What we know about you.
Written against what the software actually does, rather than from a template. Every claim here is a description of a system, not a promise about one.
A Place To Work is a coworking space at 299 Queen St E, Toronto ON M5A 1S7. This describes what we hold about you, why, and what you can do about it.
We do not track you, we do not run analytics, there are no advertising pixels on this site, and we have never sold or shared a list. The only cookie we set is the one that keeps you signed in.
Everything below is what the software actually does. If it stops being true, this page changes.
If you apply for membership: your name, email address, one line on what you are building, which tier interests you, how you heard about us, and whether you ticked the box asking for updates. We keep this because somebody reads every application and we have to be able to reply to you.
If you become a member: the above, plus your handle, any links you add to your profile, your tier, and the date you joined. Your profile appears in the member directory only while you choose to be listed.
If you buy a day pass: your name, email address and the day. $45 changes hands through a payment provider — see below.
While you are a member: what you post on the board and in reply to others, which events you have said you are coming to and how many guests, your credit balance and every movement in it, which rooms you have booked and when, your membership rate and standing, and every email we have sent you.
Private messages between members are stored so they can be read by the two people in them. They are not readable from the administration application, which has no route that returns them — that is a decision, not an oversight.
If you have a fob: a keyed hash of its number, a label so somebody can tell your fobs apart, and a record of every time it was presented at the door — whether it opened or not, and why. The number printed on the fob is never stored.
Payments run through a hosted checkout at the payment provider. Your card number is typed on their page, not ours, and this site has no code that could receive one. What comes back to us is an amount, an email address, and their reference for the transaction.
The database and sign-in links are run by Supabase. Payments are run by Stripe. Email is sent through Resend. The sites are hosted on Vercel. Each of them sees only what it needs to do its part, and each has its own privacy terms.
Nobody else. We do not sell, rent, or share personal information, and there is no advertising business here to sell it to.
Messages that follow from something you did — an application acknowledged, an invitation, a room booked, a renewal due — are sent because you did that thing.
Updates about the opening are only sent to people who ticked the box, and every one of them can be stopped by replying or by writing to us. We keep a record of when consent was given, because Canadian anti-spam law expects us to be able to show it.
Applications: while we are still considering them, and for a reasonable period afterwards so we can tell you apart from somebody applying twice.
Membership records, payments and the door log: for as long as you are a member and for several years after, because financial records have to be kept and because a question about who was in the building on a given night can arrive long after the fact.
Private messages: until one of the two people in the conversation is removed, at which point the thread goes with them.
Everything else: while your membership lasts.
A copy of everything we hold about you. Members can download it from their profile page; anybody else can ask and we will send it.
A correction, if something is wrong. Most of it you can edit yourself.
Deletion. We will remove what we are not required to keep. Payment records and the door log are the exceptions — those are financial and security records with retention obligations, and we will tell you exactly what is being kept and why rather than quietly keeping it.
To withdraw consent for updates at any time, without it affecting your membership.
Write to hello@aplacetowork.dev. If you are not satisfied with how we have handled it, you can complain to the Office of the Privacy Commissioner of Canada.
One, and it is the session that keeps you signed in to the member area. It is not used to follow you anywhere and there is nothing to opt out of, which is why this site has no cookie banner.