All things legal
Simple, human-readable policies for Rec+. Jump to a section or open a tile.
Terms of Service
The agreement that governs how you use Rec+.
Read terms →Privacy Policy
How we collect, use, and protect personal information.
Read privacy →Security
Our security practices and how we keep data safe.
View security →Accessibility
Our commitment to inclusive, assistive-tech-friendly design.
Accessibility →Terms of Service
Effective date: November 6th, 2025
By using Rec+, you agree to these Terms of Service (“Terms”). If you are entering into these Terms on behalf of an organization (e.g., a city, university, school, or private facility), you represent that you have authority to bind that organization (“Customer”).
Plain-English overview (not a substitute for the legal terms)
- Rec+ is a SaaS platform for cities, recreation departments, schools, and private facilities.
- You own your data; we process it to run the service. We don’t sell personal data.
- Some features rely on third-party providers (payments, SSO, messaging). Their terms apply too.
- If the service ends, you can export your data. Our liability is capped (see below).
1) Services & accounts
- Services. Cloud software for program registrations, memberships, facility rentals, payments, notifications, and related features, including mobile/PWA apps, APIs, and support (the “Services”).
- Accounts & roles. You control your tenant roles/permissions and are responsible for activities by your staff, contractors, or invited patrons/citizens.
- Eligibility. You will comply with applicable laws, procurement rules, and policies.
2) Customer Data & privacy
- Ownership. You own all data you submit to the Services (“Customer Data”).
- Use. We process Customer Data to provide, secure, support, and improve the Services and to comply with law.
- Privacy. Processing is described in our Privacy Policy, aligned with PIPA (BC), FIPPA (BC), PIPEDA (Canada), and comparable laws where your programs operate.
- De-identified data. We may use de-identified/aggregated data to improve the Services and generate analytics, without identifying a natural person or your organization.
3) Third-party services
Some features integrate with third parties (e.g., payment processors, identity/SSO, email/SMS, mapping). Use of those services is subject to their terms and privacy practices. We are not responsible for third-party acts or omissions.
4) Fees, billing & taxes
- Fees. Subscription/platform fees are as stated on your order/plan (monthly/annual and per-transaction where applicable).
- Payment terms. Invoices are due net-30 unless otherwise stated. Late amounts may accrue interest at 1.5% per month (or the maximum allowed by law).
- Taxes. Fees exclude taxes; you are responsible for applicable GST/HST/PST/VAT and similar taxes (excluding our income taxes).
5) Trials, pilots & Beta
Trials/pilots and pre-release features (“Beta”) are provided “as is,” may change or be withdrawn, and have no SLA or warranty.
6) Acceptable use
- No disruption, reverse engineering, or unauthorized scanning/probing.
- No unlawful, infringing, or harmful content; respect IP, privacy, and publicity rights.
- Follow API rate limits and technical documentation.
- For minors’ data, obtain legally required consents/waivers and provide required notices.
7) Security, availability & support
- Security. Administrative, technical, and physical safeguards (encryption in transit/at rest where applicable, RBAC, audit logs, backup/DR routines).
- Availability. We target high uptime, excluding planned maintenance, force majeure, and issues outside our reasonable control (e.g., ISP/cloud outages).
- Support. Standard support is included with paid plans; elevated tiers may be purchased.
8) Confidentiality
Each party may receive non-public information marked or reasonably understood as confidential (“Confidential Information”). The recipient will use it only to perform these Terms and protect it with at least reasonable care. Exclusions: public information, independently developed info, or info obtained lawfully without restriction. Lawful disclosures permitted with reasonable notice (if allowed).
9) Intellectual property
- Our IP. We retain all rights in the Services, software, documentation, and trademarks.
- Your IP. You retain rights in Customer Data and your content. You grant Rec+ a worldwide, non-exclusive license to host/process/display solely to provide the Services.
- Feedback. We may use suggestions without obligation.
10) Data processing & subprocessors
We act as a service provider/processor for Customer Data. A Data Processing Addendum (DPA) may apply if required by law or your organization. We use vetted subprocessors and remain responsible for their performance.
11) Suspension
We may suspend all or part of the Services to address a security risk, for non-payment after notice, or for material breach. We’ll limit suspension to what’s necessary and restore promptly once resolved.
12) Term & termination
- Term. Per your order; renews per that order unless either party gives notice of non-renewal.
- For cause. Either party may terminate for uncured material breach after thirty (30) days’ written notice.
- Effect. Access ends on termination. Upon request within thirty (30) days, we’ll make Customer Data export available in a reasonable format; then delete or de-identify except where retention is required by law, billing, or disputes.
13) Warranties & disclaimers
- We warrant we have the right to provide the Services and will provide them with reasonable skill and care.
- Disclaimer. Except as expressly stated, the Services are provided “as is.” We disclaim implied warranties (merchantability, fitness, non-infringement). Beta has no warranties.
14) Indemnities
- By Rec+ (IP). We’ll defend and indemnify you against third-party claims that the Services, as provided, infringe IP rights, and pay final damages, if you promptly notify and allow us to control the defense. We may modify the Services or terminate a feature with a pro-rata refund if needed.
- By Customer. You’ll defend and indemnify us for claims arising from (a) Customer Data or your content, (b) unlawful use or breach of these Terms, or (c) failure to obtain required consents/waivers (e.g., for minors).
15) Liability limits
- No consequential damages. Neither party is liable for indirect, incidental, special, punitive, or consequential damages, lost profits, or lost data.
- Cap. Except for payment obligations or your indemnity, each party’s total liability in any 12-month period is limited to the fees paid/payable for the Services giving rise to the claim in that period, capped at CAD $100,000 (or the statutory minimum if greater).
16) Compliance, export & anti-corruption
Each party will comply with applicable laws (privacy, anti-spam, anti-corruption, export controls/sanctions). You are responsible for program-specific requirements (bylaws, fee schedules, records retention, accessibility notices).
17) Force majeure
No liability for delays/failures due to causes beyond reasonable control (e.g., disasters, utilities, strikes, war, internet/cloud outages). Parties will mitigate and resume performance.
18) Changes to these Terms
We may update these Terms to reflect new features, security, or legal requirements. We’ll post changes here and update the effective date. Material reductions of rights during a current paid Term won’t apply until renewal unless required by law.
19) Governing law & venue
These Terms are governed by the laws of the Province of British Columbia and the federal laws of Canada applicable therein, without regard to conflict-of-laws rules. Disputes will be resolved in the courts of Vancouver, BC, or by arbitration if mutually agreed in writing.
20) Notices
- To Rec+: #300-1090 Homer Street, Vancouver, BC, Canada • or via Contact.
- To Customer: your admin email or address stated on your order. Notices are deemed received when sent (email) or delivered (courier/post).
21) Order of precedence & entire agreement
If there’s a conflict, an executed Order Form or Master Agreement (including a DPA) controls, then these Terms, then any online documentation. These Terms are the entire agreement about the Services and supersede prior statements about them.
Definitions
- Customer Data: data you submit to or collect through the Services, including personal information.
- Order: an executed order form, plan selection, or SOW describing your subscription, term, and fees.
- Subprocessor: third parties engaged by Rec+ to process Customer Data on our behalf.
Privacy Policy
Last updated: November 6th, 2025
At Cocoflo Innovations Inc. d/b/a Rec+ (“Rec+,” “we,” “us”), your privacy matters. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our websites and Services.
1) Who we are & scope
Rec+ provides software for parks & recreation, cities, schools, universities, and private facilities. This Policy applies to personal information processed through our websites, apps, and Services.
2) Definitions
- Personal Information (PI): information about an identifiable individual (excludes business contact info where permitted by law).
- Customer Data: PI and other data submitted by our Customers to the Services.
- Processing: any operation performed on PI (collection, use, disclosure, storage, etc.).
3) What we collect
- Account & profile: name, email, phone, role, organization.
- Transactional: registrations, bookings, memberships, attendance, payments (card data processed by PCI-compliant processors).
- Technical: logs, device/browser, IP, app telemetry, cookies or similar technologies (see Cookies).
- Support & communications: messages, survey responses, call/chat recordings where permitted.
4) How we use PI
- Provide, operate, authenticate, and secure the Services.
- Process transactions and send confirmations/receipts.
- Support, training, and service communications (including critical/operational notices).
- Improve features, quality, and performance; develop analytics and insights using de-identified/aggregated data.
- Comply with law and enforce terms; prevent fraud, abuse, and security incidents.
5) Legal bases & consent
We process PI with consent, to perform a contract (with your organization), to comply with legal obligations, or for our legitimate interests (e.g., security, service improvement) balanced against individual rights. For communications subject to CASL, you can opt-out at any time.
6) Disclosure of PI
- Service providers/subprocessors (hosting, payments, messaging, analytics) under contracts requiring confidentiality and appropriate safeguards.
- Customer-directed sharing with other systems you choose to integrate (e.g., SSO, finance, student systems).
- Legal when required by law, subpoena, or to protect rights, safety, or security.
- Business transfers as part of a merger, acquisition, or asset sale with appropriate protections.
7) International transfers
We may process PI in Canada, the United States, or other jurisdictions where we or our providers operate. Safeguards are applied consistent with applicable law; by using the Services, you acknowledge such transfers.
8) Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit/at rest where applicable, access controls, logging, backups, and vendor reviews. No system is perfectly secure; we cannot guarantee absolute security.
9) Retention
We retain PI for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. For Customer Data, retention follows your organization’s directions and applicable law.
10) Your choices & rights
- Access, correction, and deletion requests can be made via your organization or directly to us where applicable.
- Opt-out of non-essential marketing; operational/transactional emails may still be sent.
- Disable cookies in your browser (some features may be limited).
11) Cookies & similar technologies
We use cookies and similar technologies for authentication, session management, preferences, analytics, and product improvement. You can manage cookies via browser settings. We do not honor “Do Not Track” signals at this time.
12) Children & youth
Programs for minors are administered by our Customers. Customers are responsible for obtaining required parental/guardian consents and providing required notices under applicable laws.
13) Third-party sites
Our websites may link to third-party sites. Their privacy policies govern those sites; we are not responsible for their practices.
14) Changes to this Policy
We may update this Policy to reflect changes in practices, technology, or law. We will post the revised Policy with a new “Last updated” date. Material changes will be highlighted or communicated as appropriate.
15) Contact & privacy inquiries
Questions, requests, or complaints can be submitted via our contact page. We will respond within a reasonable time.
Canada — #300-1090 Homer Street, Vancouver, BC
USA — 509 9th Ave N, Myrtle Beach, SC 29577
Security
We maintain a security program aligned with industry best practices.
Infrastructure
AWS hosting, least-privilege IAM, segmented networks, encryption in transit and at rest, managed secrets.
Product
RBAC, SSO, audit logs, rate limiting, input validation, secure SDLC with code review and dependency monitoring.
Operations
Backups & disaster recovery, vendor risk management, incident response, and regular staff security training.
Accessibility
We aim to meet WCAG 2.1 AA where feasible and design Rec+ to be usable with assistive technologies (screen readers, keyboard navigation, high-contrast, scalable type). If you encounter a barrier, please contact us.
What we do
- Semantic structure & ARIA where helpful
- Keyboard navigable UI with visible focus
- Accessible color contrast & responsive type
Media & documents
- Alt text for essential imagery
- Captions for hosted videos where applicable
- Clear error messaging and form labels