Privacy Policy

Effective September 29, 2026

Lightfeed collects very little personal information, and none from retailer websites. This policy says what we do collect about the people who use Lightfeed, why, who processes it for us, and how to exercise your rights.

1. What this policy covers

This policy explains how Revar Immersive Technology Inc., doing business as Revar and operating Lightfeed (“Lightfeed”, “we”), handles personal information about people who visit https://www.lightfeed.ai, create an account, or are invited into a customer workspace. It applies to personal information, meaning information about an identifiable individual.

The retail data the Service collects (prices, availability, product identifiers, seller names) is about products, not people. We do not collect reviewer names, usernames or other personal information from retailer websites, and the Service is designed so that it never needs to. Our Terms of Service describe that collection in detail.

2. Personal information we collect

• Account information. Name, work email address, company, role and workspace membership, provided when you sign up or are invited. Sign-in is by single-use emailed link. Customer accounts have no password; an operator account used for recovery holds a salted hash only.
• Billing information. Billing contact and company details. Card details are entered directly with Stripe and never reach our servers.
• Usage and log data. Pages and features used, API calls, IP address, browser type, timestamps and error logs, used to operate and secure the Service.
• Communications. Emails and support requests you send us.
• Cookies. Strictly necessary cookies for sign-in and session security. We do not run advertising trackers. If we add analytics cookies we will update this policy and, where required, ask for consent first.

3. How we use it and on what basis

We use personal information to:

• provide, secure and support the Service and your workspace;
• send sign-in links, invitations, alerts you configure, billing notices and service announcements;
• understand how the Service is used so we can improve it;
• meet legal, accounting and security obligations.

In Canada we rely on your consent, which you give by creating an account or accepting an invitation, and on the implied consent that applies to information reasonably needed to deliver a business service. Where the GDPR or UK GDPR applies, our legal bases are performance of a contract, our legitimate interests in operating and securing the Service, and compliance with law. We do not sell personal information and we do not use it for automated decisions with legal or similarly significant effects.

4. Who we share it with

We share personal information only with service providers that process it on our instructions, with your workspace administrators (who can see the members of their workspace), with professional advisers, and where required by law or to protect rights and safety. If Lightfeed is acquired, personal information may transfer to the successor under this policy.

The providers that process personal information on our behalf are listed below by role. Providers we use only for retail data collection and matching never receive personal information and are therefore not listed here. We disclose the named providers in each category to customers on request.

We will update this list before adding a provider that handles personal information. Customers with a data processing addendum receive notice as that addendum provides.

5. Where it is stored

We are based in Canada and our providers operate in the United States and Canada. Personal information may be processed in those countries, whose laws may differ from those where you live. We use contractual protections with each provider, including standard contractual clauses where the GDPR requires them.

6. How long we keep it

Account information is kept while your account is active and deleted within 30 days of a deletion request or workspace termination, except for records we must keep for tax, accounting or legal reasons. Server logs are kept for up to 12 months. Backups expire on a rolling schedule of at most 35 days.

7. How we protect it

Data is encrypted in transit and at rest. Access to production systems is limited to personnel who need it and is logged. Customer accounts have no password to lose: sign-in is by single-use emailed link. If a breach affects your personal information we will notify you and any regulator as the law requires.

8. Your rights

You can ask to access, correct, export or delete your personal information, withdraw consent, or object to a particular use, by emailing support@lightfeed.ai. We answer within 30 days. Residents of the European Economic Area and the United Kingdom may also complain to their data protection authority; residents of Canada to the Office of the Privacy Commissioner of Canada; residents of California may exercise their rights under the CCPA, and we do not sell or share personal information as that law defines those terms. We will not treat you differently for exercising a right.

9. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.

10. Changes and contact

We may update this policy and will post the new version here with a new effective date; for material changes we will also email workspace administrators. Our privacy contact is support@lightfeed.ai, Revar Immersive Technology Inc., 1055 W Georgia St, Vancouver, BC, V6E 4N7, Canada.

Questions about this document: support@lightfeed.ai. Revar Immersive Technology Inc., 1055 W Georgia St, Vancouver, BC, V6E 4N7, Canada.