Privacy Notice — OurSay platform

To register: an email address, a handle, an optional display name, and your confirmation that you are 18 or older. A handle is enough to participate — you have the right to join anonymously.

If you choose to verify (optional): identity and residency checks run through our verification provider, Didit. Didit collects and retains legal name, government-ID data, biometrics needed for the check, proof-of-address documents, and the residential street address string. OurSay does not keep your identity documents or legal name from that flow.

What OurSay stores from verification: the verification outcome (your tier and provider), session references keyed to your account, an optional coarse region tag (for example a province or country code — never a street), and — when residency verification can resolve a location — a private geocoded pointused only for district and jurisdiction filters. We may also keep a non-reversible location hash and an append-only history of distinct resolved points for cache invalidation and future "ever in region" features. The street address Didit returns is used ephemerally to build that point (or skipped if it cannot be resolved); it is not written onto your OurSay profile from the Didit residency path.

Demo / older forms: some registration screens may still accept optional address fields. Those are being retired for signup; self-service residence refresh uses Get Verified / Residency Update (Didit POA), not a street-address form on profile.

Your email, legal name (held by Didit), street address (held by Didit), geocode coordinates, and verification documents are never shown on the public record or to other members. District membership is inferred from your private point and used only in aggregate counts or as coarse relations on read surfaces (for example "same district as you" or "in the affected area") — never as a raw address, coordinates, or district name list. Public surfaces show your handle or a pseudonymous persona, your chosen display name, and your verification tier.

Civic actions you sign (votes, petition signatures, posts) are appended to a permanent, publicly auditable record under your persona or handle, per your visibility choice. See Signing & the public record. Account and profile data are deletable; signed public-record entries are designed not to be — consider that before signing publicly.

To operate accounts and sessions, to verify identity and residency so counts can be trusted, to place participation in jurisdiction and district filters without publishing where you live, and to email you one-time codes for registration, login, and recovery. We do not sell personal information and we do not use it for advertising.

Didit processes verification data under its own terms and privacy policy as our KYC provider. OurSay receives decision outcomes needed to award a tier and, for residency, to derive a private point — not document images or face-match scores for storage.

This deployment is a demonstration. Please do not submit real sensitive information you are not comfortable with at this stage; demo data may be reset. Accounts and content you see in the demo are fictional or sample data.

Under Alberta's Personal Information Protection Act (PIPA) and Canada's PIPEDA you may ask what we hold about you, ask us to correct it, or ask us to delete your account data. Withdraw consent or exercise any of these by emailing oursay.ca@gmail.com. Requests about data Didit holds for verification may also need to go through Didit as that provider's system of record for legal name, documents, and street address.