Last updated: 2026-07-10 · Draft — pending legal review. QuoteHive complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec's private-sector privacy law (Law 25).
This policy explains what personal information QuoteHive ("we", "us") collects, why, how we use and protect it, who we share it with, and the rights you have. It applies to our websites, mobile applications and services (the "Services"). By using the Services you acknowledge the practices described here. Capitalized terms not defined here have the meaning given in our Terms of Use.
Account data (name, email, phone, city/province, street address and postal code, company and trade for contractors); job postings and attached files; bids and messages submitted through the Platform; Marketplace listings; verification documents (identity, insurance, workers' compensation, license); payment records from our processor (amounts, dates, card brand and last four digits — never full card numbers); and standard technical logs (IP address, browser type, security events) for security and fraud prevention.
To operate the marketplace: publishing your job posts, delivering bids, verifying contractors, processing credit purchases, running the Marketplace, sending transactional emails (new bids, hire notices, verification results, credential-expiry reminders, job alerts matched to your trade and region), securing the Platform and preventing fraud and abuse, and meeting our legal obligations. We do not sell personal information.
We process your information based on the consent you give by using the Services, the need to perform our agreement with you, compliance with legal obligations, and our legitimate interests in operating and securing the Platform. You may withdraw consent at any time (see "Your rights"), subject to legal limits; doing so may limit your ability to use certain features.
This is core to how the service works: when a Client posts a job, the job details (not their contact information) are visible to contractors. When a Client accepts a bid, the Client's and Contractor's names, phone numbers and email addresses are shared with each other so they can arrange the work. Messages, reviews and listings you post may be visible to other users. By posting a job, bidding or messaging, you consent to this exchange.
We use trusted processors to run the Platform: payment processing (Stripe), cloud hosting, object storage, email delivery, mapping/address lookup, anti-spam protection, and live chat. Each receives only the data needed for its function and is bound by contractual confidentiality and security obligations.
Some of our providers may process or store data outside Canada, including in the United States. Where this happens, data remains protected by contractual safeguards and may be subject to the laws of the jurisdiction where it is processed. You may contact us to learn more about these transfers.
We keep account and transaction records while your account is active and as required for legal, tax and audit purposes (typically 7 years for financial records). Verification documents are retained while your account is active. When information is no longer needed and not subject to a legal retention requirement, we delete or anonymize it.
You may request access to, correction of, or deletion of your personal information, portability of certain data, and withdraw consent (which may limit your use of the service). Submit requests via the contact form or by emailing [email protected]. We respond within the timeframes set by applicable law. You may complain to the Office of the Privacy Commissioner of Canada, or Québec's Commission d'accès à l'information, if unsatisfied with our response.
In accordance with Québec's Law 25, QuoteHive has designated a person responsible for the protection of personal information. You can reach them for any privacy question or request via the contact form or at [email protected].
We use a single first-party session cookie to keep you logged in and protect against cross-site request forgery. We do not run third-party advertising trackers or sell data to data brokers. Some embedded tools (such as live chat) may set their own cookies when enabled.
Passwords are stored hashed (bcrypt), connections are encrypted in transit (HTTPS), payment card processing is handled by Stripe (PCI-DSS Level 1), and staff access to personal information is role-restricted and masked for non-privileged staff. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.
If a privacy incident presents a risk of serious harm, we will take reasonable steps to contain it and will notify affected individuals and the appropriate authorities (including the Office of the Privacy Commissioner and, in Québec, the Commission d'accès à l'information) as required by law.
The Services are intended for people aged 18 and over. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it.
We may use limited automated rules (for example, fraud detection, rate limiting, or job matching) to protect the Platform. Where the law requires, we do not make decisions based solely on automated processing that produce a significant legal effect on you without the possibility of human review.
Material changes to this policy will be posted here with a new date and, where appropriate, emailed to account holders.
For any question about this policy or your personal information, reach us via the contact form or at [email protected].