Privacy Policy

Last updated October 6, 2026 · Version 2026-10-06.2

This policy explains what personal information [PeerToSite LEGAL NAME] ("PeerToSite", "we") collects through the PeerToSite platform, why, who can see it, where it is kept, for how long, and the rights you have over it. It applies to companies and their staff, contractors and their firms, and anyone who contacts us. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

1. Who is responsible
2. What we collect
3. Why we use it
4. Who can see it
5. Where it is kept
6. How long we keep it
7. How we protect it
8. Automated matching
9. Your rights
10. Cookies
11. Changes to this policy

1. Who is responsible

[PeerToSite LEGAL NAME] is responsible for personal information under its control. Our person in charge of the protection of personal information is the [PRIVACY OFFICER], who can be reached at [PRIVACY EMAIL].

When a company uses PeerToSite to manage its own staff and jobs, the company decides much of what it records about its jobs; we handle that information on its behalf and under this policy.

2. What we collect

Everyone with an account

• Account details: name, email address, phone number, and your password (stored only in a form that can't be turned back into the password).
• Microsoft sign-in, if you choose it: the identifier and email address Microsoft gives us for your account. We never receive your Microsoft password.
• Sign-in records: when you sign in or out, failed attempts, password resets, your IP address and the browser you used — to protect your account.
• Messages and support: what you write in job messages and support tickets.
• Notifications we send you in PeerToSite, and your notification preferences.

Companies and their staff

• The company's legal name, business details, address, tax number and the services it uses.
• For each person: their role at the company (for example Company Manager).
• Jobs you post or request: the work, site address, site contacts, sign-on and sign-off criteria, and your approvals.
• Your sites and equipment, if you add them: site addresses, access notes, the name and phone number of an on-site contact, and equipment details such as serial numbers. Spreadsheets you import are read and then discarded — only what you import is kept.
• Ratings the company gives contractors.

Contractors and their firms

• Profile: address, trade, job title, skills, firm and role at the firm (Owner, Office or Technician), and the areas and services the firm covers.
• Qualification documents you upload, such as insurance certificates, licences and background checks, and whether they've been verified.
• Tax information: your tax identification number (encrypted — see section 7) and tax documents.
• Payment details: the type of payment method and only the last four digits of the account.
• Work records: bids, check-in and check-out times, sign-off photos and signatures, notes, invoices and payment records.
• Ratings companies give you, and ratings your firm gives companies.

People who contact us

The name, company, business email and phone number you enter on our contact form, what you're interested in, and your message.

We collect only what we need for the purposes below. We don't buy personal information, and we don't use it for advertising.

3. Why we use it

• To create and run your account, and to keep it secure.
• To connect companies with qualified contractors: showing postings, collecting bids, offering dispatch jobs and assigning work.
• To check that contractors meet the qualifications a company asks for.
• To record what happened on each job — check-in, sign-off, approval — so either side can rely on it if there's a disagreement.
• To produce invoices and payment records, and to meet tax and accounting obligations.
• To answer support requests and messages.
• To detect and prevent fraud, abuse and security incidents.
• To meet our legal obligations.

We ask for your consent when you create your account. You can withdraw it at any time by closing your account (section 9), although we may need to keep some records for the periods in section 6.

4. Who can see it

• Companies see the profile, qualification status and ratings of contractors who bid on, are offered, or are assigned their jobs, and the work records for their own jobs. A technician is shown to companies by first name and last initial; companies never see a technician's phone number, email, tax ID or date of birth — they talk through PeerToSite's job chat.
• Job chat is checked for contact details. If a message looks like it contains a phone number or email address, PeerToSite records that it happened (not the message itself) so our staff can make sure work stays on PeerToSite.
• Contractors and firms see the details of jobs they're bidding on or offered, and the site address and site contact once the job is theirs. Technicians see only their own jobs.
• Reviews are public on PeerToSite. After a job, the company reviews the technician and the firm reviews the company. Both reviews are shown together once both are in, or 14 days after the work is approved: to the other side of the job, to companies considering that technician, and to firms considering that company. A review shows the company's or firm's name, never the name of the person who wrote it, and can't be changed once shown.
• Each company's information is kept separate from every other company's. One company can't see another company's jobs, staff or records.
• PeerToSite staff can see account information only as their role requires (for example, to answer a support ticket). Staff sign in with two-step verification, and every record a staff member opens is logged.
• A company's own systems, if it connects them. A company can connect its service desk to PeerToSite (an API key, a webhook, or a ready-made connection PeerToSite offers). PeerToSite then sends that system the status and times of the company's own jobs and the messages in a job's chat — never a technician's name, phone number or email. Once that information reaches the company's system, it is outside PeerToSite. The company — not PeerToSite — chooses that system and is responsible for where it stores the information (which may be outside Canada), how it is protected, how long it is kept and who can see it. PeerToSite does not control, and is not responsible for, a company's own systems or the providers that run them. Questions about information held there should go to that company.
• Service providers who host or run parts of PeerToSite for us, under contracts that require them to protect it: Microsoft Azure (hosting and file storage, in Canada), Microsoft (if you use Microsoft sign-in), and, when we turn them on, our email and text-message providers.
• When the law requires it, for example a valid court order, or to protect someone's safety.
• If PeerToSite's business is sold or merged, to the buyer, who must keep protecting it under this policy.

We don't sell personal information.

5. Where it is kept

PeerToSite's database and uploaded files are stored in Microsoft Azure's Canada Central region (Toronto). Support tickets are handled by PeerToSite staff and aren't sent to outside AI or help-desk services.

One exception: if you sign in with Microsoft, the sign-in happens on Microsoft's systems, which may be outside Canada. Our pages don't load anything from outside services — fonts and images are served by PeerToSite itself.

Information outside Canada may be accessible to that country's courts and authorities.

6. How long we keep it

We keep personal information only as long as needed for the purposes above or as the law requires, then delete it. A scheduled job removes records automatically at the end of these periods.

7. How we protect it

• All traffic to PeerToSite is encrypted (HTTPS).
• Contractors' tax ID numbers are encrypted inside our database, separately from the rest of the record.
• Passwords are stored only as one-way hashes.
• Each company's data is separated at the database level, not only in our code.
• Access is limited by role, and changes to important records are kept in an audit log that can't be edited.
• PeerToSite staff use two-step verification and their sessions can be ended at once.

If a breach creates a risk of serious harm, we will notify you and the privacy commissioners as the law requires.

8. Automated matching

For Dispatch, PeerToSite automatically decides which firms are offered a job, based on the trade, the area each firm covers, the firm's agreed rates and whether the firm has turned on Dispatch. No firm is turned away by this alone: PeerToSite staff handle any job no firm accepts. If you'd like to know why you were or weren't offered a job, or to have a person review it, contact our Privacy Officer.

9. Your rights

You can ask us to:

• see the personal information we hold about you, and how it has been used and shared;
• correct it if it's wrong or incomplete — much of it you can correct yourself in your account settings;
• receive a copy in a structured, commonly used format;
• delete it, or close your account, except what we must keep by law (section 6);
• withdraw your consent, understanding that we may then be unable to provide the service.

Write to [PRIVACY EMAIL]. We'll confirm your identity before acting, and reply within 30 days. There's no charge.

If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

10. Cookies

PeerToSite uses only the cookies it needs to keep you signed in and secure. We don't use advertising or tracking cookies or analytics.

11. Changes to this policy

When we change this policy in a way that matters, we update the version above and ask you to agree again the next time you sign in.

Questions? Write to our Privacy Officer at [PRIVACY EMAIL], or see the Terms of Service.