Privacy Policy

1. Scope and accountability

This policy applies to Vinito’s websites, applications, accounts, listings, messages, support, and related services. Vinito is accountable for personal information under its control, including information processed by service providers on its behalf. Privacy questions may be sent to privacy@vinito.ca.

2. Information Vinito collects

• Account information: name, email address, password hash, account status, verification records, preferences, and profile information.
• Listing information: titles, descriptions, prices, categories, photographs, videos or links, listing and approximate locations, contact choices, and availability confirmations.
• Communications: messages sent through Vinito, masked-email routing information, support requests, reports, and related metadata.
• Activity and technical information: IP address, device and browser details, timestamps, pages and features used, cookies, session identifiers, security events, and diagnostic logs.
• Information from optional services: information returned by a third-party sign-in provider when you choose that option, subject to the permission screen shown to you.

Vinito generally receives this information from you, your device, your use of the Service, other users who submit a report or message, and service providers acting for Vinito.

3. Public information and your choices

Listings, listing photos, public profile details, approximate listing locations, and any phone number you choose to display may be visible to anyone and may appear in search results. Email addresses used for listing contact are not intended to be displayed publicly and may be protected by masked routing. Do not place sensitive personal information, identity documents, financial details, access codes, or another person’s information in a public listing.

4. Why Vinito uses information

Vinito uses personal information for purposes a reasonable person would consider appropriate, including to:

• create, authenticate, secure, and administer accounts;
• publish, search, organize, update, and remove listings;
• route messages and requested notifications while reducing unnecessary disclosure of email addresses;
• provide support and respond to access, correction, deletion, safety, and legal requests;
• detect spam, fraud, prohibited content, account compromise, and other abuse;
• moderate content, investigate reports, enforce policies, and protect users and the public;
• operate, troubleshoot, secure, measure, and improve the Service; and
• comply with legal obligations and establish, exercise, or defend legal claims.

5. Consent

Vinito seeks meaningful consent for collection, use, or disclosure of personal information unless consent is not required or would be inappropriate under applicable law. The form, account screen, or feature explains uses that are not obvious. You may withdraw consent to optional uses, subject to reasonable notice and legal or contractual restrictions. Some information is necessary to provide an account, publish a listing, deliver a requested message, or secure the Service.

6. Cookies, analytics, and similar technology

Vinito uses essential cookies and local storage for sign-in, security, sessions, form protection, and preferences. Optional analytics or advertising technology must remain disabled until an appropriate consent mechanism and vendor disclosures are in place. If optional analytics are introduced, this policy and the consent choices will be updated before that processing begins.

7. Masked messages

Vinito may assign a relay address or token to a conversation and process message headers, participants, content, attachments, delivery events, and abuse signals to deliver the conversation and protect users. Masking reduces direct exposure of an email address but does not make a conversation anonymous to Vinito. Recipients may still identify you from information you include in a message.

8. When information is disclosed

Vinito may disclose personal information:

• to another user when you choose to publish information or communicate with them;
• to hosting, email, security, support, authentication, analytics, and other service providers that need it to perform services for Vinito under appropriate restrictions;
• in connection with a proposed or completed financing, reorganization, merger, or sale, subject to confidentiality and applicable law;
• when required by a valid court order, warrant, subpoena, or other lawful process; or
• when permitted by law and reasonably necessary to investigate fraud, enforce policies, protect rights or safety, or respond to an emergency.

Vinito does not sell personal information. Vinito does not disclose personal information for cross-context behavioural advertising unless this policy and the required choices are updated first.

9. Processing outside your province or Canada

Some service providers may process information in another province or country. In that case, information may be subject to the laws and lawful access processes of that jurisdiction. Vinito remains responsible for information transferred to a provider for processing and will use contractual or other measures appropriate to the sensitivity of the information.

10. Retention and deletion

Vinito keeps personal information only as long as reasonably needed for the purposes described above, including account operation, fraud prevention, safety, legal obligations, dispute resolution, and backup integrity. Retention periods depend on the type and sensitivity of information and applicable requirements. When no longer required, information is deleted, destroyed, or anonymized. Backup copies may remain for a limited cycle and are not restored except for recovery purposes.

11. Safeguards and privacy incidents

Vinito uses administrative, technical, and physical safeguards appropriate to the sensitivity of information, including access controls, credential protection, logging, backups, and secure development practices. No system is completely secure. If a breach creates a real risk of significant harm, Vinito will notify affected individuals and report to the appropriate privacy regulator as required by applicable law.

12. Access, correction, deletion, and complaints

You may update certain profile and listing information through your account. You may also request access to personal information Vinito holds about you, ask that inaccurate information be corrected, withdraw consent to optional processing, request deletion, or challenge Vinito’s privacy practices by emailing privacy@vinito.ca. Vinito may verify your identity and may decline or limit a request where permitted or required by law, explaining the reason. If a concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.

13. Children and young people

Vinito is not directed to children and does not knowingly permit a person who lacks legal capacity to create an account or transact through the Service. If you believe a child has provided personal information contrary to this policy, contact privacy@vinito.ca.

14. Changes to this policy

Vinito may update this policy as practices, vendors, or legal requirements change. Material changes will be posted with a new “Last updated” date and, where required, Vinito will provide additional notice or request renewed consent.

15. Contact

Privacy Officer
Vinito
privacy@vinito.ca