Privacy Policy
1. Who is responsible for your data
Hubble42 Inc., at 3355 Hurontario St, Unit 5, Mississauga, ON L5A 4E7, Canada, decides how and why your personal data is used on itsmyminute. In data protection language, we are the controller.
Questions, requests and complaints go to our privacy officer at privacy@itsmyminute.com. Hubble42 Inc. is in Canada and handles personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA), and under the data protection law of the place you live where that law applies to us.
2. What we collect
Account details
Your username, display name, email address, timezone, and an avatar and bio if you add one. Your password is never stored. We store a scrambled version of it that cannot be turned back into your password.
Content you publish
Whatever you upload or write for a minute: images, video, headlines, messages and the design settings around them. Published content is public. Anyone can see it, and so can search engines and anyone the viewer shares it with.
Payment records
Card details never reach us. Our payment provider takes the payment and holds the card data. What we keep is the record: how much, when, whether it succeeded, and a fingerprint the provider gives us that lets us tell that two payments came from the same card without us knowing the card number. For payouts we keep what each sale paid you, the date, and the identifier of your connected payout account. If you invite someone with your link, we keep which account invited which, and what each of their payments earned you.
Viewing counts
How many distinct viewers a minute reached, per day. This is a count, so a holder can see how many people saw their minute. We are not building a profile of what any individual watched.
Records kept for anti money laundering
Money moving between accounts is exactly the shape of activity that money laundering rules exist to catch. So we keep records of transactions, of how accounts connect to each other through payments, of sale reviews, and of any decision we make about an account for that reason. Where a case is opened, that record includes a snapshot of the account details as they were at the time.
Technical records
Basic server logs: IP address, the page or endpoint requested, the time, and the browser's user agent. Notification settings and, if you turn it on, the push subscription your browser gives us.
3. Why we collect it
| What | Why |
|---|---|
| Account details | To give you an account, sign you in, show you on air and on your profile, and email you about your minutes. We need this to provide the service you asked for. |
| Content | To put it on air, which is the whole point of the service. |
| Payment records | To take payments, pay you out, and keep our books straight. Some of it we are legally required to keep. |
| Viewing counts | To show holders how many people their minute reached and to build the leaderboards. |
| Anti money laundering records | Because the law requires it, and because we have a legitimate interest in not being used to move dirty money. |
| Technical records | Security, rate limiting, fraud prevention and working out what broke. |
We do not sell your data. We do not run advertising trackers. We do not build behavioural profiles for advertising.
4. How long we keep it
- Account details: while your account is open. When you close it, the account is marked closed and the profile stops being public. The row is not erased, because financial records point at it.
- Content: while you publish it. Unpublished and deleted drafts go quickly. Published content that has already aired stays in the record of what was on air.
- Payment and payout records: five years. See section 7.
- Anti money laundering records and cases: five years from the later of the case being filed, the case being closed and the account being closed.
- Viewing counts: kept as daily totals. They are counts, not individual histories.
- Notifications: around six months.
- Sessions: a session expires after 30 days, and expired ones are swept away within about a week.
- Server logs: a short operational window, then deleted.
Backups run behind all of this. A deleted record can survive in a backup for a while after it is gone from the live system, and it is deleted again when that backup rolls off.
6. Your rights
Depending on where you live, you have some or all of these rights. We will honour them wherever we reasonably can, regardless.
- Access. Ask for a copy of the personal data we hold about you.
- Correction. Ask us to fix anything that is wrong. Most of it you can edit yourself in your account.
- Access and portability. Your profile page › Edit profile › Download everything we hold gives you a file of your account, minutes, content, payments and preferences, any time.
- Deletion. Same place: Delete my account, confirmed with your password. You get seven days to change your mind (log in and choose "Keep my account"), then the erasure runs. Read section 7 before you do, because some of it we cannot delete.
- Objection and restriction. Ask us to stop using your data for a particular purpose, or to pause using it while a dispute is sorted out.
- Portability. Ask for the data you gave us in a machine readable file.
- Complain. Take a complaint to your local data protection authority. We would rather you came to us first, but that choice is yours.
Write to privacy@itsmyminute.com. We will answer within 30 days. We may need to check who you are before we hand over data about you, which is a protection for you, not an obstacle. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or, if you are in the European Economic Area or the United Kingdom, to your local data protection authority.
7. Records we cannot delete
Some records have to be kept for five years for legal and financial reasons. That covers transactions, payment and payout records, and anti money laundering cases and the reasoning behind them.
If we are holding your data for one of those reasons, or under a legal hold, a request to delete does not override it. A legal hold beats a deletion request.
What we do instead is erase the account: your profile, bio, photo, email, password, devices, preferences, notifications, watches, content and uploads are removed; your minutes return to the open pool and any challenge on them ends with nobody charged; the account row stays behind marked closed, carrying nothing personal, so that the records of payments you made and received and of minutes that changed hands still add up. When the retention period runs out, those records are deleted too, and we keep proof that each erasure ran.
Anti money laundering case records are deliberately kept separate from your account, so that closing an account does not quietly erase them. They are not deleted by an account deletion.
9. How we protect it
Traffic is encrypted in transit. Passwords are stored as salted scrypt hashes. Sessions are HttpOnly cookies and are revoked everywhere when you change your password. Access to production data is limited to the people who need it, and sensitive actions by staff are written to an audit log.
No system is perfect. If there is a breach that puts you at risk, we will tell you and the relevant authority as quickly as we can.
10. Children
The service is not for children. You have to be at least 18 to hold a minute or to pay for one. If we learn that an account belongs to a child, we will close it and delete what we are allowed to delete.
11. Changes to this policy
If we change something that matters, we will tell you by email and on the site before it takes effect. The date at the top of this page always shows when it was last changed.
12. How to reach us
Email privacy@itsmyminute.com, or write to Hubble42 Inc., 3355 Hurontario St, Unit 5, Mississauga, ON L5A 4E7, Canada.
See also the Terms, the rules and the Content Policy.