Privacy Policy

Information we collect

• Account and contact details, such as your name, email, phone number, company, profile information, and assigned access.
• Information you or your organization provide for event participation, including sponsorships, hospitality orders, billing details, documents, communications, and survey responses.
• Technical information, such as IP address, browser and device information, sign-in activity, security logs, and page performance measurements.

We receive information from you, administrators and authorized colleagues, and the service providers described below.

Google sign-in

If you choose Google sign-in, Google shares your account identifier, email address and verification status, and basic profile information such as your name and profile picture. Our authentication provider stores this information with your account to verify your identity and link sign-in to your existing portal account.

We use Google account information for authentication, account identification, and security. We do not request access to Gmail messages, Google Drive files, calendars, or contacts, and we do not receive your Google password. We do not sell Google user data or use it for advertising.

How we use and share information

We use information to provide account access, coordinate event services, manage orders and business records, send related communications, answer support requests, improve reliability, and prevent unauthorized access or abuse.

Authorized Bullbustin' staff and the clients or partners involved in your event arrangements may access relevant records according to their assigned permissions. We also use service providers to operate the portal:

• Supabase provides authentication, database services, and file storage.
• Vercel hosts the portal and provides technical logs and performance measurements.
• Resend delivers portal emails and processes delivery and engagement information where enabled.
• Google authenticates you when you choose Google sign-in.
• Where enabled, Cloudflare Turnstile processes browser, device, and network signals to help detect automated abuse.

We may disclose information when required by law or to address fraud, security incidents, or the protection of legal rights. Providers may process information outside Canada, where it may be subject to local laws. Contact us for information about these providers and our handling of personal information.

Cookies and security

The portal uses cookies and browser storage to maintain sign-in sessions, remember preferences, and support security features. Disabling these may prevent login or other features from working. Performance measurements help us understand loading speed and responsiveness.

We use access controls and encrypted connections to help protect information. No online service can guarantee absolute security. Keep your credentials and private invitation or form links confidential.

Retention and your choices

We retain information for account administration, event services, business records, security, and applicable legal obligations. Retention depends on the type of record and its purpose; closing an account does not necessarily remove invoices, contracts, or other records we need to retain.

You can request access to or correction of your personal information, request account deletion, or ask about withdrawing consent by emailing carter@bullbustin.com. We may need to verify your identity. We will explain any legal or operational limits on your request, including records that must be retained.

You can remove the portal's Google connection in your Google Account settings. This stops future access through that connection; it does not itself delete your portal account, stored records, or an existing portal session. Sign out of the portal and contact us if you also want your account closed.

Contact and updates

For privacy questions or complaints, contact Bullbustin' Inc. at carter@bullbustin.com. We update this page when our practices change and identify the revision date above. Material changes to how we use personal information will be communicated as required, with additional consent requested where necessary.