Privacy Policy

Effective date and contact

Effective date: July 1, 2026.

For privacy requests, data access questions, or deletion requests, contact [email protected].

This policy is written for users in British Columbia and Canada, including parents, guardians, daycare operators, staff, teachers, applicants, and visitors. It is intended to explain our practices in clear terms and does not replace advice from privacy counsel.

Information we collect

We collect information needed to provide CareOpenings, including account details, names, email addresses, phone numbers, roles, login and security information, communication preferences, consent records, support messages, and device, log, IP address, browser, and usage data.

Depending on the features used, CareOpenings may process daycare profiles, public profile content, website pages, media uploads, waitlists, inquiries, tours, invitations, registration packages, e-consents, child and family details, emergency contacts, medical and allergy notes, parent or guardian details, classroom records, attendance, daily reports, journals, photos, videos, messages, billing fee plans, invoices, receipts, subsidy information, staff and teacher profiles, schedules, time logs, job posts, job applications, hiring invites, and related workflow history.

For CASL and account compliance, consent actions may be stored with timestamp, IP address, user-agent metadata, source, locale, consent version, and preference snapshots.

We may receive information directly from you, from daycare operators or authorized staff, from parents or guardians, from invited users, from public sources, from imported daycare data, from payment and email providers, and from automated platform logs.

How we use information

We use information to provide, secure, support, maintain, troubleshoot, and improve CareOpenings; authenticate users; route users to the correct workspace; operate daycare discovery, waitlists, admissions, registrations, parent portals, classroom tools, messaging, billing, subscriptions, public profiles, careers, notifications, and support workflows.

We use information to send required service communications, security notices, account messages, invitation and registration updates, billing notices, daycare-branded emails, support responses, policy notices, and other operational communications.

We use information to maintain audit logs, consent records, abuse-prevention controls, rate limits, security monitoring, fraud prevention, data integrity checks, backups, analytics, service measurement, product improvement, and legal or regulatory compliance.

Optional promotional communications are sent according to your preference settings and applicable Canadian anti-spam requirements.

Data roles for platform and daycare records

CareOpenings generally controls platform account data, authentication, security logs, analytics, marketing signups, product communications, support records, payment relationship metadata, and records needed to operate and protect the platform.

For daycare operational records, including waitlists, admissions, registration packages, classroom records, staff records, messages, billing documents, and daycare public content, CareOpenings generally acts as a service provider or processor for the daycare. The daycare remains responsible for deciding what information it collects, why it collects it, who may access it, and how it uses it in its childcare operations.

Where a privacy request involves daycare-controlled records, we may need to verify your identity and coordinate with the relevant daycare operator before providing access, correction, deletion, restriction, or export.

Service providers, analytics, AI, and cross-border processing

We share information only as needed for service operation, legal obligations, authorized support, security, payment processing, analytics, or the workflows requested by users and daycare operators.

We use service providers for hosting, database storage, file storage, email delivery, payment processing, analytics, logging, security monitoring, AI-assisted website or content generation, and related technical operations.

If daycare website or content generation features are used, prompts, selected daycare profile details, website content, and related context may be processed by AI providers to generate draft content. Users and daycare operators should avoid including unnecessary sensitive personal information in prompts and must review generated output before use.

Service providers may process information in Canada, the United States, or other locations where they or their infrastructure operate. Information may therefore be subject to the laws of those locations.

We do not sell personal information. We do not use children's personal information for behavioural advertising.

Children and family information

CareOpenings is not intended for children to create accounts or use directly. Child information is collected from parents, guardians, daycare operators, or other authorized users for daycare discovery, waitlist, registration, classroom, billing, and related childcare workflows.

Parents, guardians, and daycare operators are responsible for ensuring they have the authority and consent required to submit child, family, emergency, medical, allergy, photo, video, consent, and registration information.

Because child and family information can be sensitive, users should submit only what is necessary for the relevant daycare workflow and should keep records accurate and up to date.

CareOpenings uses no behavioural advertising directed at children and does not knowingly invite children to provide personal information directly to us.

Communications and consent choices

You can review and update communication preferences from your account where available. Optional promotional communications may be unsubscribed from or adjusted through the available preference and unsubscribe tools.

Required service communications remain enabled for active accounts because they support authentication, security, waitlists, invitations, admissions, registrations, billing, legal notices, and other requested service workflows.

You may withdraw consent where applicable, but withdrawing consent may limit or prevent use of parts of the service where the information or communication is necessary for the requested service, legal compliance, safety, or security.

Retention, safeguards, and breach response

We retain personal information for as long as reasonably needed for the purposes described in this policy, including account operation, daycare workflows, legal obligations, audit logs, consent records, billing records, security, dispute resolution, backup, and legitimate business needs.

Retention periods may vary by record type, user role, daycare relationship, legal requirement, and whether a daycare-controlled record remains needed by a daycare operator. We may preserve records where necessary to protect users, children, families, staff, applicants, daycares, CareOpenings, or legal rights.

We use administrative, technical, and organizational safeguards designed to protect personal information relative to its sensitivity. No system can be guaranteed completely secure, and users must also protect their accounts, devices, and credentials.

If a privacy breach involving personal information under our control creates a real risk of significant harm, we will assess reporting and notification obligations under applicable Canadian privacy law and keep breach records as required.

Your privacy choices and requests

You may request access, correction, deletion, restriction, or portability where applicable law provides those rights. You may also ask questions or challenge our privacy practices by contacting [email protected].

We may need to verify your identity, ask for information needed to locate records, decline or limit requests where permitted or required by law, and coordinate requests involving daycare-controlled records with the relevant daycare operator.

Deletion or restriction may not be available for records that must be retained for security, billing, tax, legal, audit, dispute, fraud-prevention, consent, or daycare operational reasons, or where deletion would affect another person's rights or records.

Accuracy, account controls, and shared responsibility

Users should keep account, child, family, staff, daycare, billing, registration, and communication information accurate and current. Inaccurate records may affect waitlists, invitations, billing, classroom records, communications, or daycare operations.

Daycare operators are responsible for maintaining appropriate internal access controls, staff permissions, legal bases, and notices for information they collect and manage through CareOpenings.

CareOpenings may update, correct, suspend, delete, or restrict records where appropriate to maintain platform integrity, comply with law, address support requests, or protect privacy and safety.

Policy updates

We may update this Privacy Policy to reflect product, legal, security, or operational changes. If changes are material, we will provide notice appropriate to the circumstances.

Continued use of CareOpenings after an updated policy becomes effective means the updated policy applies to your use of the service, subject to any consent or notice requirements under applicable law.