Privacy policy

Our database runs in Montréal, Québec. Customer records, bookings and children's details stay in Canada. Payment processing is handled by Stripe, which may process data outside Canada; we never receive or store your full card number.

• Account: your name, email, phone number and password (stored only as a scrypt hash — we cannot read it).
• Bookings: service addresses, postal code, dates and times, access notes, prices and tax.
• Child care: each child's age, allergies or medical notes you provide, and an emergency contact.
• Pros: background-check and Vulnerable Sector Check status, First Aid expiry date, licence and insurance details, cities and skills. We store the status of a check, never the report itself.
• Technical: a signed session cookie that keeps you logged in, and your IP address for fraud and brute-force protection.

To match you with a qualified professional, take payment, calculate the right provincial tax, keep both sides safe, and meet our own legal obligations — including the Canada Revenue Agency's reporting rules for digital platforms that facilitate personal services.

• Your full address is hidden from pros until one accepts your booking. Before that they see only the city and the service.
• Children's details — ages, allergies, medical notes, emergency contact — are released to a caregiver only after they accept, and only for that booking.
• Your phone number is shared with the assigned pro so they can reach you on the day.
• Support staff can see your bookings when you ask us for help.
• We do not sell personal information, and we do not share it for advertising.

We only send marketing email or texts if you ticked the box asking for them, and every message has an unsubscribe link. Transactional messages about a booking you made are sent regardless, because you need them.

• Booking and tax records: seven years, as Canadian tax rules require.
• Children's care details: deleted 90 days after the booking they belong to.
• Account details: until you ask us to close your account, minus anything we must keep for the tax records above.

You can ask for a copy of what we hold about you, have mistakes corrected, or have your account closed. Email support@cedarly.example and we will respond within 30 days, as PIPEDA requires. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Passwords are hashed with scrypt. Sessions are signed cookies that cannot be edited without detection. Sign-in attempts are rate limited by address and by account. Access to the production database is restricted to a dedicated application role with no administrative rights.