Privacy Policy

1. Introduction

GoKanic Inc. ("GoKanic," "we," "us," or "our") operates the GoKanic platform, a B2B marketplace connecting go-kart racers with service providers at racing tracks. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

We are committed to protecting your privacy and ensuring you understand how your data is handled. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Contact: For any privacy-related questions, please contact us at support@gokanic.com

2. Information We Collect

2.1 Information You Provide

When you register and use GoKanic, you may provide:

• Account Information: Name, email address, and profile picture
• Business/Vendor Information: Business name, description, website, phone number, business email
• Address Information: Physical business address and service location areas
• Service Information: Service descriptions, pricing, images, and categories
• Track Preferences: Which racing tracks you operate at or visit

2.2 Information from Third-Party Services

When you sign in using OAuth providers, we receive:

• Google Sign-In: Name, email address, and profile picture from your Google account
• Facebook Sign-In: Name, email address, and profile picture from your Facebook account (when available)

We only request the minimum information necessary for authentication. We do not access your contacts, calendars, or other personal data from these services.

2.3 Automatically Collected Information

When you access GoKanic, we automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, features used, time spent on pages
• Log Data: IP address, access times, referring URLs
• Analytics Data: Aggregated usage statistics via Vercel Analytics

3. How We Use Your Information

We use your information solely to:

• Create and manage your account
• Provide, maintain, and improve the Service
• Display your vendor profile and services to potential customers
• Facilitate connections between racers and service providers
• Send important service-related communications
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract Performance: Processing necessary to provide you with our Service (account creation, vendor profiles, service listings)
• Consent: When you explicitly agree to optional features or communications
• Legitimate Interests: To improve our Service, ensure security, and prevent fraud, where these interests are not overridden by your rights
• Legal Obligation: When we must comply with applicable laws

5. Information Sharing

We do not sell your personal information. We may share your information only in these limited circumstances:

• Public Profiles: Vendor profiles and service listings are visible to other users of the platform
• Service Providers: Third-party companies that help us operate our Service (hosting, analytics), who are bound by confidentiality obligations
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect the rights, property, or safety of GoKanic, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

6. Third-Party Services

GoKanic uses the following third-party services:

6.1 Authentication Providers

• Google OAuth: For secure sign-in. Google Privacy Policy
• Facebook/Meta OAuth: For secure sign-in (when available). Meta Privacy Policy

6.2 Hosting and Infrastructure

• Convex: Backend database and serverless functions. Convex Privacy Policy
• Vercel: Website hosting and analytics. Vercel Privacy Policy

7. Google API Services User Data Policy

Specifically, GoKanic:

• Only uses Google user data (name, email, profile picture) for authentication and account creation
• Does NOT transfer Google user data to advertising platforms or data brokers
• Does NOT use Google user data for advertising, ad targeting, or personalized ads
• Does NOT use Google user data for credit, lending, or insurance eligibility decisions
• Does NOT use Google user data to train artificial intelligence or machine learning models
• Limits access to Google user data to employees and contractors who need it to provide our Service

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. Specifically:

• Account Data: Retained while your account remains active
• Service Listings: Retained while the service is listed on the platform
• Analytics Data: Aggregated and anonymized after 26 months
• Backup Data: Deleted within 30 days of account deletion

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

9. How to Delete Your Data

To delete your GoKanic account and all associated data:

What Gets Deleted

• Your user profile and account information
• Your vendor profile (if applicable)
• All service listings you created
• All uploaded images and media
• Your authentication data

Facebook Login Users

If you signed up using Facebook Login:

1. Remove GoKanic's access in your Facebook Settings
2. Email support@gokanic.com with subject "Facebook Data Deletion Request"
3. You will receive a confirmation code to track your deletion request

Confirmation

After submitting a deletion request, you will receive a confirmation email within 48 hours with a unique confirmation code. Deletion will be completed within 30 days.

10. Your Rights

10.1 Rights for All Users

All users of GoKanic have the right to:

• Access the personal information we hold about you
• Update or correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications

10.2 Additional Rights for EU/EEA Residents (GDPR)

If you are in the European Economic Area, you also have the right to:

• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing
• Right to Lodge a Complaint: File a complaint with your local data protection authority

10.3 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Right to Know: Request disclosure of personal information collected, used, and disclosed
• Right to Delete: Request deletion of personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights

To exercise any of these rights, please contact us at support@gokanic.com.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in Transit: All data transmitted to and from GoKanic is encrypted using HTTPS/TLS
• Secure Authentication: We use industry-standard OAuth 2.0 for authentication
• Access Controls: Access to personal data is restricted to authorized personnel only
• Regular Security Reviews: We regularly review and update our security practices
• Secure Infrastructure: Our data is hosted on secure, enterprise-grade cloud infrastructure

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

12. International Data Transfers

GoKanic is operated from Canada. If you are accessing the Service from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada or other countries where our service providers are located.

We ensure that any international transfers of personal data are protected by appropriate safeguards, including standard contractual clauses approved by relevant data protection authorities.

13. Children's Privacy

GoKanic is not intended for children under the age of 16 (or 13 in jurisdictions where that is the applicable age of consent for data processing). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@gokanic.com, and we will delete such information.

14. Cookies and Similar Technologies

GoKanic uses cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with our Service (via Vercel Analytics)

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

15. "Do Not Sell or Share" Notice

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through a prominent notice on our Service
• Obtain your consent before using your data in materially different ways

We encourage you to review this Privacy Policy periodically for any changes.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU/EEA residents, you may also lodge a complaint with your local data protection supervisory authority if you believe we have not addressed your concerns adequately.