Before you buy

Rectonic is a schedule for shared recreation space. Staff enter what is on in each lane, court and room; the public reads it as a web page, as a widget embedded in the centre’s own website, or as a printout. It sits beside the registration system (ActiveNet, Xplor) and does not connect to it. It holds no registration, membership or payment records for patrons.

• Patrons and visitors: none. Reading the schedule needs no account and no sign-in. There are no advertising or tracking cookies and no tracking pixels.
• Your staff: an email address and a password. The password is stored only as a salted hash. A staff invitation holds the invited address until it is accepted or revoked.
• Your organization: the name, logo, address and contact details you choose to publish, and the schedule itself, which is public by design.
• Rentals and clubs: the public sees “Reserved” with the time and the lanes. The holder’s name and set-up notes are visible only to your staff; the database refuses them to anyone not signed in.
• Usage counts: when the widget loads or a program is clicked, Rectonic records the event, the facility or program, the referring page, the browser’s user-agent string and the time. The visitor’s IP address is not stored. It is hashed with a secret salt that changes daily, so events cannot be joined into a profile of one person and the address cannot be recovered.

No patron data exists to leave the database. The providers above handle your staff’s email addresses and your billing contact, nothing about the public.

Four roles. Owners hold billing and can delete the organization. Managers run the whole organization. Coordinators are limited to their own departments. Aux staff (lifeguards, the front desk) can read the schedule, record readings and post notices, nothing else.

The rule is enforced in the database with row-level security, not only in the screens, so it holds for a request that goes around the app. One organization cannot read another’s rows. A week nobody has approved stays hidden from the public.

Every schedule edit is logged with who made it and when, and a manager can revert it. The log is inside the product; nothing has to be requested from us.

• Encrypted in transit with HTTPS, and at rest by the database provider.
• Passwords are never seen by Rectonic; sign-in is handled by Supabase Auth, and changing a password requires the current one.
• Public endpoints are rate-limited. The embed sends a Content Security Policy built for your organization, so it can be framed only by the sites you list.
• We keep a written security register: every finding, its severity, its fix and how the fix was checked. Rectonic does not hold a SOC 2 or ISO 27001 report.
• Backups: [schedule, from the database provider’s plan].

• Account and organization data for as long as the account is open, then deleted within [30] days of a request. Usage events for [12 months]. Billing records for as long as tax law requires.
• An owner can delete the organization from its settings at any time. It asks for the organization’s name typed back, then removes everything that belongs to it.
• Your schedule is yours. It is on your own website and printable, usage reports download as CSV, and we will give you a machine-readable copy of everything on request.

If we find a breach affecting personal information, we notify you and the regulator as the law requires, with what happened and what was affected.

Technical Recreation Solutions Inc.
[privacy contact]

The full Privacy Policy and Terms of Service are published on this site.

Plans from $89 a month, in CAD, priced by facility: the buildings you publish a schedule for. Each plan includes a number of them; extra facilities are $45 a month each. Departments, schedules, spaces, sessions, staff accounts, embeds and visitor traffic are unlimited on every plan. See the plans.

Month to month, no contract, and a 14-day free trial to start. Cancel any time from your billing settings and you are not charged again. Paying yearly gives two months free. Enterprise can be invoiced annually against a purchase order.

Technical Recreation Solutions Inc., [jurisdiction]. The Terms of Service and Privacy Policy are the agreement; there is nothing else to sign.

It stays yours. An owner can delete the organization or ask for a copy at any time, as described above.

If your process needs one completed, send it to [email protected] and we will return it filled in.

A SOC 2 or ISO 27001 report. [certificate of insurance: confirm]. Say so early if your process requires either, so it is on the table before anything is signed.