends.
7. Your choices and rights
You may unsubscribe from non-essential waitlist notices using the method provided in an email. Depending on where you live, you may also request access to, correction or deletion of personal information, withdraw consent, or object to or restrict certain processing. We may reasonably verify your identity and retain necessary records where permitted by law.
Send requests or complaints to privacy@heydao.app. We will first try to resolve the matter directly. You may also complain to the privacy regulator with jurisdiction where you live.
8. Age, security and updates
Website forms are not directed to children, and no-account gathering applications are available only to people who are at least 18. Alcohol-related gatherings also require applicants to declare that they have reached the legal drinking age where the gathering occurs. The checkbox is a declaration, not identity or age verification. If we learn that a child submitted personal information without appropriate authorization, we will handle or delete it as required by law. We use technical and organizational safeguards appropriate to the information, but no system can guarantee absolute security.
If website data processing changes materially, we will update this page and its date, and provide additional notice or obtain consent where required by law.