Privacy Policy
What we collect, why, who we share it with, and your rights over it.
01Who we are
Montra Interactive Inc., doing business as Tapes ("Tapes," "we," "us" or "our"), operates Tapes, the website and app where films, series and courses are sold as numbered copies (the "Service"). This Privacy Policy explains how we collect, use, disclose and protect your personal information when you use the Service or join our early-access list.
Terms used but not defined here have the meanings given in our Terms of Service.
02Information you provide
Some of this is needed to run the Service. If you don't provide it, we may not be able to offer you an account or certain features.
Early-access list: your email address, and whether you're joining as a fan or a creator.
Account information: your name, email address, username and password (stored hashed), and the country and province or state you live in, which sets the sales tax on your purchases.
Age: your date of birth, the first time you buy, to confirm you're 18 or older.
Profile: your display name, handle, photo and bio, and whether your profile is public.
Purchases and sales: the copies you own, buy, sell, list, offer on and gift, the prices, and your balance activity (top-ups and withdrawals, shown to you from our payments partner).
Creator content: the videos, trailers, scenes, titles, descriptions, covers, prices, edition sizes and other details you publish, and your payout status.
Messages and reports: what you send us: support requests, reports about a tape, and copyright notices.
03Identity checks by our payments partner
Balances, payments and withdrawals are handled by Crossmint, a licensed payments provider. As the law requires, Crossmint verifies your identity before your first top-up and again for larger amounts or withdrawals. It collects details such as your name, date of birth, address, nationality, phone number and, in some countries, an ID number; above certain amounts, also a photo of your ID and a selfie.
Crossmint collects and holds this information under its own privacy policy. We receive only the result: whether you're verified, and whether those details already belong to another Tapes account (one account per person). We never receive your ID or your full card number.
04Your wallet and the blockchain
Your copies and balance sit in a wallet that only you control. Each copy is recorded as a token on the Base blockchain, which is public: anyone can see which wallet address holds which copy, and the record of past transfers. We never put your name, email or other contact details on the blockchain, but a wallet address can sometimes be linked to a person by others. Blockchain records can't be changed or deleted, by us or anyone.
05Information collected automatically
Device information: browser and device type, operating system, and IP address.
Usage data: what you watch and where you left off (so Continue watching works), the pages and features you use, and when.
Security signals: signals from bot-protection checks on sign-up, buying, selling, offers and gifts, so automated accounts can't trade.
Cookies: essential cookies only, to keep you signed in and remember your settings. We don't use advertising cookies, tracking pixels or advertising SDKs.
06How we use your information
To provide the Service, which is necessary for it to work:
Your library and streaming: showing you what you own and letting you watch it.
Buying and selling: processing purchases, listings, offers and gifts, paying creators and sellers, and keeping receipts.
Taxes: charging the right GST/HST and keeping the sales records the Canada Revenue Agency requires.
One account per person: making sure each person has one account and holds at most one copy of each tape.
Safety and security: detecting and preventing fraud, abuse, bots and security incidents.
Service emails: receipts, security notices, password resets, and updates about your account.
Legal compliance: meeting our legal obligations and responding to lawful requests.
To improve the Service: understanding how it's used, with aggregated or de-identified data.
To tell you about Tapes: early-access and marketing emails, only if you've asked for them or the law otherwise allows it. Every one has an unsubscribe link.
07Service providers
We use these providers to run the Service. Where the law requires, we have contracts in place that limit them to handling your information on our behalf and as this policy describes.
Crossmint: wallets, payments, top-ups, withdrawals and identity checks.
Vercel: hosting the website and app, and bot protection.
Supabase: accounts and our database (once accounts go live).
Base: the public blockchain that records copies (see Your wallet and the blockchain).
An email provider: sending account and early-access emails.
08Sharing and disclosure
We do not sell your personal information, and we don't share it for cross-context behavioural advertising.
Creators: a creator sees the usernames of the public owners of their tapes, never their emails or other contact details. You can make your profile private to stay off those lists.
Service providers: as described above, only to run the Service.
Legal requirements: when required by law, regulation, legal process or a government request.
Safety: when we believe it's necessary to protect the rights, safety or property of Tapes, our members or the public.
Business transfers: if Tapes is part of a merger, acquisition or sale of assets, with notice as the law requires.
De-identified data: aggregated data that can't reasonably identify you, for analytics and research.
With your consent: when you've asked us to share something for a specific purpose.
09Data retention
We keep personal information for as long as we need it for the purposes above. If you delete your account, we delete or anonymise your personal information within 30 days, except what the law requires us to keep: sales and tax records are kept for at least six years, as the Canada Revenue Agency requires. Records on the blockchain can't be deleted.
If we close an account for fraud, abuse or safety reasons, we keep only what's needed for those purposes, for as long as needed.
10Data security
We use commercially reasonable technical, physical and organisational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we can't guarantee absolute security.
If a security breach affects your personal information, we'll notify you and the relevant authorities as the law requires.
11Your rights and choices
Depending on where you live, you may have these rights:
Access: request a copy of the personal information we hold about you.
Correction: ask us to correct information that's inaccurate or incomplete.
Deletion: ask us to delete your information, subject to legal exceptions.
Portability: receive your data in a structured, machine-readable format.
Withdraw consent: where we rely on consent, withdraw it at any time.
Marketing emails: unsubscribe using the link in any of them.
Complaints: complain to a data protection authority, such as the Office of the Privacy Commissioner of Canada.
In Settings → Privacy & data you can download your data, delete your account, or make your profile private. For anything else, email support@montra.com. We'll respond within the time the law requires, and may need to verify your identity first.
12Children
You must be 13 or older to make an account, and 18 or older to buy, sell or hold a balance. We don't knowingly collect personal information from children under 13. If we learn that we have, we'll delete it and close the account.
If you're a parent or guardian and think your child has given us personal information, contact support@montra.com.
13International transfers
Tapes is based in Toronto, Ontario, Canada. Your information may be processed in Canada, the United States, or other countries where our service providers operate, whose data protection laws may differ from yours. While it's there, it may be subject to the laws of those countries, including lawful requests from their authorities. Where we transfer it, we make sure appropriate safeguards are in place as the law requires.
14Users in the EEA, UK and Switzerland
Tapes is available in Canada and the United States, but anyone can join the early-access list. If you're in the European Economic Area, the United Kingdom or Switzerland, the GDPR gives you these additional protections.
Controller: Montra Interactive Inc., 200 Bay Street, North Tower, Suite 1200, Toronto, ON M5J 2J2, Canada (support@montra.com).
Lawful bases: performance of a contract (your account, purchases, sales and the Service itself); legitimate interests (security, fraud and bot prevention, and aggregated analytics); legal obligation (tax and accounting records, lawful requests); and consent (marketing emails, which you can withdraw at any time).
Your rights: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, not being subject to solely automated decisions with significant effects (Tapes makes none), withdrawing consent, and lodging a complaint with your supervisory authority (in the UK, the ICO).
Response time: one month, extendable by two more for complex requests, with notice within the first month.
Transfers: we rely on the European Commission's adequacy decision for Canada and, where needed, Standard Contractual Clauses.
15California residents
We do not sell or share your personal information as the California Consumer Privacy Act (as amended by the CPRA) defines those terms, and we don't use sensitive personal information beyond what's needed to provide the Service.
You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. To use them, email support@montra.com; we'll verify your identity first.
16Changes to this policy
We may update this policy from time to time. We'll tell you about material changes before they take effect, by email or in the Service, and the date at the top shows when it was last revised.
17Contact us
Questions, concerns or requests about this policy or your information: Montra Interactive Inc., 200 Bay Street, North Tower, Suite 1200, Toronto, ON M5J 2J2, Canada. Email support@montra.com.
We aim to respond to privacy requests within 30 days, or within one month for GDPR requests.