Privacy Policy
Last updated: November 14, 2026
This policy explains how Contract Link handles your personal information when you use the customer portal at portal.contractlink.ca. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Who is responsible
Contract Link is a property maintenance consulting and contractor brokering business in Southern Ontario. Daniel King is responsible for how we handle personal information. You can reach him at info@contractlink.ca.
What we collect
- Account details: your name, email address, phone number and password. Your password is stored in a scrambled form we can't read.
- Property details: the address of each property you add.
- Review details: what the project is, your concerns, and the contractor quotes you upload. Quotes can include your name and address and the contractor's details.
- Payment records: what you bought, the amount and when. Card payments are handled by Stripe. We never see or store your full card number.
- Consent records: when you agreed to these terms and this policy.
- Technical records: basic logs such as sign-in times and email delivery status, used to keep the portal working and secure.
Why we use it
- To create and run your account.
- To prepare your review and deliver your report.
- To take payment and keep the financial records the law requires.
- To send you emails about your account and orders, such as "We've received your order" and "Your report is ready".
- To keep the portal secure and prevent fraud.
We don't sell your information. We don't send you marketing from the portal unless you separately agree to it.
Who can see it
Only you and Contract Link can see your reviews, quotes and reports. Other customers can't. We don't share your quotes or reports with contractors unless you ask us to, for example as part of a Broker-Assisted Review.
We use these service providers to run the portal. They may only use your information to provide their service to us:
| Provider | What it does | Where your information is kept |
|---|---|---|
| Supabase | Accounts, database and file storage | Canada (Central region) |
| Stripe | Card payments | Stripe's servers, which may be outside Canada |
| Resend | Sending portal emails | Resend's servers, which may be outside Canada |
| Lovable / Cloudflare | Hosting the portal's web pages | Their servers, which may be outside Canada |
Your account, review details, quotes and reports are stored in Canada. When a provider processes information outside Canada, the laws of that country may let its authorities access it.
How long we keep it
We keep your account, quotes and reports while your account is open, so you can come back to them. Payment records are kept for as long as Canadian tax law requires (currently six years).
You can ask us to delete your account from Account settings or by emailing info@contractlink.ca. We'll delete your account, quotes and reports within 30 days, except records we must keep by law.
Your rights
- See your information: ask us for a copy of what we hold about you.
- Correct it: update most details yourself in Account settings, or ask us.
- Withdraw consent: you can close your account at any time. We may then be unable to provide reviews.
- Complain: contact us first. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.
We'll answer requests within 30 days.
Cookies
The portal only stores what it needs in your browser to keep you signed in. It doesn't use advertising trackers.
Visitor analytics
Lovable's built-in visitor analytics records which pages are visited, where visitors came from, their country, browser and device type, time on page, page speed, errors, and clicks on buttons and links. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify you. Detailed data is kept for 90 days and daily summaries for a year. Lovable's privacy policy explains how Lovable handles it.
Security
Your information is sent over encrypted connections, and each customer can only reach their own files. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we'll tell you and the Privacy Commissioner as PIPEDA requires.
Age
The portal is for adults 18 and older.
Changes to this policy
We'll post any changes here and update the date at the top. If a change is significant, we'll email you.