PRIVACY POLICY

Last updated: May 31, 2026

1. INTRODUCTION

Subtenders Technologies Inc. ("Subtenders", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform at subtenders.com and any related services. We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (PIPA).

2. INFORMATION WE COLLECT

Information you provide:

  • Account information: name, email address, password, phone number.
  • Profile information: company name, trade categories, city, region, bio, years in business, website, social links.
  • Job postings: project details, budgets, timelines, addresses, required credentials.
  • Bids: pricing, timelines, notes, attachments.
  • Messages: content of messages exchanged between users on the platform.
  • Reviews: ratings and written feedback about other users.
  • Badge verification documents: insurance certificates, business licenses, WCB documentation.
  • Portfolio projects: descriptions, photos, project values.
  • Payment information: processed securely by Stripe; we do not store credit card numbers.

Information collected automatically:

  • Device information: browser type, operating system, device identifiers.
  • Usage data: pages visited, features used, time spent on the platform.
  • IP address and approximate location derived from IP.
  • Cookies and similar technologies (see Section 7).

3. HOW WE USE YOUR INFORMATION

We use your personal information to:

  • Create and manage your account.
  • Display your profile in our public directory and on SEO landing pages.
  • Facilitate job postings, bids, and communication between users.
  • Process badge verification requests.
  • Process payments and manage subscriptions.
  • Send transactional emails (bid notifications, messages, account updates).
  • Improve the platform, fix bugs, and develop new features.
  • Enforce our Terms of Service and prevent fraud.
  • Comply with legal obligations.

4. HOW WE SHARE YOUR INFORMATION

We share your information only in the following circumstances:

  • Public profile: Your company name, trade categories, city, reviews, badges, and portfolio are visible to other users and on public SEO pages. Phone, email, and website are visible on your directory listing.
  • Other users: When you submit a bid or send a message, the recipient can see your profile information.
  • Service providers: We use third-party services to operate the platform, including Supabase (database and authentication), Stripe (payments), and Vercel (hosting). These providers access your data only to perform services on our behalf.
  • Legal requirements: We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of Subtenders, our users, or the public.

We do not sell your personal information to third parties.

5. DATA RETENTION

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or fraud prevention purposes.

Badge verification documents are retained for the duration of the badge validity and deleted within 90 days of badge expiry or account deletion.

6. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), secure database hosting, and access controls. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. EMAIL COMMUNICATIONS

We send two types of emails:

Transactional emails are sent automatically based on your account activity (e.g., bid received, message notification, badge approved). These are necessary for the platform to function and do not require separate marketing consent under CASL.

Marketing emails (newsletters, promotions, tips) are only sent with your express consent. You can opt in during signup or from your account settings, and opt out at any time using the unsubscribe link in any marketing email. We process unsubscribe requests within 10 business days as required by CASL.

We comply with Canada's Anti-Spam Legislation (CASL) and the US CAN-SPAM Act. All commercial emails identify Subtenders Technologies Inc. as the sender and include a functioning unsubscribe mechanism.

8. COOKIES

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how users interact with the platform. You can control cookie settings through your browser. Disabling essential cookies may prevent the platform from functioning properly.

9. YOUR RIGHTS

Under Canadian privacy law, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information (subject to legal retention requirements).
  • Withdraw consent for non-essential data processing.
  • File a complaint with the Office of the Privacy Commissioner of Canada.

To exercise these rights, contact us at info@subtenders.com. We will respond within 30 days.

10. DATA BREACH NOTIFICATION

In the event of a data breach that poses a real risk of significant harm to affected individuals, we will:

  • Notify affected users as soon as feasible, and no later than 72 hours after becoming aware of the breach, as required by PIPEDA.
  • Report the breach to the Office of the Privacy Commissioner of Canada.
  • Describe the nature of the breach, the types of personal information involved, and the steps we are taking to address it.
  • Provide recommendations for steps you can take to protect yourself (e.g., changing your password).
  • Maintain a record of all breaches for a minimum of 24 months.

If you believe your account has been compromised, contact us immediately at info@subtenders.com.

11. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.

Your rights under CCPA/CPRA:

  • Right to know. You may request that we disclose what categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to delete. You may request that we delete the personal information we have collected from you, subject to certain exceptions (e.g., legal obligations, completing a transaction you initiated).
  • Right to correct. You may request that we correct inaccurate personal information we maintain about you.
  • Right to opt out of sale or sharing. We do not sell your personal information and do not share it for cross-context behavioural advertising. Because we do not engage in these activities, there is no need to opt out.
  • Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive different pricing or quality of service for making a privacy request.

Categories of personal information we collect:

  • Identifiers (name, email, phone number, IP address).
  • Commercial information (subscription history, transaction records).
  • Professional information (trade categories, credentials, business name).
  • Internet activity (pages visited, features used, device information).
  • Geolocation data (city and region, approximate location from IP).

To exercise any of these rights, contact us at info@subtenders.com with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days as required by law.

12. CHILDREN

Subtenders is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

13. INTERNATIONAL TRANSFERS

Your information may be stored and processed on servers located outside of Canada, including in the United States (through our hosting and infrastructure providers). By using the platform, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than Canada.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or through the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

15. CONTACT

If you have questions about this Privacy Policy or how we handle your data, contact our Privacy Officer at info@subtenders.com.

Subtenders Technologies Inc.
British Columbia, Canada