Privacy Policy

This Privacy Policy explains how GlideList ("GlideList", "we", "us", or "our") collects, uses, discloses, and protects information in connection with glidelist.com and any related pages or services (collectively, the "Platform"). GlideList is a Canada-wide, moderated directory of Nuru massage providers. Some listings are curated from publicly available information; others are paid advertisements submitted by businesses, marked with a Featured badge.

Discretion shapes how this platform handles data. Browsing requires no account, the directory asks for as little information as possible, and there is nothing to sign up for as a visitor. This policy describes the limited information that does exist — mostly from advertisers and from people who contact us — and the care we take with it.

This Policy applies to information collected through the Platform. It does not apply to third-party websites that listings may link to; those are governed by their own policies, which you should review separately.

Information visitors provide

Browsing listings, city pages, and search results requires no account and involves no forms. We only receive information from you if you choose to send it:

• Contact messages: if you use the Contact page, we receive the name, email address, and message content you provide, solely to respond to you.
• Listing reports: if you report a listing, we receive the details you submit about the listing and the issue, solely for moderation purposes. Reports may be submitted without identifying yourself.

Information advertisers provide

Businesses that apply for a listing through the Advertise page provide what is needed to build and moderate their profile:

• Business details: business name, description, services and pricing, service area, address or coverage area, postal code, and business hours.
• Contact details: a contact email address, and optionally a phone number and website URL, some or all of which may be published on the public listing at the advertiser's direction.
• Photos: images the advertiser submits for their profile, which they confirm they have the right to use.
• Plan selection: the listing plan chosen (Basic or Featured).

Information collected automatically

Like nearly all websites, our hosting and infrastructure providers automatically record standard technical data when the Platform is accessed, such as IP address, browser type, pages requested, and timestamps. This data exists to deliver the site, keep it secure, and diagnose problems. It is not used to build advertising profiles.

Information we do not collect

• We do not require accounts, passwords, or visitor profiles.
• We do not sell personal information to anyone, ever.
• We do not run third-party advertising trackers or social media pixels on the Platform.
• We do not knowingly collect information from anyone under 18. The Platform is for adults only.

We use the limited information we hold only for the purposes it was given to us for:

• To operate the directory: publish and display listings, keep business information current, and maintain city pages.
• To moderate: review applications and edits, evaluate reports, suspend listings under review, and enforce the listing guidelines.
• To communicate: respond to contact messages and advertiser correspondence, and manage listing relationships.
• To keep the Platform safe: detect and prevent abuse, fraud, spam, scraping, and technical attacks, and maintain the security of our systems.
• To comply with law: meet legal obligations and respond to lawful requests where required.

We do not use personal information for behavioural advertising, profiling, or any purpose that is incompatible with the purposes above. We will not repurpose contact information for unrelated marketing without consent.

Listing information — business name, description, services, pricing, location or coverage area, contact details, and photos — is published publicly by design: that is the entire purpose of a directory. Advertisers choose which contact details to publish and are responsible for the accuracy of what appears on their profile.

Curated profiles are assembled by our team from publicly available sources. If you are a business owner and want a curated profile corrected or removed, contact us and we will action verified requests promptly.

Anything published on a listing can be seen by anyone on the internet, including search engines. We encourage advertisers to publish only business contact details — never personal information about staff or clients that is not intended for public display.

We use artificial intelligence tools, including services provided by OpenAI, to assist our moderation team. Automated assistance helps with tasks such as: reviewing and organizing information submitted by advertisers, drafting and improving listing descriptions and metadata, and helping identify the type of photos submitted (for example, distinguishing profile photos from interior or logo images).

The principles we follow for AI processing:

• Assistance, not decisions: AI output is always reviewed by a person. No automated system makes final moderation decisions or determines what content is published.
• Limited data: we send only the business content needed for the specific task — typically text and photos from an advertiser's own submission or their public website. We do not send visitor contact messages or report-submitter identities to AI services.
• No visitor profiling: AI tools are never used to profile visitors or analyse browsing behaviour.
• Third-party handling: AI providers process data under their own terms and security commitments. We do not permit AI providers to use our business data to train their public models where those controls are available to us.

If you are an advertiser and have questions about how AI is used in connection with your listing content, contact us and we will explain what applies to your data.

We share information only in these narrow circumstances:

• Service providers: companies that host our infrastructure and database (such as Supabase), deliver the site, and provide AI assistance (such as OpenAI) — each processing data only as needed to provide their function to us.
• Legal requirements: where we believe in good faith that disclosure is required by law, regulation, or valid legal process, or to protect the rights, property, or safety of GlideList, our users, or the public.
• Business transfers: if GlideList is ever merged, acquired, or reorganized, information may be transferred as part of that transaction, subject to this Policy.

We do not sell, rent, trade, or otherwise monetize personal information. We do not share advertiser contact information with other advertisers or with any third party for their own marketing.

The Platform relies on a small number of third-party services to operate: hosting and delivery for the website itself, Supabase for application infrastructure and data storage, ImageKit for image delivery of listing photos, and OpenAI for AI-assisted moderation described above. Each receives only the data necessary for its function, under its own security and privacy commitments.

Listings also link to advertisers' own websites and booking channels. Once you leave glidelist.com, this Policy no longer applies — the destination's own privacy policy governs. We do not control and are not responsible for third-party websites or their data practices.

We keep personal information only as long as needed for the purposes described in this Policy: listing content is retained while a listing is live and for a reasonable period afterwards; contact messages and reports are retained while the conversation or review is open and for a reasonable period for record-keeping; infrastructure logs are retained according to our providers' standard rotation periods. When information is no longer needed, it is deleted or anonymized.

We protect information using industry-standard measures: encrypted connections (HTTPS) for all traffic, access restricted to authorized personnel, database-level access controls, and security review of the Platform. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we take the safeguarding of the limited data we hold seriously and treat any breach as a serious incident to be contained and, where legally required, disclosed.

Depending on where you live, you have rights over your personal information under Canadian law (including the Personal Information Protection and Electronic Documents Act, PIPEDA) and, where applicable, other regimes such as the GDPR or state privacy laws:

• Access: ask what personal information we hold about you and receive a copy of it.
• Correction: ask us to correct information that is inaccurate or incomplete.
• Deletion: ask us to delete your personal information, subject to legal retention requirements.
• Withdrawal of consent: where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing already carried out.
• Complaints: raise a concern with us directly, or with the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

To exercise any of these rights, contact us through the Contact page with enough detail to identify you and your request. We respond to verified requests within 1–2 business days where possible, and in all cases within the timelines required by law. For listing content, business owners can also request correction or removal of a curated profile directly.

The Platform contains adult-oriented content and is strictly for persons 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it promptly. If you believe a minor has provided information to the Platform, contact us immediately.

We may update this Privacy Policy from time to time as the Platform evolves or as laws change. The current version is always published on this page with its "Last updated" date. If a change materially affects how we handle information, we will make that clear on the Platform. Continued use of the Platform after a change takes effect constitutes acceptance of the updated Policy.

Questions, requests, or concerns about privacy can be sent through the Contact page on the Platform. We aim to respond within 1–2 business days.