Privacy Policy

Jilani Place Inc. ("we," "our," or "us") respects your privacy and is committed to protecting your personal information in accordance with applicable privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit or interact with our website and services.

SMS and Text Policy

We send text message updates and responses to customers interested in our products and services.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. We may share information with platform providers, phone companies, and vendors that help deliver messages. We may also disclose information when required by law, regulation, or government request, or to protect our rights and property.

If you reply STOP, we put your number on our list of numbers we never text, and it stays there until you reply START. If you reply HELP, we text back how to reach us and how to stop, once in any 24 hours, so we note your number for 24 hours. We keep the texts we exchange with you as the record of the conversation, and our log of the texts we send holds the most recent 300.

1. Information We Collect

We collect personal and non-personal information to deliver and improve services.

Personal Information

• Name, email address, phone number, mailing address
• Payment information (if applicable). If you turn on automatic card payments for your invoices, Stripe keeps your card; we keep only its brand and last four digits, and when and on which invoice you agreed
• Other details provided when you register, subscribe, or contact us
• When you become a member, government identification and a selfie, which Stripe Identity checks for us (or your identification, checked in person by our team if you prefer). Section 16 explains when we do this, why, what we keep, and for how long

Non-Personal Information

• IP address, browser type, and device type
• Pages viewed, referral sources, and usage patterns

We use cookies and similar technologies. Everything that is not strictly necessary runs only if you agree to it. Section 3 lists each tool by name and what it does.

Linked room screens. If you book two, three or four meeting rooms for one meeting and choose to link their screens, each room's screen camera and microphone send live video and sound to the screens of your other booked rooms, and only to them. The link runs only while your bookings are on, ends when the earliest of them ends, and shows a LIVE mark on every linked screen the whole time. Anyone in any of the rooms can unlink or mute it. The video and sound travel encrypted from screen to screen; they never pass through our servers, and we never record or keep them. We keep only whether the screens were linked and when, for six hours after your meeting. A meeting room's camera can be set to show the whole room or to follow the people in it; following is done by the camera itself, in the room, and nothing it sees reaches us. While the screens are linked, the rooms can also share a whiteboard: anything drawn on one screen, on the whiteboard or over a slide, appears on the other linked screens as it is drawn. Drawings travel the same way, encrypted from screen to screen, never through our servers; they stay only on the screens themselves and are wiped from every one of them when the earliest booking ends. A room can also show its whole screen to the other linked rooms, only when someone in that room chooses to; that screen and the others say so while it is shown, and anyone in any of the rooms can stop it. It travels the same way and is never recorded.

Files on a room's screen. If you send a file to a booked room's screen (a PDF, PowerPoint, Word or Excel file), from the app, from a phone paired with the screen, or before the meeting, we keep it on our own server only to show it on that screen and on the screens of any rooms linked to yours. Everyone in those rooms can see it, and so can everyone on the room's video call if you show it during one (see Video calls below). Anyone in the meeting who pairs a phone with the screen can send files too, and the person who booked can lock the screen so that only they decide what is shown. We turn PowerPoint, Word and Excel files into pages on our own server; nobody else receives them to do that. Each file, and the pages made from it, is deleted within a few minutes of the booking ending, and none of them is copied into our backups. In some rooms a PowerPoint file plays in PowerPoint itself, on the room's own computer, so its animations and video work: that computer holds a temporary copy while it is on the screen, deletes it when it comes off, and removes it from PowerPoint's list of recent files. Microsoft's online features are turned off on those computers and no Microsoft account is signed in, so the file itself goes nowhere else.

Video calls on a room's screen. If you add a video-call link to your booking, the room's screen joins that call when you choose Join, and the room's camera and microphone are then part of the call. The call itself is run by whoever provides it (for example Microsoft Teams, Zoom or Google Meet) under their own privacy policy; we do not record calls. The link and any passcode stay with the room's screen and are never shown on a guest's phone. If you put a PowerPoint up on the room's screen while the room is on a Zoom call, the screen also shares it into that call, as if you had pressed Share in Zoom yourself: everyone on the call sees your slides, and only while they are up. Stop showing on the call, on the remote, takes them off the call and leaves them up in the room. Nothing else on the room's screen is ever shared into a call, and the file itself is never sent to the call or to Zoom.

The parking gate. When you open the building's parking gate from our guest parking page, we log which gate opened and when, and whether you used a one-time code. If it was a one-time code we issued to you, the log also keeps the name and email address on your account. The company that runs the gate is told only which gate to open. On the same page, the form to join Cafe 295 rewards sends what you type in it to Cafe 295, under the cafe's own privacy policy. Section 7 says how long we keep the log.

2. How We Use Your Information

• Provide and improve our website and services
• Respond to inquiries and support requests
• Process transactions and send confirmations/receipts
• Send marketing communications with your consent
• Analyze usage trends and improve user experience
• Comply with legal and regulatory obligations

Booking features. When you book a room, we note which booking features you used, for example that slides were added, a meeting link was set or a calendar was connected, and when. We never note what is in the slides, the link or what you wrote. Our staff use this to improve bookings and to see how each customer books.

3. Cookies and Tracking Technologies

When you first visit our website we ask how you would like cookies handled. Until you choose, nothing optional runs: no analytics, no advertising measurement, and no session recording. You can change your answer at any time using the Cookie choices link in the footer of every page.

Necessary (always on)

• Signing in to your member account and keeping you signed in
• Making and managing a booking, including the checkout
• Remembering your cookie choice, so we do not ask again

Analytics (only with your consent)

• Hotjar: records how pages are used, including session replays, so we can find what is confusing and fix it. It never records what you type into a form
• CallRail: shows a different phone number per visitor so we can tell which page or ad led to a call
• HubSpot: our contact and enquiry tool, which remembers a visitor across a conversation
• Vercel Web Analytics: counts page views on our booking pages, without cookies, so we can see which pages people visit

Advertising (only with your consent)

• Google Tag Manager, Google Analytics and Google Ads: measure which campaigns bring people to us
• Meta Pixel: tells Meta (Facebook and Instagram) when someone who came from one of our ads visits or books, so we can see which ads work
• FraudBouncer: filters fraudulent clicks on our ads
• Leadsy: identifies the company a business visitor is browsing from

If you decline, these are never loaded and set no cookies. Declining does not limit the site: you can still browse, book a room, and call us, though calls will show our main number rather than a tracked one.

Maps (only when you open one)

• Google Maps: the map in our footer loads only when you tap Show the map. Google then receives your IP address and browser details, as it does for any page it serves
• OpenStreetMap: the map page of our Take a Look directory draws its map from OpenStreetMap's tile servers, which receive your IP address when you open that page

We also run a first-party page-view counter on our own servers to see which pages are visited. It uses no cookies and is part of operating the site. Unless you say yes to analytics, it stores no personal information: it notes the page, how long you stay, your approximate location and the type of device, under a random ID that ends when you close the tab, and it does not keep your internet address. If you say yes to analytics, it also keeps a random ID in your browser, which stays until you clear your browser data, and notes your internet address, so we can tell when someone comes back.

Your choice is stored in a cookie named jp_consent on this domain for one year, and it covers both jilaniplace.com and our booking pages. You can also clear cookies in your browser settings at any time.

Floor and Take a Look also offer optional first-party activity sharing. This is separate from the cookie-free page-view counter above and has its own consent: the Help improve Floor switch in the app, or the activity-sharing checkbox on business pages. It is off until you choose it. Section 10 explains the identifiers, measurements, business reports and deletion controls involved.

4. Consent

We tell you why we need information when we ask for it, and we use it for that purpose. Some uses need your express yes: marketing email, analytics and advertising measurement on our website, From the House offers in the app, Help improve Floor and the other optional activity sharing, and letting the building recognise you. Each stays off until you turn it on.

You may withdraw consent at any time, subject to legal or contractual limitations. If withdrawing it stops something working, we tell you what changes.

5. Disclosure of Information

We do not sell or trade personal information. We may share data:

• With service providers supporting operations, payments, and communications, under confidentiality obligations
• With the police or another public body, only under a production order, a warrant or another legal requirement, or in an emergency that threatens someone's life, health or safety. If we disclose your information in an emergency, we tell you in writing without delay
• When someone sends us a copyright notice about something you posted: the Copyright Actrequires us to forward it to you, and we do, by message in the app and by email, within two business days. The notice includes the sender's name and address as they gave them. We do not tell the sender who you are
• With the Canada Revenue Agency, for a mentor we pay: the slips and returns the tax rules require (section 16)
• During merger, acquisition, or sale transactions under appropriate safeguards

Where your information is processed

Our own systems, including the Floor, your member account and your documents, run on servers in Canada. Photos you post are stored and delivered by Cloudflare, mainly in the United States. Videos you post are stored by Bunny.net in Germany, with copies in the United States and Singapore. Short-lived copies of both are kept in their delivery networks around the world so they load quickly wherever they are viewed. Other services we rely on are also operated outside Canada, mainly in the United States: payments (Stripe, and Apple Pay), identity verification when you become a member (Stripe Identity, section 16), email delivery, phone and text messaging, call tracking and call recording (CallRail; the recordings of calls to us are transcribed on our own server, not by CallRail), accounting (Xero), tour scheduling (Calendly), the lead forms we run on Facebook and Instagram (Meta), optional Apple or Google sign-in, Google Calendar and Outlook calendar (Microsoft) connections, website analytics where you have consented to it, the App Store, GIFs (GIPHY, section 10), and AI drafting of a Take a Look page a business asks us to write, a menu it asks us to read, or labels for the talent sentence on a member's Floor profile when the member asks for suggestions (Anthropic). The words, photographs, files and website address the business gives us for that request are sent to Anthropic's Claude model to write the draft or read the menu, and nothing else about the business or anyone else is. For label suggestions, only the talent sentence is sent, and only after the member agrees on that screen. When we use one of those, the information involved is processed in that country and, while it is there, is subject to that country's laws, including lawful access by its courts, law enforcement and government agencies. We choose providers that commit to protecting it, and we send them only what the service needs.

6. Data Security

We use access controls and secure connections to protect personal information. For connected Google Calendar and Outlook data, HTTPS/TLS protects data in transit; server-side files and temporary writes use restricted operating-system permissions; and authenticated account checks protect member calendar views. Section 10 explains these protections, connection controls and deletion in detail. No method of transmission over the internet is completely secure.

7. Your Rights and Choices

• Request access to and correction of your personal information
• Withdraw consent for specific uses where permitted
• Opt out of marketing communications

Our Privacy Officer is responsible for how we handle personal information. Write to them at info@jilaniplace.com or at the address in section 19. You can ask to see, correct or receive a copy of the information we hold about you. We answer within 30 days. If we need longer, we tell you why within those 30 days. If we refuse, we tell you why, and how to complain to the Office of the Privacy Commissioner of Canada.

• Ask any way you like: by email, in the app, at the desk, by letter or by phone. We act on a request that comes from the email address on your account, or from inside the app, so that nobody else can ask for your information.
• A copy of your information comes as one file of the records we hold about you, with your invoices and card payments as PDFs. A person here sends it. It leaves out other people's addresses and their private choices about you, safety and moderation records, keys and codes, and the sealed copies section 12 describes, and it says so.
• A correction is made where the record is kept, and our reply says what we changed.
• To have your information deleted, close your account (section 14). If you do not have the app, we close it for you when you ask.
• We keep a record of each request: your address, what you asked, when and how, and what we sent and who sent it, so that we can show we answered.

We keep personal information only as long as we need it for the purposes described in this policy, or as long as the law requires. In practice:

How long we keep things

Where a record is both money and identity, and you close your account, the record stays and your name is replaced by an anonymous marker.

8. Third-Party Links

Our website may include links to third-party websites. We are not responsible for their privacy practices.

9. Children's Privacy

Our website is not intended for children, and we do not knowingly collect personal information from anyone under 13. An account on the Floor, a booking, and a Plain Wage posting all require you to be 18 or older. If we learn that a member is under 18, we suspend the account and close it, which removes what it posted. If you believe a member is under 18, use Report in the app, or write to info@jilaniplace.com. When something on the Floor is reported as involving a child, we preserve it and report it to the authorities as the law requires (see section 12).

10. The Floor App (iOS)

The Floor is Jilani Place's app. This section says what it collects and why. Your Floor content and our own activity measurements go to our server. Services you choose, such as payments or social sign-in, also involve the providers described here. We do not sell your Floor data or give our activity records to advertisers.

• Your email address. You sign in by entering your email and typing back the six-digit code we send to it. There is no password. The code expires on its own and we keep only a hashed copy of it while it is valid. Where offered, you can instead choose Apple or Google sign-in. That provider verifies your identity; Floor stores a provider identifier linked to your verified account so returning sign-ins reach the same profile. Linking an Apple hidden email to an existing Floor account requires verification of that account.
• Your name and profile. The name you enter, and anything you add to your page, is shown to other members of Jilani Place.
• What you post. The words, photos, clips and voice notes you put on the Floor, your comments and replies, who you follow, and the messages you exchange with other members. Section 12 covers photos in detail.
• The Crown, if you choose to play. The Crown is a free game of skill inside the app: you stop five cups at a line, and the best score of the week holds the Crown. We keep each pour: when it started, when you tapped each cup, and its score. The board shows other members the name and photo on your Floor profile with your best score that week, and whoever holds the Crown is named at the top of the Floor. Whoever holds the Crown at 9pm Sunday wins one espresso or matcha drink at Cafe 295, which we record as a gift in the winner's name until it is collected. Employees of Jilani Place Inc. and Cafe 295 may play but cannot win, so besides our own staff list we keep a list of the Cafe 295 staff who play, and the board marks them as staff. If one of them holds the Crown at 9pm Sunday, the drink goes to the best score of the week by a player who can win, and the next week the app shows every player that player's first name, for example “the drink went to Priya”. When someone takes the Crown, everyone who has played in the last four weeks gets a notification naming who took it, from whom, and the score; it never reaches someone in a block with the new holder, either way, and it uses the same Crown switch as challenges. Whoever holds the Crown can challenge another member to take it, and that member gets a notification naming who challenged them and the score to beat; a challenge never reaches someone who has blocked you, and these notifications have their own switch in the app. We keep each challenge (who, whom, when and the score) until either of you closes your account. We keep each week's pours, who held the Crown and who received the drink as the record of the game. If you close your account, your pours are deleted and your name is removed from past weeks. The rules are in the app under How it works and at jilaniplace.com/crown. Hunch, the daily question game that came before it, has ended; its private entries are deleted 35 days after the day they were made.
• Saying you're in. You can tell other members that you are in the building today. It switches off on its own that evening. If you also turn on Let the building recognise me, the app shows you as in for 30 minutes at a time while your phone uses the building's internet connection. We recognise this from the building's internet address, not from GPS, and we keep no record of when you were here. You can turn it off at any time under Privacy & visibility in the app.
• If you join the Circle, we ask for your mobile number, company, birthday and mailing address, and how you heard about us. We use your birthday for a birthday perk and to confirm you are 18 or older, and your address only to mail you what you ask for. Your birthday and address are never shown to other members.
• A push token. If you allow notifications, Apple gives your phone an address for them and the app hands that address to us, together with whether it belongs to a test build or an App Store build, and the date it was last used. The app does not read your contact list or an advertising identifier. If you choose Near me and allow location access, the map opens around where you are. To show businesses on it, the app sends our server the edges of the map area, not your exact position, with no sign-in attached, and we do not connect these requests to your account. Because the map starts around you, that area shows roughly where you were. Newer versions of the app round it to about a kilometre; older versions send the map's exact edges. We keep no record of these requests beyond our server logs, which are deleted on the schedule in section 7. Floor's activity measurements receive no coordinates.
• Bookings and payments. Rooms you book and passes you buy through the app are handled the same way as on our website, and payments are taken by Stripe or Apple Pay. We never see or store your card number.

Some pieces on the Floor can be made public by their author. A public piece appears on jilaniplace.com and on the open web with your name on it until you take it back, and the app says so before you publish it.

Reporting something. When you report a conversation in the app, you tick the messages the desk may read. The desk sees those and nothing else, and the other person is not told. Reports of an intimate image or of a threat alert the desk at once. A report alone hides nothing from other members: a person looks first. If you are in danger now, call 911.

Reports from people who are not members. Anyone can report a public Floor post or Wanted from its page on jilaniplace.com, without an account. We ask for their email address and what is wrong, and use them only to answer that person about that report. They are kept with the report.

If we remove something, or suspend your account. We tell you in the app or by email, and why, unless the law, a police request or someone's safety stops us. We keep a record of what we told you, or of why we said nothing, and a sealed copy of what we removed (section 12). If you appeal, we keep what you said and what we decided.

GIFs. GIFs on the Floor come from GIPHY. When you search for one, the words you type go to GIPHY through our server, not from your device. When a GIF is shown, in the picker or in a conversation, your device loads it from GIPHY's servers, so GIPHY receives your device's internet address and the usual details an app or browser sends. That happens for everyone who sees the GIF, not only the person who sent it. GIPHY's privacy policy covers what it receives.

Business pages on Take a Look. A business's page is public on the web. If you vouch for a business, your name, how you know it and what you wrote appear on its page; if you are on its team, your name and role do. A business in health care shows no vouches; one written before stays visible to the person who wrote it, who can remove it. The public page shows your initial, never your photo, which is only for members signed in to the app. People are left out of the facts about a business that we publish for others to reuse. When someone makes a business page, we record that they confirmed the business is theirs to represent, and when. When someone at a business approves words we drafted for its page, we record who approved each part, the words and when. If we take a page down while we look into a report about it, we record who did it and why.

Mentor pages. A mentor's page shows members what the mentor wrote about their experience. If a mentor says their mentoring includes immigration, legal, investment or health advice, we ask who licensed them and their licence number, and the page shows both. Once a page is approved, a change to what it claims is kept with the page until a person here reads it, and members see the page as approved until then. If we decline a change, our note to the mentor stays until their next change. Closing the account removes the licence, any waiting change and our note.

A calendar you choose to connect

Floor, the Jilani Place app, can show your upcoming meetings and video calls on Today and suggest a room when you need one. Connecting a calendar is optional. Where Google connection is available, you choose your Google account and approve read-only access on Google's own screen. You can also choose to connect a calendar by its private calendar link. Where Outlook connection is available, you choose your Microsoft account (Outlook.com, Hotmail or Microsoft 365) and approve read-only access on Microsoft's own screen.

What we access. With Google access, we read the list of calendars your Google account can access and timed events from up to 20 eligible calendars, including shared calendars. We skip all-day events, generated holiday and birthday calendars, and calendars that only share busy/free times. The meeting window is the next seven days, with a short grace period for meetings that have just started. A private calendar feed may include older or additional events; these are filtered when we read it.

With Outlook access, we use Microsoft Graph to read the list of calendars in your Microsoft account, including calendars shared with you, and timed events from up to 20 of them. We ask Microsoft only for permission to read your calendars and calendars shared with you, and to stay connected without asking you to sign in again. We skip all-day and cancelled events, and use the same seven-day window.

What we keep. For each eligible meeting we keep its title, start and end time, a reference used to match updates, and the video platform and join link when present. We may process an event's location or description to find a supported video-call link. We do not store guest lists, full descriptions or locations in the calendar feed. Your Google or Microsoft authorization tokens, or private calendar address, are held on our server so we can refresh the connection without asking you to sign in each time.

How it is used. Your meeting title is shown only in your own signed-in Floor account. Floor can suggest a room and remind you about an upcoming meeting. Room suggestions can be turned off while your meetings remain on Today. Nothing is booked and no join link is put on a room screen without your action. Calendar data is not used for advertising, social recommendations or training AI models.

How Calendar data is protected. Transfers between Floor, our server and Google's or Microsoft's APIs use HTTPS/TLS encryption in transit. Calendar tokens, private calendar addresses, meeting snapshots and connection state are stored on our server in files with operating-system permissions that restrict reading and writing to the service account and authorized system administrators. Temporary files receive the same private permissions before any data is written. Google and Microsoft authorization tokens are not included in the calendar data returned to your app or published on our website.

Calendar views require a signed-in member account and return that member's meetings. Google and Microsoft connections use PKCE and a random, single-use authorization state that expires after ten minutes to protect the sign-in exchange and bind it to the member who started it. Google change notifications are checked against a registered channel and its secret before they can trigger a refresh.

Your choices. Google access is read-only: Floor does not create, edit or delete events in your Google calendar. You can disconnect in Floor using Forget my calendar. This deletes the saved calendar address, tokens and meeting snapshot from Floor's active connection stores and asks Google to revoke the authorization. You can also revoke access directly in your Google account. If Google cannot be reached when you disconnect, the local deletion still happens; you can confirm revocation in Google.

Outlook access is read-only as well: Floor does not create, edit or delete events in your Outlook calendar. Forget my calendardeletes the saved Microsoft tokens and meeting snapshot from Floor's active connection stores, which ends Floor's access. Microsoft does not let us withdraw your approval on your behalf, so Floor stays listed among the apps you have approved until you remove it in your Microsoft account's app permissions (for a work or school account, in My Apps or through your IT administrator). With the tokens deleted, that listing gives Floor no way to read your calendar.

Updates and retention. A successful refresh replaces the stored meeting snapshot with the current seven-day window. If a refresh fails, Floor retains the last successful snapshot so a temporary outage does not erase your diary; expired meetings are no longer shown. That snapshot remains until a successful refresh replaces it or you disconnect. Calendar credentials remain until you disconnect or the account is deleted. Copies in access-restricted operational backups remain until those backups rotate out; disconnect removes the active connection records.

Jilani Place's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Optional activity sharing

Help improve Floor is off by default. If you turn it on, we collect feature and screen names, actions such as opening a business or tapping its call button, dates, platform, app build, random installation and session identifiers, and time actively using the app. Business activity can include the business or item viewed. Time stops counting in the background or after 30 seconds without interaction. Entry sources use broad categories such as directory or search, without the words you searched for. These records do not include message contents, form answers, keystrokes, payment details, precise location, or contact lists.

Signed-in app activity can be associated with your account to measure repeat use and connect signup steps. Floor's owner sees aggregate product statistics; a confirmed business owner sees aggregate results for their own listing. Those dashboards do not show visitor identities or individual browsing histories. Business visitor counts are separate for each business and reset each day.

On Take a Look business web pages, a separate activity-sharing checkbox controls the same optional measurements. The browser stores a consent choice and, after you agree, a random installation identifier. You can browse, sign in, contact a business and use Floor without enabling activity sharing.

Change Help improve Floor under What people see in the app, or use the checkbox on a business web page. Turning sharing off stops new collection and requests removal of activity from that installation. The app retries removal if your phone is offline. Closing your account removes account-linked activity. Detailed activity records are retained for up to 400 days in active storage; backup copies expire under the normal backup retention schedule. Necessary security and service reliability records are separate from this optional measurement.

Crash and performance reports

These are off until we switch them on. Once they are on, the app sends us a report only if you have chosen to share analytics with app developers in your iPhone's settings (Settings, then Privacy & Security, then Analytics & Improvements). The report is the one Apple's iOS prepares when the app crashes, freezes, starts slowly or works the phone too hard, at most about once a day. It holds only technical details: which part of the app's code was running, error codes, measurements such as how long the app took to start, the app and iOS versions, the iPhone model, and a random number for that installation of the app. It holds nothing you wrote and nothing that names you or your account. We don't keep your internet address with a report; to stop floods, we count reports for each network under a coded form of its address, for at most a day. We keep reports for 90 days. To stop them, turn off sharing with app developers in the same settings.

Business results and feedback

Enquiries, referrals, follows and reservations are records of actions you ask Floor to perform. Aggregate counts appear in business results independently of optional activity sharing. A call tap is not a completed call, a reservation is not proof of attendance, and customer outcomes entered by a business are labelled as owner-reported.

Bug reports are private support requests. Ideas remain private unless you choose to share them and Floor reviews them for publication. Published ideas appear without your name, with votes and progress updates. Do not include personal or confidential information in an idea you want to publish.

Social sign-in providers

Google's sign-in software processes account, device and usage information and approximate location for authentication and its service analytics under Google's privacy policy. The Help improve Floor switch controls our optional measurement separately from the sign-in service you choose. You can continue to use an email code instead.

11. Plain Wage, our job board, at aboveboard.work

Plain Wage, previously called Above Board, is our job board, run by Jilani Place at aboveboard.work and also reachable from inside the Floor app. Postings on it are public. Nobody who is looking for work is ever listed publicly, and we never charge a job seeker anything.

• Postings. An employer who posts gives us the posting, their business name and a way to reach them. A posting from a member of Jilani Place, or from a business that a member set up or that we have checked, is shown straight away. A person here reads every other posting before it is shown.
• Raising a hand. When you raise a hand at a posting, your name, your email, what you wrote and, if you send it, a copy of your résumé as it stands then go to the employer who posted it and to nobody else. No automated system ranks, screens or scores you.
• Job applications: 12 months after the job closes, or after the last activity on your application if that is later, we delete the application. If you have an account, the copy of your résumé that went with it is kept, no longer shown to anyone, until you close your account; any other copy is deleted with the application. The résumé on your own profile stays until you replace it or close your account.
• Agencies. An agency that posts for a client gives us its Ontario recruiter licence number. We show it on every posting the agency manages, as the agency gave it, and we keep it with who gave it and when.
• Reporting a posting. Ontario asks every job platform to give people a way to report a posting they believe is fraudulent, and to publish how such reports are handled. Our door is aboveboard.work/report and our written policy is at aboveboard.work/policy. You do not need an account, your email is optional, and it is never shown to the employer. A person reads every report. Where the law asks for it, we keep the report and what we did about it for three years, and we keep every past version of that policy for the same length of time.

12. Photos

Photos you add to a post, a message or your page are stored with Cloudflare (see section 5). Before a photo is shown to anyone it is re-encoded, which removes the hidden data cameras attach to images, including location, so a photo on the Floor does not carry where it was taken. The original you sent is kept privately, seen by no one, and deleted within two days. The app only reaches the photos you pick, take with the camera, or paste into a message yourself; it never reads your library or your clipboard on its own.

Photos are shown to members of Jilani Place, and to anyone who can see the piece they belong to if you chose to make that piece public. Delete the post or message and the photo goes with it. Closing your account removes every photo you uploaded, except a sealed copy, below.

When we keep a sealed copy. In the four cases below we keep a sealed copy of something instead of removing it, even when it is deleted, a message is unsent or edited, or the account is closed. A sealed copy cannot be opened in the app or on the web, nobody else sees it, and a person here releases it.

• A child. When a photo, clip or voice note is reported to us as involving a child and the law requires us to preserve it, we keep it for as long as the law requires, and we hand it only to the police when the law requires us to.
• The police or a court. When the police or a court asks us to preserve something, we keep a sealed copy of what the request names: posts, comments, messages and their photos and voice notes, or a member's whole page. We keep it for 21 days for a police preservation demand, 90 days for a preservation order, or as long as an order says, and we hand it over only when the law requires us to.
• A safety report. We may keep a sealed copy of what a report of harassment, hate, explicit content, an intimate image or a threat names, for 90 days. For a reported conversation, that is only the messages the reporter ticked: their words, and the names of any photos and voice notes, whose files are kept sealed.
• Something we removed. When we remove something for breaking our Terms, we keep a sealed copy of it, with its photos, clips and voice notes, so that we can show what we removed and why, and put it back if an appeal succeeds. It stays if you close your account. No period is set yet for how long we keep it.

How a photo is delivered. Each photo has its own long, unguessable web address, and that address is what proves the request is allowed: a picture inside a page cannot carry a sign-in the way the rest of the app does. In practice this means the photo is private because the address is unknown, not because the address is guarded. Anyone you deliberately or accidentally give the address to, by forwarding it or by pasting it somewhere, can open the photo. The address stops working when the post or message the photo belongs to is deleted, and when you close your account. It also stops working at once when we take the photo down.

13. Push Notifications

The app asks before it sends any notification, and sends none until you say yes. A notification carries a short title and line, for example that a room you booked is about to start, that a member replied to you, or that a message arrived, and enough to open the right screen when you tap it. Two kinds of notification are promotional, and both are off unless you turn them on: From the House, occasional offers from the house, and Cafe 295 reminders (section 15). Each has its own switch, we record when you turned it on, and you can turn it off at any time in the app's notification settings. Each offer in the app says it is from Jilani Place Inc. and links to its switch, and the offers switch sends at most one notification per offer. No other notification is used for advertising.

To turn them off: in the app, open Settings and use the notification switches to silence each kind; or on your phone, open Settings, then Notifications, then Floor, and turn off Allow Notifications. Signing out of the app also tells us to forget that phone. We cap how many notifications a member receives in a day and respect quiet hours.

14. Closing Your Account

You can close your account from inside the app: open Settings, choose Close your account, and type your email address to confirm. The screen counts what will be removed before you tap. Closing is immediate, and what it deletes cannot be brought back. If you sign in again later with the same email address, the account opens again without it. You can also write to us at the address in section 19 and we will do it for you.

What is deleted

Your profile, your posts, comments, replies, likes and follows, your messages and the photos, clips and voice notes in them, your notification devices and preferences, and the sign-in itself, Apple and Google sign-in links, account-linked optional activity, your product feedback records, and your résumé and job applications. A conversation that everybody else has already left is deleted whole, with the photos and voice notes in it. The details on your Circle profile (your name, phone, company, birthday and address) are blanked, and a link between your phone number and Cafe 295 ends. Something reported as involving a child, something the police, a court or a safety report asks us to keep, and something we removed for breaking our Terms are kept sealed as section 12 describes.

What is kept, and why

Business records stay: your customer record if you hold or held a membership, rooms you booked, invoices and payments, signed agreements, your Circle points ledger, your wallet and account credit records, and a mentor's earnings. These are the house's books. Canadian tax law requires us to keep them, and some of them are also somebody else's record, such as an invoice or a room that was actually used. Where a record is both money and identity, it stays with your name replaced by an anonymous marker, so the accounts still add up and you are no longer in them. We keep these records for as long as tax and accounting law require and no longer.

A few other records stay because they are proof of something, or because they are somebody else's record as well as yours:

• a mentorship, with what was said and paid inside it, because it is the other person's record too; and a mentor's payout details, with their page taken down, while a mentorship they give is running or we still owe them
• the record that you linked your phone number to Cafe 295, and any points it moved, because it is the proof that you asked
• which Terms you agreed to and when, and what you agreed to receive by email and when you stopped, which Canada's anti-spam law asks us to keep
• your support requests and your conversations with our desk, and a note that you closed your account, so that somebody can answer if you write to us later. We keep them for two years after you close, or after the last message on them if that is later, and one still open until it is resolved. After that, the email address on them is replaced with a one-way code made from it
• a report you made that our desk is still dealing with, with your email address replaced by an anonymous marker. What you wrote in it stays
• your tax details as a mentor, the slips filed for you and the mentor agreement you signed, for six years after the last year we reported, because the tax rules ask us to keep them. If you never earned as a mentor, your tax details are deleted when you close; the agreement stays (section 16)
• the record of a copyright notice about something you posted, for at least six months from the notice, or a year if the sender tells us within those six months that they have gone to court, as the Copyright Act requires
• a sealed copy that section 12 describes, until a person here releases it
• what we told you when we removed something of yours or suspended your account, and any appeal you made, with your email address replaced by an anonymous marker. What you wrote in an appeal is removed; what we decided stays
• records of a request from the police or a court, and of what we handed over
• our record of a sit-down incident you were part of
• our record of each request you made about your information (section 7)
• your email address on a private list of closed accounts, so that a sign-in made before you closed can never open the account again
• a block or suspension somebody else placed on your account, because it is their decision and leaving does not lift it
• where something you did is also somebody else's record, such as a paid job, a gift, a seat or a reference you signed, it stays with your name taken out

The closing screen lists each of these that applies to you before you confirm.

Closing the account does not by itself cancel a membership or subscription that is billed separately. If one is running, a person at Jilani Place will settle it with you.

Your wallet and credit records also say what we owe you. When you close, we refund what is left in your wallet, your account credit, and points you bought and have not used (our Terms, section 5), and the records show that we did.

15. Cafe 295 Orders Placed Through the App

Members can order from Cafe 295 inside the app. Cafe 295 is a separate business with its own privacy policy, and it takes your payment through Square on its own page; we never see your card. To place the order we pass the cafe your name, your email address, what you ordered, when you want it, and either your suite number for delivery on the floor or that you will pick it up. We keep a record that an order was placed and whether it was paid, so that the house can do things like validate parking. What the cafe does with an order once it has it is governed by the cafe's own policy.

The app also remembers what you have ordered from Cafe 295 on your phone, to show “Order again” and your usuals. That list stays on your phone and is never sent to us or to the cafe. If you turn on Cafe 295 reminders, your phone uses it to remind you of your usual, at most twice a week and never overnight. Turning the switch off, or signing out, cancels any reminder waiting.

16. Identity Verification and Documents We Hold

When we ask for identification, and why

We verify the identity of everyone who becomes a member: anyone who takes a desk, an office, a pass, a virtual office or mail service, or a membership plan in the Floor app or on our website, and the person who signs a membership or tenancy agreement for a company. We may also ask where a law or a service provider requires us to confirm who a customer is. We do not ask casual visitors, people who only book a room, or people who only use the Floor app for identification.

We ask for two reasons. The first is to confirm you are who you say you are before we give you a key to a shared building. The second is safety: our members work here alone at night, keep equipment and confidential papers in these offices, and share a floor with people they did not choose. If something happens here, we have to be able to tell the police or an insurer who was given access, and to stand behind that answer.

How the check works

We use Stripe Identity, a service provided by Stripe. You photograph a government-issued photo ID (a driver's licence, passport or national ID card) with your phone's camera and take a selfie. Stripe checks that the document is genuine and that the face in the selfie matches the photo on the document. That comparison is biometric: Stripe measures the face in both images to tell whether they show the same person. Stripe does it for us, for this check only, and asks for your consent before it starts. Stripe's own notice, shown during the check, explains how Stripe handles what it collects.

If you would rather not be checked this way, or Stripe cannot check you (for example, your device has no camera), tell us and a member of our team will look at your ID in person instead. An in-person check involves no automated, biometric or facial recognition processing.

What we keep

From a Stripe check we keep only the result: the type of document, the country that issued it, the name on it, the date of the check, and Stripe's reference for it. The images of your ID and your selfie stay with Stripe, and we do not copy them into our own systems.

From an in-person check, a member of our team records the type of document, the name on it, its expiry date, who checked it, and the date, and we keep one photograph of the document itself. We do not keep your document number in a searchable form beyond what appears in that photograph.

Where it is kept

The result of every check, and the photograph from an in-person check, are kept on our own server in Canada. Access is restricted to the staff who need it for the purpose above, every upload, view and deletion is logged with the name of the person who did it, and none of it is reachable from the Floor app, from your member account, or from the public internet. The images taken for a Stripe check are held by Stripe, outside Canada, mainly in the United States (section 5).

How long we keep it

We ask Stripe to delete the images of your ID and your selfie, and the details it read from them, 30 days after your check is finished, whether it passed or not. Stripe may keep anything the law requires it to.

We keep the photograph from an in-person check for as long as the agreement it was taken for is active, and for two years after that agreement ends, after which the photograph is deleted automatically.

Two years is the period in which a legal claim about something that happened while a person had access to the building can still be brought in Ontario. It is the honest outside edge of the safety purpose above: while a claim is still possible we can still answer it, and once that window has closed there is no longer a reason to hold a scan of somebody's passport.

If we take a newer copy of your identification, the older one is deleted at that moment. What survives the images and the photograph, and is kept with the business records described in section 14, is the record that the check was done: the type of document, the name on it, who or what checked it and when, and, for an in-person check, its expiry. That record holds no image.

Your choices

You can choose an in-person check instead of Stripe. You can ask us what identity records we hold for you, ask us to correct the details recorded, and ask us to delete a photograph once the purpose has ended. Write to info@jilaniplace.com. If we cannot delete it because a law requires us to keep it, we will tell you which one.

Mentors' tax details

Before we can pay a mentor, the tax rules need us to know who they are. We ask for what the Canada Revenue Agency needs and nothing more: your legal name, or your corporation's; your address; your social insurance number, or your corporation's business number; your date of birth, if you are a person; and whether you are registered for GST/HST, with your GST/HST number if you are. Your social insurance number, business number and date of birth are sealed (encrypted) on our own server in Canada, and opened only to prepare the slips and returns we file. Every screen, yours included, shows only their last three digits.

We use these details to file a T4A slip and the Part XX platform return for what we pay you, to give you your copies, and, if you are registered for GST/HST, to issue the invoices we make on your behalf under the mentor agreement. We keep them, with the slips and the agreement, for six years after the last year we reported, because the tax rules ask us to. If you close your account without ever having earned as a mentor, your tax details are deleted; the agreement you signed stays.

The papers behind a Check

When a business asks for the Check on Take a Look, a person here looks at the owner's identification on a video call. We record who looked and when, and we never store the identification itself. The business uploads up to three photos of its papers: its registration, and a lease or a utility bill that shows its address. We keep those photos with no time limit, through the year the mark lasts and after it, and also when a check does not pass. They are removed when the member who asked closes their account; if another owner of the business remains, the record that the check was done stays without them.

17. Apps and AI Assistants You Connect

You can let another app, such as an AI assistant, look up and book rooms at Jilani Place for you. Nothing is connected unless you do it yourself: the app sends you to our own sign-in page, you sign in with a code sent to your email, and we show you exactly what the app is asking for before you agree.

What a connected app can do

• See your bookings, if you allow it: the room, the date and time, the number of people, the price and HST, the status, and the booking reference. This covers bookings made online under your email address.
• Make, change and cancel bookings, if you allow that too, under the same rules and prices as our website, including the cancellation rule in our Terms of Use.

What it never gets

• Your card details. You always pay on Stripe's own secure page, never inside the app, and we never pass payment details to it.
• Other people's information. A connected app sees only your own bookings, and never who else has booked a room.
• Your Floor posts, messages, photos, documents, or anything else in your account.

What we keep

We keep a record of each app you connect: its name, what you allowed, when you connected it, and when it was last used. We also keep a record of each booking, change and cancellation the app made for you, with the booking record, for as long as section 7 says we keep booking records. The keys we give the app are stored only in a scrambled (hashed) form, expire on their own, and are replaced each time they are renewed.

The app's own policy

What the app's provider does with the booking details it receives, such as keeping them in your conversation history, is governed by that provider's own privacy policy, not this one. Read it before you connect.

Disconnecting

You can see every app connected to your account and disconnect any of them from Connected apps on your account page at jilaniplace.com/booking/account. The app loses access immediately. Disconnecting does not cancel bookings already made; manage those from your booking confirmation or your account. You can also ask us to disconnect an app for you at info@jilaniplace.com.

18. Changes to This Privacy Policy

We may update this policy periodically. Revisions will be posted with an updated effective date.

19. Contact Us