Privacy Policy

YXE Provider Directory (the “Platform”) is operated by the Saskatchewan Harm Reduction Resource Network. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, apply for an account, sign in, use the safety screening directory, or submit incident reports.

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, do not use the Platform or submit an application.

Account information: email address, password, and display name or handle chosen during registration.

Application information: phone number, email address, working name or handle, advertisement links, referring member handles, and a short explanation of why you are applying. This information is reviewed by moderators to verify identity and eligibility.

Incident report information: client phone numbers, incident date, category (e.g., assault, harassment, no-show), severity rating, and a free-text description. Reports are shared with approved providers only after moderator review.

Usage and audit information: timestamps of lookups, report submissions, moderator actions, and account events. These logs help us protect the community, detect abuse, and maintain platform integrity.

Technical information: browser type, IP address, and device information collected automatically by our hosting infrastructure for security and diagnostics.

To provide and maintain the Platform, including directory access, phone-number screening, and safety reporting.

To verify applications, approve provider accounts, and enforce eligibility requirements.

To moderate reports, investigate disputes, and take action against false or abusive submissions.

To maintain audit logs that protect users and help resolve safety or compliance issues.

To communicate with you about your account, application status, security alerts, or policy changes.

To comply with legal obligations or respond to valid legal process, only when required by law.

Consent: when you check the age, Terms of Service, and Privacy Policy boxes during sign-up or application.

Legitimate interests: operating a safety screening platform, preventing abuse, and protecting the community.

Legal obligation: retaining records or disclosing information when required by applicable law.

We do not sell, rent, or trade personal information.

Approved incident reports are shared only with authenticated providers and moderators.

Moderators and administrators may access application details, account information, and audit logs to perform their duties.

We use trusted service providers (Lovable Cloud / Supabase) to host the Platform and process data. These providers are bound by confidentiality and security obligations.

We may disclose information if required by law, court order, or to protect the safety of users or the public.

Access to the database is controlled by Row Level Security (RLS) policies and role-based permissions.

Passwords are hashed and never stored in plain text.

All data is transmitted over HTTPS.

Phone numbers are normalized and stored for lookup purposes.

No security system is perfect. We encourage you to use a strong password and keep your login credentials confidential.

Account information is retained until you delete your account or we terminate it for violations.

Incident reports may be retained for community safety purposes even after an account is deleted, unless removal is required by law or the report is found to be false or abusive.

Application records are retained for audit and appeals.

Audit logs are retained for security review and are not deleted on account closure.

Access: you may request a copy of the personal information we hold about you.

Correction: you may request corrections to inaccurate account or profile information.

Deletion: you may request deletion of your account. Note that approved incident reports and audit logs may be retained for safety and legal reasons.

Withdraw consent: you may withdraw consent, but doing so may result in loss of access to the Platform.

To exercise any of these rights, contact us using the information below.

The Platform uses only essential cookies and local storage needed for authentication and session management.

We do not use third-party advertising or behavioral tracking cookies.

We may use Google Search Console to understand how the site appears in search results; this does not collect personal data about individual users.

Application forms may ask for links to external advertisement listings. We are not responsible for the privacy practices or content of those third-party sites. Please review their privacy policies before sharing information there.

The Platform is intended solely for adults aged 18 or older. We do not knowingly collect information from minors. If you believe a minor has provided us with personal information, contact us immediately so we can remove it.

We may update this Privacy Policy from time to time. The effective date at the top of the page indicates the latest version. Material changes will be communicated through the Platform or by email. Continued use after changes constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact the operator at the address or email provided through the Platform's support channels.