Privacy Policy

17907583 Canada Inc. ("we," "us"), which operates as Open Case Co, is responsible for the personal information described in this policy and has designated a Privacy Officer to oversee our compliance. You can reach the Privacy Officer using the details in section 13.

This policy explains what we collect, why, who we share it with, and the choices you have. Our services are for adults (18+) in Canada (outside Quebec) and the United States.

• Account information: your name (optional), email address and sign-in records.
• Purchase information: what you bought, when, the amount, your billing country and region, and a payment reference from Stripe. Card details go directly to Stripe.
• Use of the service: which mysteries you downloaded, credits used, share links you created and reviews you post.
• Things you send us: emails to our support address and anything you include in them.
• Guest details you enter: if you use the character-assignment tool, the guest names and email addresses you enter, used only to send them their character.
• AI inputs: text you type into the AI features.
• Technical information: IP address, browser and device type, and request logs kept by our hosting provider for security and troubleshooting.

We do not collect payment card numbers, government ID or precise location.

• to create and secure your account;
• to process purchases and subscriptions, deliver downloads and send receipts;
• to send account, renewal-reminder and service emails you need;
• to provide the AI features you choose to use;
• to answer support requests;
• to prevent fraud and abuse and keep the service secure; and
• to meet legal, tax and accounting obligations.

Newsletter: we only send it if you tick the box on our sign-up form and then confirm by clicking the link we email you. As proof of your consent we keep the wording you agreed to, when you asked, and when you confirmed. Every newsletter has an unsubscribe link that works immediately; you can also email us. Unsubscribing does not affect emails about your account or purchases.

By creating an account and using our services you consent to the uses described here. You can withdraw consent at any time, subject to legal or contractual limits (for example, we must keep purchase records for tax purposes). Withdrawing consent may mean we can no longer provide some services, such as your account.

We do not sell or rent your personal information. We share it only with service providers who help us run Open Case Co, under contracts that limit their use of it to providing their service to us:

• Clerk: account sign-up and sign-in (your name, email address and sign-in records)
• Stripe: payment processing and billing (we never receive your full card number)
• Supabase: our database and file storage (account, purchase and download records)
• Vercel: website hosting (technical request logs such as IP address and browser type)
• Resend: sending our emails (receipts, account and renewal emails, character packets you send to guests)
• ImprovMX: forwarding email sent to our support address to our inbox
• Anthropic: the AI features (the text you type into the host assistant, hints and mystery generator is sent to Anthropic to produce a response)

We may also disclose information where the law requires it, or to protect our rights, our customers or the public.

Most of our service providers store or process information in the United States, and some may use other countries. Information held there is subject to the laws of those countries, including lawful access by their authorities. We remain responsible for information we transfer to providers for processing.

We use only essential cookies and browser storage: to keep you signed in (set by Clerk), to remember your cart, and to remember your cookie choice. We do not currently use analytics, advertising or tracking cookies, and we do not use third-party analytics tools. If we ever add them, we will ask for your permission first and update this policy.

• Account information: while your account is open, then deleted or anonymized within 90 days of closure, except as below.
• Purchase and tax records: at least six years after the end of the tax year, as Canadian tax law requires.
• Proof of subscription consent: for the life of the subscription and at least three years after.
• Support emails: up to three years.
• Hosting logs: as set by our hosting provider, typically a few weeks.

We use encryption in transit, access controls, separate credentials for each service, and regular security reviews. No system is perfectly secure. If a breach of security safeguards creates a real risk of significant harm, we will notify affected people and the Office of the Privacy Commissioner of Canada as the law requires, and we keep a record of every breach for at least 24 months.

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is inaccurate or incomplete;
• delete your account and personal information (subject to records we must keep by law); and
• stop sending you marketing emails.

Email support@opencaseco.com from your account email address. We may need to confirm your identity. We will respond within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

We do not sell or share your personal information for cross-context behavioral advertising, and we do not use it for targeted advertising or profiling. Depending on your state, you may have rights to know, access, correct and delete your personal information; you can exercise them as described in section 10. We will not treat you differently for exercising your rights. Because we do not use tracking technologies, browser opt-out signals such as Global Privacy Control have nothing further to switch off.

Our services are only for adults 18 and older. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it. Contact us if you believe a minor has given us information.

Privacy Officer
17907583 Canada Inc. (operating as Open Case Co)
538 Delaronde Road
Saskatoon, Saskatchewan S7J 4A8
Canada
Email: support@opencaseco.com

We may update this policy. For material changes we will email account holders and post a notice on the site before the changes take effect. See also our Terms of Service.