Privacy policy
Draft for legal review. Last updated: 12 September 2026.
GoSecure Inc. (“GoSecure”, “we”), Montréal, Québec, operates GoSec.TV. This policy explains what personal information we collect, why, and your rights under Québec’s Act respecting the protection of personal information in the private sector (Law 25), the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the GDPR. Person in charge of the protection of personal information: [email protected].
1. What we collect
- Account data: name, email address, password (hashed), language, organisation and team membership.
- Billing data: billing address, subscription and invoice history. Card details are processed by our payment provider and never stored on our servers.
- Usage data: sessions watched, playback position, lists and favourites, pages visited, device and browser information, approximate location derived from your IP address.
- Communications: messages you send us and your email preferences.
- Conference data: if you attended GoSec, the name and email you registered with, used to grant your complimentary membership.
2. Why we use it
To provide and secure the service and your membership; to process payments and send transactional emails (receipts, renewals, team invitations); to remember where you stopped watching and personalise recommendations; to measure and improve the site; to send news about GoSec.TV and the GoSec conference when you have consented, with an unsubscribe link in every email; and to meet legal obligations.
3. Cookies and tracking
We use strictly necessary cookies (login, cart, language, security) and, with your consent, analytics and advertising cookies: Google Analytics 4 (audience measurement), the LinkedIn Insight Tag (conversion measurement and audience building) and Vimeo player cookies (video playback; we enable “do not track” on embeds). You can change your choices at any time through the cookie banner and your browser settings.
4. Who we share it with
Service providers acting on our instructions: web hosting, payment processing, video delivery (Vimeo), email delivery and marketing automation, analytics (Google), advertising measurement (LinkedIn), and the conference registration platform. Some of these providers are located outside Québec and Canada, notably in the United States; we assess these transfers and rely on contractual safeguards. We do not sell personal information.
5. Retention
Account and usage data are kept while your account is active and for up to three years after it closes; billing records for seven years as required by tax law; analytics data for 14 months.
6. Your rights
You may access, correct, export or delete your personal information, withdraw consent, and ask about automated processing. Write to [email protected]; we respond within 30 days. You may also complain to the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.
7. Security
We use encryption in transit, access controls, logging and regular reviews. In the event of a confidentiality incident presenting a risk of serious injury, we will notify affected persons and the Commission d’accès à l’information as required by law.
8. Changes
We will post updates here and, for material changes, notify you by email or on the site.