1. Introduction

UNI-VERSE ("we", "our", "us") is a campus event discovery platform built by GDG McGill for students at McGill University. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

2. Information We Collect

We collect the following information when you use UNI-VERSE:

• Account information: Your McGill email address, name, and profile avatar when you sign in through our authentication system.
• Interest tags: The event categories you select during onboarding (e.g., academic, social, sports, career, cultural, wellness).
• Event interactions: Events you view, save, RSVP to, or share, used to provide personalized recommendations.
• Event submissions: If you submit events as a club organizer, the event details you provide (title, description, date, location, images).

3. How We Use Your Information

• To authenticate your McGill student identity
• To provide personalized event recommendations based on your interests and saved events
• To send you event reminders and notifications you have opted into
• To display your saved events and RSVP history
• To improve the platform based on aggregated usage patterns

4. Data Storage & Security

Your data is stored securely using Supabase, a SOC2-compliant database platform with built-in Row Level Security (RLS) policies. Authentication is handled through Supabase Auth. All data is transmitted over HTTPS. We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. McGill Email Requirement

UNI-VERSE requires a valid McGill email address (@mcgill.ca or @mail.mcgill.ca) to create an account. This ensures that only McGill community members can access authenticated features such as saving events, RSVPs, and personalized recommendations.

6. Cookies & Local Storage

We use browser cookies and local storage for authentication sessions and theme preferences (light/dark mode). We do not use third-party tracking cookies or advertising pixels.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Opt out of event reminder notifications at any time

To exercise any of these rights, contact us at [email protected].

8. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days. Anonymized, aggregated analytics data may be retained indefinitely.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or an in-app notification. Continued use of UNI-VERSE after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].