Privacy Policy

Who we are

RenovateIndex.ca is a Canadian renovation cost reference site. This policy explains how we handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect and why

Homeowners (visitors)

We do not collect personal information from homeowners browsing cost pages. Standard server logs (IP address, browser type, referring URL) are retained for up to 30 days for security and performance monitoring, then deleted.

Contractors (registered accounts)

When you create a contractor listing, we collect:

• Account: email address and password (managed by Supabase Auth)
• Business profile: business name, contact name, phone number, website URL, service description, cities served, and services offered
• Billing: payment method details processed by Stripe — we never store card numbers

This information is used solely to display your listing to homeowners, process your subscription, and send you transactional notifications (approval, billing receipts, account alerts).

Who we share data with

We use the following third-party processors:

• Supabase — database and authentication infrastructure. Data is stored in Canada (AWS ca-central-1, Montreal).
• Stripe — subscription billing and payment processing. Stripe is PCI-DSS Level 1 certified. Their privacy policy governs data they collect.
• Resend — transactional email delivery (approval and account notifications).
• Vercel — web hosting and edge delivery. Standard access logs are retained per Vercel’s data retention policy.

We do not sell personal information. We do not share it with advertisers or data brokers.

How long we keep it

• Active contractor accounts: retained while the account is open
• Cancelled or rejected submissions: retained for 12 months for audit purposes, then deleted
• Billing records: retained for 7 years per CRA requirements
• Server logs: deleted after 30 days

Your rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Withdraw consent, subject to legal or contractual restrictions

Contractors can delete their account from the dashboard. This removes your business profile, contact details, and listing data. Billing records are retained per the schedule above. To exercise any right or ask a question, email us at privacy@renovateindex.ca. We will respond within 30 days.

Cookies and tracking

We use only functional cookies — session tokens required for contractor login. We do not use advertising cookies, cross-site tracking, or fingerprinting. If we add analytics in future, this policy will be updated before any collection begins.

Changes to this policy

We may update this policy as the site grows. Material changes will be communicated to registered contractors by email at least 14 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.