Privacy Policy

Who we are

GryphLink is an independent student project. It is not operated, sponsored, or endorsed by the University of Guelph or the University of Guelph-Humber. Questions about this policy can be sent to mgmtgryphlink@gmail.com.

What we collect

• Account details: your official university email address (@uoguelph.ca or @guelphhumber.ca) and a password, which is stored only as a secure hash by our authentication provider.
• Profile information you choose to add: name, pronouns, photo, campus, degree, major, minors, year, courses and the terms you took them, skills, interests, clubs, housing, co-op status, bio, and how you can help others.
• Activity: connection requests, messages you send and receive, study rooms you create or join, posts, and posts you mark as interesting.
• Safety reports you submit about other profiles.
• Technical data: a sign-in cookie that keeps you logged in, and preferences stored in your browser (such as theme and campus filter). We don't use advertising or third-party tracking cookies.

How we use it

• To verify you're a University of Guelph student and keep the community limited to students.
• To show your profile to other signed-in students so they can find classmates in their courses.
• To deliver messages, connection requests, rooms, and posts.
• To investigate reports and enforce our Terms of Use.
• To send essential account emails, such as confirming your address or resetting your password.

We do not sell your information or use it for advertising.

Who can see your information

• Your profile is visible only to other signed-in, verified students — never to the public internet.
• Your email address is hidden unless you turn on “Show my email” in Privacy & safety settings.
• Messages are visible only to you and the person you're talking with.
• You can limit who can message you to connections only, and mark yourself as busy.

Service providers

We use Supabase for authentication, database, and file storage, and Vercel to host the website. They process data on our behalf under their own security and privacy commitments, and may store it on servers outside Canada.

Keeping and deleting your data

We keep your information while your account is active. You can edit your profile at any time, and you can permanently delete your account from Privacy & safety settings, which removes your profile, messages, rooms, posts, and connections. Reports you filed may be kept as needed to keep the community safe.

Your rights

You can ask to access, correct, or delete the personal information we hold about you by emailing mgmtgryphlink@gmail.com. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Changes

If we make significant changes to this policy, we'll update the date above and let signed-in users know on the site.