Confidentiality Policy — Bike Oasis

Last updated: September 14, 2026

1. Purpose and scope

COMP‑X Canada (“COMP‑X,” “Bike Oasis,” “we,” “us” or “our”) is committed to protecting personal information.

This policy explains how we collect, use, disclose, retain and protect personal information when you use:

  • the Bike Oasis or Velovoute website;

  • the Bike Oasis mobile application;

  • reservation, access and payment services;

  • connected parking facilities and equipment accessible through Bike Oasis;

  • our support services and communications.

It applies to users, visitors, subscribers, representatives of institutional customers and other individuals who interact with our services.

2. Responsible organization

Bike Oasis is operated in Canada by:

COMP‑X Canada
Chelsea, QC, Canada
Email: info@velovoute.com
Telephone: 514‑713‑0848

COMP‑X Canada determines why Canadian users’ personal information is collected and used, subject to responsibilities that may belong to certain partners or parking operators.

3. Privacy Officer

Our Privacy Officer is:

Daniel Gelinas
COMP‑X Canada
Email: danielg@velovoute.com
Telephone: 514‑713‑0848

Questions, complaints, and requests concerning personal information may be directed to the Privacy Officer.

4. Role of Don Cicleto

COMP‑X Canada uses a technology platform developed and operated by Don Cicleto S.L. to provide certain Bike Oasis functions, including:

  • account creation and administration;

  • parking-location information;

  • reservations and subscriptions;

  • access to connected facilities and locks;

  • transaction management;

  • administrative dashboards;

  • technical support and platform maintenance.

Don Cicleto may process personal information on behalf of COMP‑X Canada in accordance with the agreed services and applicable contractual safeguards.

The respective responsibilities of COMP‑X Canada, Don Cicleto and local parking operators may vary according to the facility or service involved. These responsibilities will be explained where necessary.

5. Personal information we may collect

Depending on how you use Bike Oasis, we may collect:

Identity and contact information

  • first and last name;

  • email address;

  • telephone number;

  • preferred language;

  • account identifiers and settings;

  • organization, employer, educational institution or group affiliation, where relevant.

Bicycle information

When required or voluntarily provided:

  • bicycle or e-bike type;

  • make and model;

  • photograph;

  • serial number or other identifying information;

  • information submitted in connection with an incident or support request.

Reservations and service usage

  • selected parking facility;

  • reservation date, time and duration;

  • parking space or compartment used;

  • subscription type;

  • reservation history;

  • entry, opening and exit times;

  • cancellations, missed reservations and usage incidents;

  • applicable rates and amounts.

Payments and transactions

Payments are processed through Stripe or another payment provider identified during the transaction.

We may receive:

  • payment amount and currency;

  • payment date and status;

  • transaction identifier;

  • payment-method type;

  • limited information such as the last four digits of a card;

  • information about refunds, disputes and payment errors.

Full card details are normally transmitted directly to the payment provider and are not intended to be retained by COMP‑X Canada.

Location

With your permission, the application may access your device’s location to:

  • display nearby parking facilities;

  • help you navigate to a facility;

  • provide services relevant to your location;

  • support features requiring proximity to connected equipment.

Precise location is not enabled by default. You may deny or withdraw permission through your device settings. Some proximity functions may then be unavailable.

Bluetooth and equipment access

The application may use Bluetooth to communicate with a compatible nearby lock or device.

We may process:

  • equipment identifiers;

  • unlock commands;

  • access dates and times;

  • results of unlock attempts;

  • technical errors and diagnostic data.

Bluetooth permission may be disabled in your device settings, although it may be required to unlock certain equipment.

Technical information

We may automatically collect:

  • IP address;

  • device type;

  • operating system;

  • application version;

  • technical identifiers;

  • language and time zone;

  • activity logs;

  • crash reports, errors and diagnostic information;

  • connection dates, times and duration.

Communications

When you contact us, we may collect:

  • the contents of your request;

  • attachments you provide;

  • support communications;

  • information required to address a complaint, incident or privacy request.

6. How information is collected

Information may be collected:

  • directly from you;

  • through the website or application;

  • during a reservation, subscription or payment;

  • when you use a connected lock or facility;

  • from an institutional customer authorizing you to use a private facility;

  • from Don Cicleto, Stripe or another participating provider;

  • automatically through cookies, technical logs and comparable technologies.

7. Purposes of use

We use personal information to:

  • create, authenticate and administer accounts;

  • enable users to locate, reserve and use parking facilities;

  • verify eligibility for private facilities;

  • communicate with connected locks and equipment;

  • process payments, subscriptions and refunds;

  • deliver confirmations and operational notices;

  • provide customer support;

  • detect errors, misuse and security incidents;

  • maintain, secure and improve our services;

  • measure facility occupancy and usage;

  • prepare internal statistics and analyses;

  • comply with legal, tax and contractual obligations;

  • establish, exercise or defend legal rights.

We do not sell users’ personal information.

Statistics disclosed to municipalities, property owners, partners or operators should be aggregated or de-identified when identification is unnecessary.

8. Consent and user choices

We obtain consent where required by law. Separate consent will be requested where appropriate, particularly for:

  • location;

  • promotional communications;

  • analytics or advertising cookies;

  • secondary uses of sensitive information.

You may withdraw consent, subject to applicable legal and contractual restrictions. Withdrawal may prevent the use of certain features.

Consent required to operate the service should not be combined with consent for optional marketing or analytics.

9. Promotional communications

We may send promotional communications where you have consented or where otherwise permitted by law.

Promotional emails will include an unsubscribe mechanism. Withdrawing marketing consent will not prevent operational messages such as reservation confirmations, receipts and security notices.

10. Disclosure to service providers and others

We may disclose information, where necessary, to:

  • Don Cicleto as our platform provider;

  • Stripe and other payment providers;

  • hosting, storage and backup providers;

  • authentication, messaging and notification services;

  • technical-support, cybersecurity and maintenance providers;

  • parking-facility owners and operators;

  • municipalities, institutions, employers or property managers administering private facilities;

  • legal counsel, accountants, insurers and auditors;

  • public authorities where required by law.

A parking operator should receive only the information needed to administer its facility, resolve an incident or enforce applicable terms.

11. Processing outside Quebec

Certain providers, including Don Cicleto, Stripe or their subcontractors, may process or store information outside Quebec or Canada.

Information may consequently be subject to the laws of another jurisdiction and accessible to its authorities in accordance with those laws.

Before disclosing personal information outside Quebec, COMP‑X Canada must conduct the required privacy assessment and implement appropriate contractual and organizational safeguards.

12. Retention and disposal

We retain information only as long as necessary for the purposes for which we collected it and to satisfy legal, tax, accounting, contractual, and security requirements.

Retention periods may vary:

  • account information: while the account remains active and for the period required to close it;

  • reservations and access records: as required to provide support and resolve incidents;

  • transactions: for the period required by tax and accounting obligations;

  • communications: for the period necessary to address the request;

  • technical logs: for a limited period required to protect the security and reliability of the service.

After the applicable period, information is securely destroyed or anonymized in accordance with legal requirements and applicable procedures.

13. Security

COMP‑X Canada and its providers use administrative, technical and physical safeguards appropriate to the information being processed, including:

  • role-based access controls;

  • authentication of authorized users;

  • secure communications;

  • appropriate activity logging and monitoring;

  • backup and continuity procedures;

  • incident-prevention and response measures;

  • contractual requirements for service providers.

No technology can guarantee absolute security. Users must protect their credentials and promptly report suspected unauthorized account activity.

14. Privacy incidents

If a privacy incident occurs, we will take reasonable steps to reduce the risk of harm and prevent similar incidents.

Where an incident creates a risk of serious injury, we will notify affected individuals and the appropriate authorities as required by law. We also maintain a privacy-incident register.

15. Cookies and similar technologies

The website may use:

  • strictly necessary cookies;

  • preference cookies;

  • audience-measurement tools;

  • other technologies authorized by the user.

Cookies that are not essential to the operation of the website should remain disabled until the user makes a choice.

You may change your preferences through the cookie-management tool or browser settings.

16. Your rights

Subject to legal conditions and exceptions, you may request:

  • access to your personal information;

  • correction of inaccurate or incomplete information;

  • withdrawal of consent;

  • cessation of dissemination in certain circumstances;

  • de-indexing or re-indexing of a hyperlink where applicable;

  • delivery of certain computerized information in a structured, commonly used technological format;

  • deletion of your account and information that no longer needs to be retained;

  • information concerning categories of persons with access to your information and applicable retention periods;

  • review of a complaint regarding our practices.

We may reasonably verify your identity before responding.

17. Account deletion

You may request account closure and deletion of eligible information:

  • through the function provided in the application, where available; or

  • by emailing info@velovoute.com.

Certain information may be retained where necessary to comply with legal obligations, prevent fraud, resolve disputes or protect our rights.

18. Minors

Bike Oasis is not intended for children under 14. We do not knowingly collect their personal information without the consent required from a parent or legal guardian.

A minor’s ability to create an account, make a payment or enter into a reservation may also be restricted by the applicable terms of service.

Decision required: whether independent account creation will be limited to users aged 18 or older.

19. Automated decisions and profiling

We do not use personal information to make decisions producing significant effects concerning users based exclusively on automated processing, unless disclosed at the relevant time.

Occupancy and usage analyses are primarily intended to improve facilities, services and planning.

Optional profiling or personalization features must be brought to users’ attention and remain disabled by default where required by law.

20. External services

Our services may contain links to third-party websites, mapping tools or other services. Their privacy practices are governed by their own policies.

We encourage users to review those policies before providing personal information.

21. Changes to this policy

We may update this policy to reflect changes to our services, providers or legal obligations.

The latest revision date will appear at the beginning. We will provide appropriate notice of material changes through the application, website or email.

22. Questions and complaints

To exercise your rights or submit a complaint, contact:

Privacy Officer
COMP‑X Canada
Email: info@velovoute.com
Telephone: 514‑713‑0848


We will review and respond to requests within the time limits required by applicable law.