Privacy Policy

Legal & Compliance

Privacy Policy

Effective April 15, 2026 Last Updated April 15, 2026 Version 2.0 Ontario, Canada PIPEDA Compliant
01

About This Policy

Pipe Dreams Delivered (PDD, we, our, or us) is an Ontario-based marketplace platform that connects homeowners with independent licensed plumbing contractors. This Privacy Policy describes exactly what personal information we collect, why we collect it, how we use and share it, and your rights under the Personal Information Protection and Electronic Documents Act (PIPEDA).

This Policy applies to our mobile application (iOS and Android), our website at pipedreamsdelivered.com, and all related platform services.

02

Who We Are — Platform Only

PDD is a technology marketplace. We do not employ contractors or perform plumbing services. Contractors are independent businesses. This distinction matters for your privacy: your job data is shared with the contractor you select, not with PDD as a service provider.

03

What We Collect and Why

3.1 Account Registration

When you create an account, we collect the following based on your role:

All Roles (Homeowner, Contractor, Student, Admin)
  • Full name
  • Email address (stored in lowercase for matching)
  • Password (authenticated and managed through Firebase Authentication — we never see or store your raw password)
  • Role selection
  • Consent timestamp (consentGivenAt), consent version, and consent scope — recorded at signup and stored with your profile
Contractors Additionally Provide
  • Business name
  • Ontario licence number
  • Insurance provider name
  • Insurance policy number
  • Insurance expiry date
  • Job category selections
Students Additionally Provide
  • Trade category and apprentice level
  • Target and verified hour tracking data
3.2 Job and Dispatch Data

When a homeowner submits a service request, we collect:

  • Issue description and job category
  • Service address
  • Phone number
  • Pricing, payment amounts, and job timestamps
  • Job status history (e.g., pending, claimed, in_progress, completed)
  • Scope change requests, dispute notes, and completion details
  • Completion photos (for completed jobs and verified work certificates)
3.3 Live Contractor Location — Important Disclosure
⚠ Critical Correction From Prior Policy

Our app does collect and share precise GPS location. The previous version of this policy incorrectly stated we do not track precise GPS location. That statement has been revised. Here is what we actually do:

When a contractor has an active job in ‘claimed’ or ‘in_progress’ status, the app collects the contractor’s real-time GPS coordinates (latitude and longitude) using the device’s location services. These coordinates are updated approximately every 15 seconds and are written to the job record in our database.

The homeowner assigned to that job can see the contractor’s live location on a map in the ‘Track My Pro’ screen, so they know the contractor is on the way. Location sharing stops automatically as soon as the job is no longer in an active status.

The contractor is notified in-app before location tracking begins, and a device-level location permission prompt is shown. Location data is not retained independently after a job closes — it is overwritten with each update and the final value remains only in the completed job record.

Purpose: Arrival transparency and ETA visibility for homeowners during active jobs.

Legal basis: Consent (captured at the start of location tracking, in addition to signup consent scope).

3.4 In-App Chat and Messages

Chat messages between homeowners and contractors for a given job are stored in our database under the job record. Messages are used to facilitate communication, support dispute resolution, and maintain an audit trail. We do not use message content for advertising.

3.5 Push Notifications

We use Expo Notifications to send push notifications to your device. Notification types include:

  • Job status updates (e.g., claimed, arrival verified, completed)
  • New chat messages
  • Contractor approval decisions
  • Payment and escrow events
  • Warranty prompts after job completion

Push notification tokens are registered with Firebase and stored in your user profile. You can disable notifications at the device level at any time.

3.6 Apprenticeship and Student Records

For Student accounts, we collect and store:

  • Verified apprentice hour logs (submitted by approved contractors)
  • Trade category, apprentice level, and Red Seal progress
  • Contractor name and licence number on each hour log
  • Work descriptions for each verified session

These records support OCOT-style progress reporting and grant eligibility tracking. Student public profiles (stored in the users_public collection) include name, role, email, and verified hours for contractor search functionality.

3.7 Home Passport, Home Score, and Property Data

If you use Home Passport, Home Score, or certificate features, we store property address history, job history linked to an address, and inspection records. This data is associated with your account and the property address.

3.8 Payment Data

Payments are processed through Stripe, including escrow-style payment holds and Stripe Connect for contractor payouts. We do not store raw credit card numbers on our servers. Stripe handles all payment card data under their own PCI-DSS compliance program. We store payment intent IDs, escrow status, payout amounts, and transaction records for legal and tax purposes.

3.9 Public Profile Data

Certain contractor and student profile fields are stored in a users_public collection to enable platform features like the contractor directory and apprentice hour logging. Public contractor data includes: name, business name, role, job categories, account status, rating, and completed job count. Sensitive fields (licence number, insurance details, email) are not in public profiles.

3.10 Usage and Device Data

We collect app usage events through our analytics utility (trackEvent). This includes actions such as login, signup, and job submission — used to improve the platform. Firebase may also collect device type, OS version, and app version.

04

Third-Party Service Processors

We rely on the following third-party processors. Where required by PIPEDA, we have data processing agreements in place:

Firebase / Google Cloud
USA & Global
Used for authentication, database (Firestore), cloud functions, file storage, and push notification delivery. Data may be processed on servers outside Canada. Google Cloud is certified under multiple international security frameworks.
Stripe & Stripe Connect
USA
Used for payment processing, escrow holds, homeowner checkout, and contractor payouts. Stripe stores and processes all payment card data. Stripe Connect is used for contractor bank account onboarding.
SendGrid
USA
Used for transactional email delivery (e.g., approval notifications, support responses).
Airtable
USA
Used for internal contractor and admin operational workflows. Limited profile data may be referenced in Airtable for manual review and onboarding processes.
Expo
USA
Used for over-the-air app updates and push notification token management on mobile devices.

All third-party processors are contractually bound to protect your data and use it only for the purposes we specify.

05

Consent

We capture your consent at account creation. Your user profile records:

consentGivenAt
The timestamp when you agreed.
consentVersion
The policy version in effect at signup (currently 2026-02-04).
consentScope
A list of the specific processing activities you consented to, based on your role (e.g., dispatch_matching for Homeowners, credential_verification and payout_operations for Contractors, apprenticeship_progress_tracking for Students).

For live location tracking, an additional in-app disclosure is shown before tracking begins, and the device-level permission prompt is required. You may withdraw location permission at any time in your device settings.

You may withdraw consent for other processing activities by submitting a deletion request (see Section 8). Note that some processing is necessary to deliver the service and cannot be withdrawn without closing your account.

06

How We Share Your Information

6.1 Between Platform Users

When a contractor claims a homeowner’s job, the homeowner’s name, phone number, address, and issue description are shared with that contractor. The contractor’s name, phone number, and live GPS location (during active jobs) are shared with the homeowner.

6.2 With Third-Party Processors

As described in Section 4, we share data with Firebase, Stripe, SendGrid, Airtable, and Expo to operate the platform.

6.3 Affiliate Links

The platform includes affiliate and supplier links (Wolseley Canada, Noble Trade, Home Depot Pro, Amazon Associates, and others). When you click these links, you leave our platform. We do not share your personal information with affiliate partners. We may earn a commission on qualifying purchases at no cost to you.

6.4 Legal Disclosure

We may disclose information to law enforcement, regulators, or courts where required by law, to protect the safety of users, or to enforce our Terms of Service.

6.5 Business Transfer

If PDD is acquired or merges with another entity, your data may be transferred. The acquiring party will be required to honor this Policy.

07

Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy or as required by law:

Data TypeRetention Period
Active accountsRetained while your account is active
Job records7 years from job completion (payment, tax, legal dispute purposes)
Chat messagesDuration of the associated job’s legal retention period
Apprenticeship hour logs7 years to support OCOT and grant documentation
Payment & Stripe transaction recordsAs required by Canadian tax law (minimum 6 years)
Contractor credential records3 years post-deactivation for regulatory and fraud purposes
Anonymized deletion recordsA deletion_requests record is created upon account deletion. Anonymized transactional records may be retained beyond deletion for legal, tax, fraud, and dispute reasons.

When retention periods expire, we permanently delete or irreversibly anonymize the data.

08

Account Deletion

You can request deletion of your account through the in-app ‘Delete My Data’ option in the drawer menu, or by emailing info@pipedreamsdelivered.com. You may also submit a request at pipedreamsdelivered.com/account-deletion/.

When you delete your account, the following happens:

  • Your personal identifiers (name, email, phone) are anonymized in the system
  • A deletion_requests record is created to confirm the deletion was processed
  • You are signed out immediately
  • Some records may be retained in anonymized or minimal form where required for payments, taxes, fraud prevention, legal obligations, or active disputes

We will confirm deletion within 30 days of a verified request.

09

Your Privacy Rights Under PIPEDA

As a Canadian resident, you have the following rights:

Access
Request a copy of the personal information we hold about you.
Correction
Request that we correct inaccurate information.
Deletion
Request deletion of your account and data (subject to legal retention requirements).
Withdrawal of Consent
Withdraw consent for processing where consent is the legal basis.
Complaint
File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise any of these rights, contact us at info@pipedreamsdelivered.com. We will respond within 30 days and may require identity verification.

10

Security

We implement the following safeguards:

  • Firebase Authentication manages all passwords — we never see raw passwords
  • Firestore security rules restrict data access by role and user ID
  • Firebase App Check is enabled to prevent unauthorized API access
  • All connections use HTTPS/TLS
  • Stripe handles all payment card data under PCI-DSS standards

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at info@pipedreamsdelivered.com.

11

Children’s Privacy

The platform is intended for users 18 and older. We do not knowingly collect personal information from minors. If we learn we have collected data from a person under 18, we will delete it promptly.

12

Educational Content and Affiliate Disclosure

The platform includes DIY guides, videos, trade education resources, and supplier links. This content is informational only. Affiliate links may generate commissions for PDD at no extra cost to you. See Section 6.3 for details.

13

Changes to This Policy

We will update this Policy when our data practices change. We will notify registered users of material changes via in-app notice or email. Continued use of the platform after a policy update constitutes acceptance. The effective date at the top of this document reflects the most recent revision.

14

Contact Us

For privacy questions, access requests, corrections, or complaints:

Mail Pipe Dreams Delivered, Ontario, Canada
Privacy Commissioner of Canada priv.gc.ca