Privacy Policy

Last updated: May 2026

This Privacy Policy describes how Keep Your Forks (“the platform,” “we”) handles personal information. Keep Your Forks is operated by Jon Christensen as an individual Red Pine Camp shareholder, in compliance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and consistent with the requirements and limitations of the Ontario Business Corporations Act, R.S.O. 1990, c. B.16 (the “OBCA”).

Where the contact information came from

If you received an invitation to Keep Your Forks, the contact details we used were obtained from Red Pine Camp Inc.’s register of shareholders under section 146 of the OBCA. Subsection 146(8) restricts use of that register to specific purposes; Keep Your Forks uses the register only to invite shareholders to a platform that supports communication on matters relating to the affairs of the corporation, which falls within the permitted purpose at subsection 146(8)(c). The statutory declaration filed in connection with that request is on file.

The corporation’s register itself is not stored on the platform. Only a hashed fingerprint of your address and an opaque internal reference are written to the database — never your legal name, mailing address, or share count from the register.

What we collect

• Account information: verified email address, chosen pseudonym, optional bio, optional notification preferences, and (kept private from other users) your legal name as it appears on the Red Pine Camp shareholder register.
• Verification audit: the invite code you redeemed, the date and time of verification, your IP address and user agent at signup. This audit trail evidences that an account belongs to a verified shareholder, consistent with our records obligations.
• Content: posts, comments, votes, marketplace listings, in-platform messages, and chatbot conversations you create on the platform.
• Operational data: moderation actions, reports, and other site-administration events that involve your account.
• Contact-form submissions: name, email, topic, and message you submit through the contact form.

Why we collect it

• To verify that account holders are Red Pine Camp shareholders.
• To run the platform: post creation, voting, messaging, chatbot.
• To moderate the platform and investigate abuse reports.
• To send transactional email (verification, replies to your content, weekly digests if you opted in).
• To respond to contact-form submissions and to fulfil access, correction, deletion, and breach-notification obligations under PIPEDA.

How long we keep it

• Account profile and content: while your account is active. You may request deletion at any time; see “Your rights” below.
• Verification audit records (shareholderClaims entries and the redeemed invite code itself): retained for six years after the account is closed or deactivated, consistent with the corporate records retention requirement at section 140(2) of the OBCA. These records evidence that platform access was granted to a verified shareholder.
• Moderation logs (audit trail of moderator actions): retained indefinitely as evidence of good-faith moderation under our Community Guidelines. Personal identifiers within these logs may be redacted on request, at our discretion, consistent with the operator’s ability to defend a defamation or copyright claim under Canadian law.
• Contact-form submissions: retained for two years from the date of submission, then deleted.

Who we share it with

• Infrastructure providers we use to operate the platform: Google (Firebase Authentication, Firestore database, and Cloud Storage in the northamerica-northeast1 region in Montréal); Vercel (hosting and serverless functions); Resend (transactional email); and Stripe (only if you voluntarily make a donation).
• AI providers,when and only when you use the chatbot feature: Anthropic (Claude — for chatbot answers) and Voyage AI (embeddings of your question to find relevant document excerpts). The chatbot does not transmit your name, email, account identifier, posts, comments, marketplace listings, or private messages to AI providers — only the text of the question you typed and the public source-document excerpts the answer will cite. See “What goes to AI” below for the specifics.
• Other shareholders see your chosen pseudonym, posts, comments, votes, and marketplace listings as you publish them. Marketplace listings require your real name.
• Moderatorson the platform’s small moderation team can see which verified account is behind a pseudonym. Moderators are bound by a written confidentiality obligation before being granted that access.

We do not sell personal information. We do not share with any party beyond the above except as required by law or to enforce these policies.

What goes to AI

The chatbot is the only place AI processing happens. When you send a message to the chatbot, the platform sends to Anthropic and Voyage AI:

• The text of your question.
• Up to a few preceding turns of the same chatbot conversation, for context.
• Excerpts from the platform’s public-document corpus (bylaws, AGM packages, financial statements, etc.) that the system retrieved as relevant to your question.

The chatbot does not send to AI providers:

• Your name, email, account identifier, IP address, or device.
• Your posts, comments, votes, or marketplace listings.
• Your in-platform messages with other shareholders.
• Other shareholders’ account or contact information.
• The Red Pine Camp shareholder register or any extract of it.

If you do not want any of your typed questions to leave the platform, simply do not use the chatbot. The message board, the marketplace, and the rest of the platform operate without contacting AI providers.

Where the data lives

Database, authentication, and storage records are in Google’s northamerica-northeast1region (Montréal, Québec, Canada). Vercel edge nodes that serve the website may cache responses globally. When you use the chatbot, your question and the retrieved corpus excerpts are processed by Anthropic (United States) and Voyage AI (United States), subject to those providers’ published privacy practices.

Your rights

Under PIPEDA you have the right to:

• Access the personal information we hold about you.
• Correct any inaccuracies.
• Withdraw consent and request deletion, subject to the retention requirements above for verification audit records (which are held to satisfy the OBCA).
• File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Separately, as a shareholder of Red Pine Camp Inc., the OBCA gives you statutory rights of access to certain corporate records held by the corporation itself (see sections 140 to 147). The platform does not displace those rights and is not a substitute for the corporation’s record-keeping; the corporation remains the sole authoritative source for the shareholder register, the articles of incorporation, the by-laws, and the corporate financial statements.

To exercise any of your PIPEDA rights with respect to the platform, use the contact formwith topic “Privacy request.” We will respond within thirty days.

Breach notification

If we discover a security breach that creates a real risk of significant harm to affected individuals, we will notify those individuals and the Office of the Privacy Commissioner of Canada within seventy-two hours of becoming aware, as required under PIPEDA.

Cookies and tracking

Keep Your Forks uses only the cookies necessary to keep you signed in. We do not use third-party advertising, analytics, or cross-site tracking cookies.

Children

The platform is not intended for use by children under eighteen and we do not knowingly collect personal information from children. If you believe we have inadvertently received personal information about a child, contact us through the contact form and we will remove it.

Changes to this policy

Material changes to this policy will be announced on the platform and by email to active accounts at least thirty days before taking effect.

Contact

Operator: Jon Christensen, Red Pine Camp shareholder. To reach us about anything in this policy, use the contact form.