Privacy Policy

Urba Inc. (“Urba,” “we,” “us,” or “our”) operates the urba.now platform, including our website, mobile applications, and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are headquartered in Calgary, Alberta, Canada. Our privacy practices comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and are designed to meet the standards of the European Union's General Data Protection Regulation (GDPR).

1. Information We Collect

Information you provide

• Account information: Name and email address (provided via Google or Apple sign-in). Phone number is optional and only collected if you choose to add it.
• Transaction data: Records of tickets purchased, reservations made, and events attended. Payment card details are never stored or processed by Urba. All payment processing is handled by Stripe.
• Content you create: Event listings, venue profiles, and any other content you submit through the Service.

Information collected automatically

• Location data: We use your approximate location (city-level) to show relevant events and venues near you. We do not track precise GPS coordinates in the background.
• Device information: Device type, operating system, and browser type for service optimization.
• Usage data: Pages visited, features used, and interaction patterns to improve the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process ticket purchases and record interest in the upcoming reservation system
• Send order confirmations and reservation launch updates you have requested
• Detect your city to show relevant local content
• Send push notifications you have opted into (event reminders, updates)
• Improve and personalize your experience
• Prevent fraud and enforce our Terms of Service
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Event organizers: When you purchase a ticket, the event organizer receives your name and email so they can manage attendance and communicate event details. Organizers only see data for their own events.
• Reservation launch waitlist: Urba stores your name, email, optional business and city, and consent to contact you about launch access. Joining does not create a table booking.
• Service providers: We use third-party services to operate the platform. These providers only access information necessary to perform their functions:
  • Stripe — Payment processing
  • Google Places API — Venue information and mapping
  • Amazon SES — Transactional email delivery
  • Firebase Cloud Messaging — Push notifications
  • Cloudflare — Content delivery and security
• Legal requirements: We may disclose information if required by law, regulation, or legal process.

4. Cookies and Local Storage

We use minimal cookies and browser storage:

• Session cookie: Required to keep you signed in. This is essential for the Service to function.
• City preference:Stored in your browser's localStorage to remember your selected city between visits.

Selected discovery feeds and public editorial guides may offer optional, non-personalized advertisements supplied by Google AdSense. We request these ads when the applicable regional privacy checks pass. Where prior consent is required, we wait for that consent; elsewhere, non-personalized ads may load automatically unless you turn them off. Event pages and purchase flows do not display these advertisements.

Non-personalized ads use the page context rather than your past browsing activity for targeting. Google may process your IP address, browser and device information, and use cookies or local storage for frequency capping, reporting, and fraud prevention. We request restricted data processing and disable ad personalization. We do not provide Google with your Urba account details, ticket purchase history, or precise location for advertising. Learn more about how Google uses information from sites that use its services.

We store your advertising choice. When regional privacy checks permit ads, we record the page and ad delivery status with our first-party browser identifier to assess the effect on browsing. These records are not sent to Google. You can turn ads off or on below. Declining does not restrict access to Urba. Withdrawing stops future requests; it does not delete information already processed by Google. Your consent provider may offer additional vendor controls.

5. Data Security

We implement industry-standard security measures to protect your information, including encrypted connections (TLS/SSL), secure authentication via OAuth providers, and regular security reviews. Payment data is handled entirely by Stripe, which is PCI DSS Level 1 certified. Urba never receives or stores your card details.

6. Your Rights

You have the right to:

• Access your data: Request a copy of all personal information we hold about you. You can export your data anytime from your account settings.
• Delete your account: Permanently delete your account and associated data from your account settings. Some information may be retained as required by law (e.g., transaction records for tax purposes).
• Correct your data: Update your account information at any time through your profile.
• Withdraw consent: Opt out of push notifications or marketing communications at any time.
• Data portability: Receive your data in a structured, machine-readable format.

To exercise any of these rights, visit your account settings or contact us at [email protected].

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Transaction records are retained for 7 years to comply with Canadian tax law. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law.

8. International Transfers

Your information is primarily stored and processed in Canada. Some of our service providers may process data in the United States. Where data is transferred outside Canada, we ensure appropriate safeguards are in place to protect your information in accordance with applicable privacy laws.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. For significant changes, we may also send you an email notification.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Urba Inc.
Calgary, Alberta, Canada
[email protected]

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.