GliVal

Privacy Policy

Effective Date: November 22, 2025
Last Updated: November 22, 2025

This Privacy Policy explains how GliVal, operated by X STAR CODE, collects, uses, discloses, and protects personal information.
GliVal operates in Alberta, Canada and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable laws.

If you do not agree with this Privacy Policy, you must stop using the Platform.

1. About Us

GliVal is a booking and scheduling platform enabling independent service providers (“Customers”) to manage services, appointments, and payments.
Clients use GliVal to book appointments with Customers.
GliVal is not a service provider or employer of Customers.

Business Operator: X STAR CODE
Registration Number: TN26511691
Location: Edmonton, Alberta, Canada
Contact: [email protected]

2. Information We Collect

We collect the following categories of personal information:

2.1 Client Information

  • Name
  • Email
  • Phone number
  • Appointment history
  • Notes provided by Customers
  • SMS verification logs
  • Consent logs
  • IP address and device information
  • Payment-related metadata from Stripe (no card numbers)

2.2 Customer Information

  • Name
  • Email and business email
  • Phone number
  • Business details (address, city, province, postal code)
  • Subdomain content (images, descriptions, pricing, working hours)
  • Stripe Express account information (connected account ID only)

2.3 Automatically Collected Data

  • IP address
  • Browser type and version
  • Device information
  • Cookies (session & analytics)
  • Pages visited and timestamps
  • Login history
  • Error logs
  • Approximate location derived from IP

2.4 Payment Information (Stripe)

GliVal never stores:

  • credit card numbers
  • CVV
  • expiration dates

Stripe may provide:

  • last 4 digits
  • card brand
  • payment status
  • charge outcomes
  • fraud indicators

2.5 SMS & Email Communication Data

  • delivery status
  • timestamps
  • message type
  • verification codes
  • service provider used (Twilio/Brevo)

3. How We Use Personal Information

We use personal information to:

  • process bookings and appointments,
  • verify Client phone numbers,
  • send booking confirmations and reminders,
  • process payments through Stripe,
  • manage cancellations, refunds, and no-show outcomes,
  • maintain Customer subdomain pages,
  • provide Customer dashboard features,
  • enforce platform safety and compliance,
  • prevent fraud and misuse,
  • improve platform performance and reliability,
  • comply with financial, tax, and legal obligations.

We do not sell or rent personal information.

4. Legal Basis for Processing (PIPEDA)

We collect and process personal information based on:

  • Consent — when Clients book appointments or share contact details.
  • Contractual necessity — processing bookings, payments, notifications.
  • Legitimate interests — fraud prevention, platform security, account protection.
  • Legal obligations — financial record retention, tax requirements.

5. How We Share Personal Information

GliVal shares information only when necessary to operate the platform.

5.1 Service Providers (Subprocessors)

We share limited personal information with:

  • Stripe — payment processing
  • Twilio — SMS sending
  • Brevo — email sending
  • Hosting providers — storage, compute, backups
  • Logging/monitoring tools — error tracking

Each subprocesssor receives only what is required for their function.

5.2 Customers (Service Providers)

Clients’ booking information is shared with the Customer they book with:

  • name
  • email
  • phone
  • notes
  • appointment details

Customers require this information to deliver the service.

5.3 Legal Compliance

We may disclose information if required by:

  • law,
  • legal request,
  • regulatory authority,
  • fraud investigation.

We never voluntarily disclose data unless legally obligated.

6. Cookies & Tracking

GliVal uses:

Essential Cookies

  • session authentication
  • security tokens
  • booking session tracking
  • CSRF protection

Analytics Cookies

  • page performance
  • anonymous usage metrics

No advertising cookies

GliVal does not use tracking for targeted advertising.

Clients and Customers may disable cookies in their browser, but some features may not work.

7. Data Retention

We retain personal information as long as necessary for:

  • providing platform services,
  • legal compliance (financial and tax records),
  • fraud prevention.

Examples:

  • booking records: retained indefinitely for financial integrity
  • Client phone/email: retained with appointment record
  • Customer business data: retained while account is active
  • logs: retained for security and diagnostics, generally 90–365 days

If data is no longer required, it is anonymized or deleted.

8. Data Security

GliVal employs:

  • encrypted HTTPS communication
  • secure hosting infrastructure
  • password hashing
  • tiered access controls
  • server-side validation
  • Stripe-hosted payment forms
  • rate limiting and fraud detection
  • audit logs

No method of transmission is 100% secure, but we apply reasonable and appropriate safeguards.

9. International Transfers

Some subprocessors (e.g., Twilio, Stripe) may store data in the United States or other jurisdictions.
By using GliVal, you consent to such transfers as required for platform operation.

GliVal ensures subprocessors use appropriate security protections.

10. Your Rights

Under PIPEDA, Clients and Customers may:

  • request access to personal information,
  • request corrections,
  • withdraw consent (where applicable),
  • request deletion/anonymization (subject to legal retention requirements),
  • challenge compliance,
  • file a complaint with the Office of the Privacy Commissioner of Canada.

Requests can be made to [email protected].

11. Children’s Privacy

GliVal does not knowingly collect information from individuals under 18 years old.
If we discover such data, it will be deleted.

12. Changes to This Privacy Policy

GliVal may update this Privacy Policy at any time.
When changes are material, we will provide notice through:

  • email notifications to Customers, or
  • an in-platform notification.

Continued use of the Platform constitutes acceptance of the updated policy.

13. Contact Information

For privacy inquiries, data access requests, or complaints:

GliVal (operated by X STAR CODE)
Edmonton, Alberta, Canada
Registration Number: TN26511691
Email: [email protected]