Acadiate Privacy Policy

Effective date: August 1, 2026

Acadiate Inc. helps individuals, schools, organizations, and Experience organizers create, manage, and share Showcases, Experiences, communities, registrations, and related content.

This Privacy Policy explains what personal information Acadiate collects, why we collect it, how it may be shared, and the choices available to you.

In this Policy, “Acadiate,” “we,” “us,” and “our” mean Acadiate Inc. “You” means anyone who visits or uses Acadiate.

Where consent is required by law, we will ask for it.

1. Information We Collect

Account Information

When you create or use an Acadiate account, we may collect:

• Your name and email address

• Your phone number, if you provide one

• Your organization, role, profile information, and preferences

• Login and authentication information

• Verification and two-factor authentication information

Passwords are stored in a protected, non-readable form.

Content You Provide

We collect the content you create, upload, send, or submit through Acadiate, including:

• Showcases and Showcase content

• Photographs, files, journals, drawings, notes, and links

• Comments, messages, reactions, and communications

• Experience, community, room, card, poll, and directory content

• Answers submitted through forms, surveys, polls, and questionnaires

• Information submitted through contact or lead-capture forms

Your content may include information about other people. You are responsible for making sure you have permission to submit it.

Registration and Participation Information

When you register for or participate in an Experience, we may collect:

• Your name and email address

• Your organization or account information

• Your registration and attendance status

• Answers to registration questions

• Check-in, access, session, and participation information

• Information you choose to submit to an organizer, sponsor, exhibitor, or contact form

An organizer may ask for additional information through a custom form. The organizer decides what information to request and why it is needed. You can decide whether to complete optional questions or forms.

The organizer may also provide its own privacy notice.

Communications

We collect information you provide when you contact us, including support requests, emails, feedback, and complaints.

Technical and Usage Information

When you use Acadiate, we may automatically collect:

• Your IP address

• Browser, operating system, and device information

• Screen size

• Referring website or link

• Pages, Showcases, Experiences, rooms, cards, files, and links viewed

• Time spent on pages or files

• Scrolling, clicks, and other interactions

• Session and visitor identifiers

• Approximate location based on your IP address

• Timestamps

• Information used to identify bots, fraud, or misuse

Some usage information may be connected to an account, registration, organization membership, or guest registration.

2. Analytics

Acadiate provides analytics to authorized Showcase owners, Experience organizers, schools, and organizations.

Analytics may include:

• Total and unique views

• Visitor sessions

• Approximate location

• Browser, operating system, and device type

• Referral sources

• Time spent on pages or files

• Scrolling and engagement

• File and link activity

• Meeting and calendar link activity

• Card views and clicks

• Attendance, participation, and registration activity

In some cases, analytics may be connected to a registered attendee, student, account holder, organization member, or guest registration.

This information is not collected to snoop on users, build advertising profiles, or sell personal information.

It is used to help authorized organizers better understand how their Experience is being used. It may also be used by schools or organizations to understand participation, engagement, or attendance.

Organizers are responsible for using this information appropriately and in accordance with applicable privacy laws and their own policies.

3. Acadiate’s Role

Acadiate’s role depends on how the Service is being used.

In many cases, Acadiate processes information for a school, organization, or Experience organizer. That organization decides why the information is collected, who can access it, and how long it should be kept.

Acadiate is directly responsible for information used to operate and protect the platform, including account administration, security, support, fraud prevention, and service operation.

When you intentionally share information with another person or organization through Acadiate, that person or organization may also be responsible for how it uses the information.

4. Cookies

Acadiate uses cookies and similar technologies to:

• Keep you signed in

• Maintain sessions

• Remember registration and access status

• Protect accounts, forms, and requests

• Prevent fraud and abuse

• Measure visits, views, engagement, and referrals

• Provide Showcase and Experience analytics

5. Google Analytics

An Experience organizer may choose to connect its own Google Analytics account to an Experience page.

When this feature is enabled:

• The Google Analytics account belongs to the organizer, not Acadiate

• The organizer controls the Google Analytics measurement settings

• Google may collect information about activity on the organizer’s Experience pages

• Google processes that information under its own terms and privacy policies

Acadiate does not receive or control the organizer’s Google Analytics account.

The organizer is responsible for deciding whether to use Google Analytics and for providing any additional notice or consent required by law.

6. How We Use Information

We use personal information to:

• Provide and operate Acadiate

• Create and manage accounts, Showcases, Experiences, and communities

• Authenticate users and protect accounts

• Process registrations, check-ins, attendance, forms, polls, and contact requests

• Provide analytics and reporting to authorized organizers and organizations

• Send account, registration, security, reminder, and service messages

• Provide customer support

• Improve and troubleshoot the Service

• Prevent fraud, abuse, security incidents, and unlawful activity

• Enforce our agreements and policies

• Comply with legal requirements

• Manage a merger, financing, restructuring, or sale of the business

We may use aggregated or de-identified information for reporting, research, product development, and service improvement.

We do not use de-identified information to identify individual users except where permitted by law for security, fraud prevention, or testing whether the information has been properly de-identified.

7. Email Communications

We may send:

• Account and security messages

• Password reset and verification emails

• Registration and attendance messages

• Service announcements

• Reminders and communications authorized by an organizer

• Marketing messages where permitted by law

You may unsubscribe from marketing emails by using the unsubscribe link or contacting us.

You may still receive account, security, registration, and other necessary service messages.

8. When We Share Information

We may share personal information:

• With service providers that host, store, secure, or operate Acadiate

• With email, infrastructure, storage, security, anti-abuse, and geolocation providers

• With an organizer, school, employer, sponsor, or organization when you register, submit a form, request contact, or otherwise choose to interact with them

• With people or organizations you choose to share content with

• When you authorize or direct us to share it

• When required by law or valid legal process

• When necessary to prevent fraud, abuse, security threats, or harm

• As part of a merger, financing, restructuring, or sale of the business

Service providers may only use personal information as needed to provide their services to Acadiate.

We do not sell personal information.

9. Sharing Content Through Acadiate

The visibility of your content depends on the feature and the settings selected by you or the organization managing the Experience.

You may share content through:

• Private Showcase links

• Public Showcases

• Experience pages

• Directories

• Communities and organization spaces

• Registration, contact, or lead-capture tools

People who receive access may be able to copy, download, save, or redistribute content.

Removing a link or deleting content from Acadiate may not remove copies that were already downloaded or shared by someone else.

10. How Long We Keep Information

We keep information only for as long as reasonably necessary for the purpose for which it was collected.

Information Controlled by an Organization

Schools, organizations, and Experience organizers may use Acadiate to collect registration, attendance, participation, Showcase, and analytics information.

The organization generally decides:

• Why the information is collected

• Who can access it

• How long it is kept

• When it should be deleted or anonymized

Acadiate keeps this information as needed to provide the Service, follow the organization’s instructions, maintain backups, resolve disputes, protect the Service, and comply with legal requirements.

An organization may keep historical participation or analytics information for reporting, institutional records, program evaluation, or other legitimate purposes.

To access, correct, or delete information controlled by an organization, you may need to contact that organization directly.

Information Controlled by Acadiate

Acadiate determines how long it keeps information used for its own purposes, including:

• Account and authentication records

• Security and fraud-prevention records

• Support communications

• Service logs

• Technical records

• Aggregated or de-identified analytics

We keep this information only as long as reasonably necessary for service operation, security, legal requirements, dispute resolution, and enforcement of agreements.

Deletion

When an authorized person requests deletion, Acadiate will delete or de-identify information that it is required and permitted to delete.

Some information may need to be kept because of:

• Instructions from an organization or account owner

• Legal requirements

• Ongoing disputes or investigations

• Security and fraud-prevention needs

• Backup and disaster-recovery processes

• Copies already shared with another person or organization

Information remaining in backups is protected from ordinary use and is removed through Acadiate’s normal backup rotation.

Acadiate may delete accounts that have not been accessed for more than seven years after providing notice where reasonably possible.

11. International Processing

Acadiate is operated from Canada.

Personal information may be processed or stored in Canada, the United States, or another country where our service providers operate.

Privacy laws in those countries may be different from the laws where you live, and information may be available to courts or government authorities where permitted by local law.

We use reasonable contractual, technical, and organizational safeguards to protect information processed by our service providers.

12. Security

Acadiate uses reasonable safeguards designed to protect personal information, including:

• Encryption while information is being transmitted

• Access controls and authentication

• Restricted employee and contractor access

• Monitoring and abuse-prevention measures

• Secure hosting and storage practices

• Backup and recovery controls

No online service can guarantee complete security.

If a privacy breach creates a legal obligation to notify affected individuals or regulators, Acadiate will provide the required notice.

13. Your Rights and Choices

Depending on where you live, you may have the right to:

• Request access to your personal information

• Correct inaccurate or incomplete information

• Request deletion of certain information

• Request a copy of certain information

• Withdraw consent where processing is based on consent

• Object to or restrict certain uses

• Unsubscribe from marketing communications

• Make a complaint to a privacy regulator

Some rights are subject to legal exceptions.

We may need to verify your identity before completing a request.

To make a privacy request or complaint, contact:

Acadiate Inc.

Email: support@acadiate.com

We will review your request and respond within the time required by applicable law.

When information was collected for a school, organization, or Experience organizer, you may also need to contact that organization directly.

14. Children and Students

Acadiate may be used by schools and organizations for student activities and Experiences.

Schools, organizations, parents, and guardians are responsible for making sure that the use of Acadiate by minors is properly authorized and supervised.

Where a school or organization provides student information or creates student access, Acadiate processes that information according to the organization’s instructions and applicable law.

Acadiate does not knowingly collect personal information from children without the authorization required by law.

If you believe a child’s personal information was submitted without proper authorization, contact us at support@acadiate.com.

15. Changes to This Policy

We may update this Policy when our Service, practices, or legal requirements change.

If we make a material change, we will provide notice through the Service, by email, or by another method required by law.

The effective date at the top of this Policy will show when it was last updated.