Privacy policy
What we collect, why we collect it, and how to get it back or have it erased.
The short version
We collect your email address and mobile number to create your account — a 6-digit code, sent by SMS or email at your choice, confirms it's you — and, if you buy the Card, the payment details Stripe needs. We do not sell personal information, we do not run advertising trackers, and you can have your account deleted by sending one email.
What we collect
- Your email address — your sign-in name; the welcome mail, receipts and (if you choose) the verification code go there.
- Your mobile number, to verify your account with a code and, only if you join them, to send Onja Alerts.
- Your saved businesses, so the list follows you between devices.
- Your membership and discount codes, including when a code was redeemed and at which partner, so a code cannot be reused beyond its limit.
- Name and email only if you give them at checkout — Stripe collects these.
We do not collect your location, your contacts, or a browsing profile. The site sets no advertising cookies.
Where it lives
Account data is stored in Supabase (PostgreSQL) in the ca-central-1 region, in Canada. Card payments are processed by Stripe; we never see or store your card number. Verification codes are delivered by our messaging provider (Twilio) or by email through our own sender. Pages are served by Netlify.
How long we keep it
Account records are kept while the account exists. Discount codes and their redemption history are kept for 24 months for fraud prevention and partner reconciliation, then deleted. Delete your account and everything except the legally required payment records goes with it.
Your rights
Under Quebec's Law 25 and Canada's PIPEDA you may ask for a copy of your data, ask us to correct it, ask us to delete it, or withdraw consent for SMS (you keep signing in with your email and password). Write to ceo@onja.ca and we will answer within 30 days.
Businesses in the directory
Directory entries carry business contact details published on public community channels — not personal information about private individuals. If you are named in a listing and want it removed, write to us and we will remove it.
Security
Traffic is encrypted end to end. Database access is denied by default and opened row by row, so one member can only ever read their own account. Discount codes are generated and redeemed on the server, never in the browser. Payment webhooks are accepted only with a valid Stripe signature.
Last updated 15 August 2026. Questions: ceo@onja.ca.