Privacy Policy

Who this covers

This policy applies to homeowners and other project stakeholders, contractor and supplier team members, partners, and visitors who use our website, AI planner, and workspaces. Each contractor organization on the platform is a separate business; when you share your project with a matched professional, they become an independent controller of the information you choose to share with them, under their own privacy practices.

Information we collect

Information you give us

• Account details — your name, email address, and (for professionals) your business name and role.
• Project information — the descriptions, answers, dimensions, budgets, timelines, and photos you provide while planning a project or requesting a quote.
• Property and contact details — city or postal area, and any phone number or address you choose to add so a professional can reach you or scope the work.
• Communications — messages you send through the platform, consultation requests, reviews, and support enquiries.
• Consent choices — your marketing and channel preferences, and a record of when and how you gave or withdrew them.

Information collected automatically

• Usage and device data — pages viewed, actions taken, approximate region, browser and device type, and similar analytics, collected with cookies and similar technologies (see Cookies and analytics).

Information from others

• Payment information — when a paid feature is used, our payment processor (Stripe) handles your card details directly; we receive confirmation and limited billing metadata, not your full card number.
• Business records — for professionals, lawful public business information and the verification documents you submit (for example, licence or insurance evidence).

Our AI planner is designed not to require sensitive personal information, and we ask you not to include it in free-text or photos. We do not knowingly collect government identifiers, health information, or similar sensitive data through the planner.

How we use your information

• Provide the AI planner and produce your project brief, scope, and cost ranges.
• Match you with verified professionals when you ask us to, and carry your brief into that connection.
• Operate accounts, workspaces, messaging, scheduling, quotes, and (where enabled) payments.
• Send transactional messages you would expect — confirmations, replies, and account notices.
• Send marketing messages only where you have consented, and always with an unsubscribe option.
• Keep the marketplace safe and honest — prevent fraud and abuse, and handle disputes.
• Understand and improve the product using aggregated and de-identified analytics.
• Meet legal, tax, and regulatory obligations.

We use AI to help draft and structure content, but consequential decisions — identity, permissions, pricing, and safety-critical steps — are controlled by deterministic software and, where appropriate, people. We do not use your private conversation content to train third-party foundation models.

Consent and your choices

We collect, use, and disclose personal information with your consent, which may be express or implied depending on the sensitivity and context, as PIPEDA allows. You can withdraw consent at any time, subject to legal or contractual limits; withdrawing may mean we can no longer provide certain features.

We record consent separately for different purposes and channels — terms and privacy, marketing email, marketing SMS, phone calls, and sharing your brief with a matched professional. A project enquiry is not treated as ongoing marketing consent. Every marketing message identifies the sender and includes a way to unsubscribe, as CASL requires, and you can manage all of these from your notification settings when signed in.

When we share information

We do not sell your personal information. We share it only in these situations:

• With professionals you choose — when you ask to be matched or request a quote, we share the relevant project brief and contact details with the professional(s) you approve. You are told whether one or more will receive it.
• With service providers who work for us — under contract and only as needed to run the platform: cloud hosting and storage, our email provider, our SMS provider (Twilio, for messages you have consented to), our payment processor (Stripe), and analytics and search providers (such as Google and Meta — see Cookies and analytics).
• With AI service providers — the descriptions and photos you submit to the planner are processed by third-party AI providers, under contract, solely to generate your plan, scope, and ranges. We do not use this content to train models, and we select providers and settings intended to keep it from being used to train theirs. Each provider’s handling is also governed by its own terms.
• For legal and safety reasons — to comply with law, enforce our terms, or protect the rights, property, and safety of users and the public.
• In a business transfer — if we are involved in a merger, acquisition, or sale of assets, with continued protection of your information under this policy.

Cookies and analytics

We use cookies and similar technologies in three categories: essential (needed to sign in and keep the site working), analytics (to understand usage and improve the product, for example Google Analytics and Search Console), and marketing (to measure and improve campaigns, for example the Meta pixel). Non-essential cookies load based on your choices in our cookie banner, and you can change them at any time. We never send your exact address, phone number, or free-text conversation content to analytics or advertising platforms.

How long we keep it

We keep personal information only as long as needed for the purposes above or as required by law. Account and project records are retained while your account is active and for a reasonable period afterward for legal, tax, dispute, and audit purposes; consent and audit records are kept as long as needed to demonstrate compliance. When information is no longer needed, we delete or de-identify it. You can request deletion as described below.

How we protect it

We use technical and organizational safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls and tenant isolation so one business cannot see another’s data, signed upload links, malware scanning of uploads, secret management, audit logging of consequential actions, and monitoring. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to incidents.

Your rights

Subject to legal limits, you can:

• Access and export your data — when signed in, download a copy from your Security page.
• Correct inaccurate information from your account settings or by contacting us.
• Delete your data — request deletion or anonymization, which we action subject to any legal retention obligations.
• Withdraw consent and unsubscribe from marketing at any time, from your notification settings or the unsubscribe link in any message.

We will respond to verified requests within the timeframes required by applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

Where your data is processed

We aim to keep data within Canada where practical, but some of our service providers process or store information in other countries, including the United States. Where that happens, your information may be subject to the laws of those jurisdictions, and we use contractual and other safeguards to protect it. You can contact us for more information about a specific provider.

Children’s privacy

HomeCopilot is intended for adults arranging home services. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the platform and the law evolve. We will change the “last updated” date above and, for material changes, provide additional notice. Continued use after an update means you accept the revised policy.

Contact us

Questions, access/correction requests, or complaints: [email protected].

A mailing address for written privacy and CASL correspondence will be published with the final policy; in the meantime, email reaches us fastest.