Privacy Policy

WeCAN Volunteer Solutions (“WeCAN,” “we,” “us”) is committed to protecting the privacy of our volunteers, host organizations, and partners. This Privacy Policy describes what information we collect, how we use it, and the choices you have.

Information we collect

When you use the platform we collect:

• Account information — your name, email, role (volunteer, host, admin), and password (stored as a salted hash, never in plain text).
• Profile information — what you choose to add: city, postal code, phone, bio, skills, languages, date of birth.
• Compliance flags — for volunteers, whether consent, police-check, and vulnerable-sector clearance documents are on file. These flags are set by admins; we do not store the documents themselves in the MVP.
• Activity data — applications, attendance, hours logged, messages, and notifications.

How we use your information

• To match volunteers with relevant opportunities.
• To allow host organizations to manage applications and attendance.
• To send transactional emails (account verification, password reset, application status).
• To produce aggregate, anonymized impact reports.

Where your data is stored

All platform data is stored in Canada (Supabase, ca-central-1 region in Toronto). Backups are taken daily and retained per our backup policy.

Sharing

We do not sell your personal information. We share data only:

• With host organizations whose opportunities you apply to (your name, message, and profile).
• With our infrastructure providers (Supabase, Vercel, Resend) under data processing agreements.
• When required by law or to protect users from harm.

Your rights

You can edit your profile, withdraw applications, and delete your account at any time from your settings. Account deletion removes your personal information and detaches it from your historical activity (which may be retained in anonymized form for impact reporting).

Contact

Questions about this policy? Contact us.