Privacy Policy

1. Introduction & Scope

GetHandy Inc. ("GetHandy", "we", "us", "our") operates a home services marketplace platform that connects customers with independent service providers ("Providers") in Canada.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile applications, websites, and related services (collectively, the "Platform"). It is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

By creating an account or using GetHandy, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect the following categories of information to provide and improve the Platform:

• Personal information: full name, email address, phone number, and address collected during onboarding.
• Payment information: processed through Stripe Connect. GetHandy does not store your credit card numbers or bank details.
• Location data: GPS coordinates, reverse-geocoded addresses via Google Maps, and H3 geospatial cells for efficient task matching. Your exact address is only shared with a Provider after you accept their quote.
• Usage data: app interactions, device type and OS, push notification tokens, IP addresses, and crash reports.
• Communications: in-app messages between customers and Providers, system notifications, and support correspondence.
• Photos: task photos uploaded by customers and portfolio images uploaded by Providers, stored in Supabase Storage.

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing the service: creating accounts, matching customers with Providers, facilitating communication and task coordination.
• Processing payments: facilitating payments through Stripe Connect, calculating service fees, processing refunds and dispute resolutions.
• Sending notifications: delivering push notifications about task updates, quotes, bookings, and messages; sending transactional emails.
• Improving the platform: analyzing usage patterns, debugging errors, conducting internal research, and developing new features.
• Safety and fraud prevention: detecting fraudulent activity, verifying accounts, enforcing our Terms of Service, and protecting users.
• Legal compliance: complying with applicable laws, responding to lawful government requests, and maintaining required tax and financial records.

4. How We Share Your Information

We share your information in the following circumstances:

• With other users: task details and approximate location are visible to Providers in the marketplace. Your full address is shared with a booked Provider only as needed to perform the service.
• With Stripe: transaction details and identity information for payment processing, refunds, and financial compliance.
• With infrastructure providers: Supabase (database, auth, storage), Google Maps API (geocoding), Expo Push Notifications (push delivery), and Google Sign-In (OAuth authentication).
• For legal requirements: when required by law, court order, or government request, or to protect the rights, property, or safety of GetHandy, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to affected users.

4.5. Google Calendar Integration

If you connect your Google Calendar, GetHandy accesses your calendar data to check provider availability and create booking events when tasks are confirmed.

• We read calendar events to detect scheduling conflicts and display availability.
• We create calendar events when a booking is confirmed between a customer and provider.
• Calendar data is never shared with other users, sold, or used for advertising.
• You can disconnect your Google Calendar at any time from your profile settings, which revokes our access immediately.
• Google Calendar data use complies with the Google API Services User Data Policy.

5. Data Storage & Security

Your data is stored in Supabase-managed infrastructure hosted on Amazon Web Services (AWS) in US-based data centres.

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS) and at rest (AES-256).
• Strict access controls with multi-factor authentication for administrative access.
• Row-Level Security (RLS) in our database so users only access data they are authorised to see.
• Passwords hashed using industry-standard algorithms and never stored in plaintext.
• In the event of a data breach posing a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner of Canada as required by PIPEDA.

6. Data Retention

We retain your personal information as follows:

• Active accounts: data retained while your account is active and needed to provide services.
• Account deletion: upon verified request, personal information is deleted or anonymised within 30 days.
• Tax and financial records: transaction records may be retained for up to 7 years as required by the Canada Revenue Agency.
• Legal claims: information relevant to ongoing or anticipated legal proceedings may be retained until resolved.
• Communications: in-app messages retained for 2 years after account closure, then deleted.

7. Your Rights Under PIPEDA

As a user in Canada, you have the following rights under PIPEDA:

• Right of access: request access to the personal information we hold about you. We will respond within 30 days.
• Right of correction: request correction of inaccurate, incomplete, or out-of-date information. You can update most information directly in the app.
• Right to withdraw consent: withdraw consent for collection, use, or disclosure of your information at any time, subject to legal or contractual restrictions. This may affect our ability to provide certain services.
• Right to complain: contact us at privacy@gethandy.ca, file a complaint with the Office of the Privacy Commissioner of Canada, or contact your provincial privacy commissioner.

8. Children's Privacy

GetHandy is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a person under 18, we will delete it promptly.

9. International Data Transfers

GetHandy is a Canadian company. Our infrastructure provider hosts data in AWS data centres in the United States. Your personal information may therefore be stored and processed outside of Canada.

We maintain data processing agreements with our service providers requiring them to protect personal information to a standard comparable to Canadian privacy law. Personal information stored in the United States may be subject to access by US law enforcement under applicable US laws.

10. Cookies & Tracking

The GetHandy mobile application does not use cookies. When you access GetHandy through a web browser, we may use essential cookies for authentication and session management, plus analytics cookies for usage patterns and performance. You can opt out of analytics cookies through your browser settings.

We respect browser Do Not Track (DNT) signals and disable non-essential tracking when detected.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days in advance through in-app notification or email. Your continued use of the Platform after the effective date constitutes acceptance.

If you disagree with the updated policy, you may close your account before the changes take effect. Previous versions are available upon request.

12. Contact

For privacy questions, concerns, or requests: GetHandy Inc., Saskatchewan, Canada. Email: privacy@gethandy.ca.

We will acknowledge receipt within 5 business days and provide a substantive response within 30 days.