Canvas Routes is operated by Événements Canvas Routes Inc. / Canvas Routes Events Inc., a corporation incorporated in Quebec, Canada. We can be reached at info@canvasroutes.com. This Privacy Policy applies to the website canvasroutes.com and any services offered through it.
The person responsible for the protection of personal information at Événements Canvas Routes Inc. is the owner. For any privacy-related questions, requests, or concerns, please contact: info@canvasroutes.com. We will respond within 30 days.
When you submit a membership application or event registration, we collect the following personal information: your full name, email address, date of birth (month and day, year optional), phone number (optional), Instagram handle (optional), the year, make, model, and colour of your vehicle, and any additional information you choose to share. When you express interest in an upcoming route, we additionally collect your trip preferences if you choose to provide them — budget range, preferred dates, accommodation preference, preferred activities, and any notes. When you join our notification list, we collect your name, email, phone (optional), date of birth, vehicle details, and the types of events you are interested in. With every form submission we also record the general device platform used (for example iOS, Android, Windows, or macOS), derived from your browser's technical headers — we do not collect device identifiers or track your device across other websites. For approved members, we may also collect and store photos and media you submit for your member profile or gallery. We collect payment card information through Stripe — we do not store raw card data ourselves.
The information you provide is used solely to assess your membership application, process payments, communicate with you about Canvas Routes events and membership status, gauge demand for and plan upcoming routes (including using the trip preferences you share to shape itineraries, accommodation, and activities), understand what devices our community uses so we can improve the website experience, and send you relevant updates about our community. By submitting our forms, you consent to receive these communications. You may withdraw your consent at any time by contacting info@canvasroutes.com. We do not sell, rent, or share your personal information with any third parties for marketing purposes.
We use the following third-party services to operate Canvas Routes: Supabase (supabase.com) stores your personal information in a secure database, including membership applications, member profiles, and event registrations. Stripe (stripe.com) processes payment card information for membership fees and event registrations. Stripe handles, stores, and secures all payment card data on our behalf — we do not store raw card numbers. Resend (resend.com) delivers confirmation and notification emails. Meta Pixel (meta.com) collects anonymised behavioural data on our website to support advertising and analytics through Facebook and Instagram — this data is subject to Meta's own privacy policy and advertising practices. Cloudinary and Backblaze may be used in the future to store member-submitted photos and media. Upstash (upstash.com) provides rate limiting by temporarily storing your IP address to prevent abuse — this data is not linked to your identity and expires automatically. Vercel (vercel.com) hosts the website and processes all web requests — basic technical data including IP addresses may be processed for infrastructure and security purposes. Google Maps (google.com) powers the interactive route maps on our site — when a map loads, Google receives standard technical data such as your IP address, subject to Google's own privacy policy. Sentry (sentry.io) provides error monitoring — if a technical error occurs while you use the site, technical details of the request (which may include your IP address) are captured so we can fix the problem. Anthropic (anthropic.com) provides AI assistance used by our administrators to draft communications — limited application details (such as name and vehicle) may be processed for this purpose, and Anthropic does not use this data to train its models. All third-party services are engaged solely to operate Canvas Routes and are contractually restricted from using your personal data for purposes beyond what we have authorised.
Your personal information is processed by third-party services based in the United States: Supabase, Inc. (database storage), Stripe, Inc. (payment processing), Resend, Inc. (email delivery), Meta Platforms, Inc. (advertising analytics), Upstash, Inc. (rate limiting), Vercel, Inc. (website hosting and infrastructure), Google LLC (maps and analytics), Functional Software, Inc. dba Sentry (error monitoring), and Anthropic, PBC (administrative AI assistance). As a result, your personal information may be stored and processed outside of Quebec and Canada. Before using these services, we assessed that each provides a level of protection comparable to Quebec's privacy law requirements. By submitting our forms, you acknowledge that your information will be transferred to the United States for the purposes described in this policy.
This website uses Google Analytics 4 and the Meta Pixel to collect anonymised usage data, including pages visited, time spent on site, and general location (country/city level). Google Analytics sets the following cookies: _ga (distinguishes users, expires after 2 years) and _ga_* (maintains session state, expires after 2 years). The Meta Pixel sets the _fbp cookie (identifies browsers, expires after 90 days) and may set _fbc if you arrive via a Facebook advertisement. No personally identifiable information is shared with Google or Meta. Analytics and advertising cookies are only set after you give consent using the banner on our site. You can change your cookie preference at any time using the 'Manage cookies' link at the bottom of any page. Basic technical cookies may also be set by our hosting provider (Vercel) for infrastructure and security purposes, and Google Maps may set its own cookies when an interactive map loads. We also use functional browser storage (not cookies, and not used for tracking): if you express interest in a route, your name, email, phone, and car may be saved in your own browser's local storage so the form is pre-filled on your next visit — this stays on your device, and clearing your browser data removes it. A small flag is also stored for the duration of your visit so announcements you dismiss stay dismissed.
As a Quebec resident, you have the following rights regarding your personal information: the right to access the personal information we hold about you; the right to request corrections to inaccurate information; the right to request deletion of your personal information; the right to data portability — to receive your personal information in a commonly used technological format; and the right to withdraw your consent to our use of your data at any time. To exercise any of these rights, contact us at info@canvasroutes.com and we will respond within 30 days.
We retain your personal information for as long as necessary to manage your membership application and communicate with you about Canvas Routes. If you request deletion of your data, we will remove it from our records within 30 days.
We take reasonable measures to protect your personal information. Our website is served over HTTPS, and data transmitted through our forms is encrypted in transit. Payment card data is handled exclusively by Stripe and subject to PCI-DSS compliance. However, no method of transmission over the internet is 100% secure.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. For material changes to how we collect or use your personal information, we will notify you directly by email if you have provided your contact information. For minor changes, we will update the date at the top of this page.
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at info@canvasroutes.com.