Privacy Policy
Version 1.0 · PIPEDA-aligned
What we collect
- Contact data: the name, email, phone, and address you give when you post a project, so a contractor can reach you.
- Account data (contractors): email, password (stored only as a salted hash), and profile details.
- Project data: your renovation details, scope of work, and budget range.
- Contractor data: company information, optional business number, service area, and contact details.
- Transactional data: token wallet, ledger, and HST receipts for purchases.
How we use it
To operate the service: show your project to verified local contractors, let a contractor unlock your contact so they can reach you, send transactional emails, prevent fraud and abuse, and meet legal/tax obligations. We do not sell your personal information.
How your contact is shared
When you post a project, your contact details (name, email, phone, and address) are hidden from public view and from the contractor browse list. They are shared with a verified contractor only when that contractor unlocks your project — at which point they may contact you directly about the work. Only a limited number of contractors can unlock each project. Your full request — the project description and answers — is never shown on the contractor browse list; it is revealed only after a contractor unlocks your lead. Your street address is never shared with a contractor — only your city.
How long your project stays active
When you post, you choose how long your project stays active for contractors (for example 30, 60, or 180 days). When that period ends — or once the maximum number of contractors have unlocked it — your project automatically closes and is removed from the contractor board. BuildBridge is a lead-generation service: once a contractor has unlocked your project, the contact details already shared with that contractor cannot be recalled, and you should deal with that contractor directly.
Storage & security
Data is encrypted in transit (TLS) and at rest. Verification documents live in private storage behind short-lived signed URLs. Access is controlled by role-based permissions enforced on the server.
Service providers
We rely on a small set of trusted service providers (sub-processors) to run BuildBridge. They process data only on our instructions and only as needed to provide their service:
- Google Firebase — application hosting, database, file storage, and email-link verification.
- Photon / Komoot — turning the address you enter into map coordinates (geocoding).
- OpenStreetMap — the map tiles shown while you pick your address (loaded by your browser).
- Resend — delivery of transactional emails.
- Stripe — payment processing and receipts (contractor token purchases).
Some of these providers may store or process data on servers outside Canada. We do not sell your personal information or share it with advertisers.
Your rights (PIPEDA)
Posting a project does not create an account. If you want your project taken down before it closes, email jeelptl2409@gmail.com — quoting the reference number from your confirmation email if you have it — and an administrator will remove it from the platform. BuildBridge retains its own internal records — for operational, legal, accounting, fraud-prevention, and audit purposes — as permitted by law, and contractors retain the contact details that were already shared with them. Contractor account holders can additionally export or delete their account data from their profile. When you delete your account it is deactivated immediately and removed from the platform; we then retain your account information for up to 7 years to meet legal, tax, and dispute-resolution obligations, after which your personal identifiers are permanently erased. Financial and audit records are kept for the periods the law requires.
Cookies
We use a small number of essential cookies (such as your secure login session). You can manage non-essential cookies via the consent banner.