Privacy Policy

Last updated: May 1, 2026

swoopbin ([Legal Business Name — TBD], "swoopbin", "we", "us", "our") respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and how you can exercise your rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial laws.

1. Information we collect

We collect the minimum information necessary to provide our junk-removal service:

  • Identity & contact: name, email, phone number.
  • Service details: pickup address (street, city, postal code, province), description of items, photographs you upload, preferred date and time window.
  • Payment information: card details are submitted directly to our payment processor (Stripe) using their hosted form. We never see, store, or log your full card number. We retain only the brand, last four digits, and country of the card for receipt purposes.
  • Technical: IP address, browser user-agent, basic interaction telemetry (which page you visited and when). Used to keep the site secure and to diagnose problems.

2. Why we collect it

We use your information for the following identified purposes:

  • To respond to your quote request and arrange a pickup.
  • To process your payment and issue a receipt and invoice.
  • To analyse photos you submit (via OpenAI's GPT-4 Vision API) so we can give you a fast, fair estimate. The images are sent to OpenAI for analysis only — you can opt out by emailing us before your pickup.
  • To meet legal obligations (Canada Revenue Agency record-keeping for tax-collected sales).
  • To improve our service quality and prevent fraud.

We do not sell your personal information. We do not use your contact details for marketing without your separate, express consent.

3. Who we share it with

Your information is shared only with service providers who process it on our behalf:

  • Stripe (payments) — card data and receipt email. May be processed in the United States. Stripe is PCI-DSS Level 1 certified.
  • OpenAI (image analysis) — only the photos you upload, processed in the United States. Photos are not used to train OpenAI's models per their API terms.
  • Google Maps Platform (address validation) — your typed address.
  • Hostinger (hosting) — all of the above for storage/serving.

4. Cross-border transfers

Some of these providers process information outside Canada (primarily the United States). When we transfer your information outside Canada, we ensure it is protected by contractual safeguards equivalent to those required by PIPEDA. However, while it is in another country, your information is also subject to that country's laws — including lawful access requests by foreign authorities.

5. Retention

  • Quote and contact records: 7 years (Canada Revenue Agency requirement for businesses that collect sales tax).
  • Payment transaction logs: 7 years.
  • Audit log: 2 years.
  • Uploaded photos: deleted within 30 days of pickup completion.
  • Technical / server logs: 90 days.

6. Your rights

Under PIPEDA you have the right to:

  • Access — request a copy of the personal information we hold about you.
  • Correct — ask us to correct information that is inaccurate or incomplete.
  • Withdraw consent — at any time, subject to legal or contractual restrictions.
  • Complain — to our Privacy Officer or to the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email privacy@swoopbin.ca. We will respond within 30 days.

7. Security

We protect your information with HTTPS in transit, encryption at rest where supported, industry-standard password hashing (Argon2id), strict access controls on our database, and a continuous audit log of sensitive operations. No system is perfectly secure; if we ever experience a breach involving your personal information we will notify you and the Office of the Privacy Commissioner as required by PIPEDA.

8. Cookies

See our cookie disclosure for details on what cookies we use and how to disable them.

9. Children

Our service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent change. Material changes will be highlighted on the home page for at least 30 days.

11. Contact us

Privacy Officer
[Legal Business Name — TBD]
[Registered Business Address — TBD]
privacy@swoopbin.ca

If you are not satisfied with our response, you can file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.