What we collect and why
We collect contact and business information, application answers, credential/insurance documents, verification status, agreement acceptances, job records, invoice information and support communications to assess providers, operate bookings, prevent fraud and resolve issues. Do not upload a SIN, banking login, full card details or immigration documents unless a separate lawful and secure process specifically requests them.
Consent and access
Required application information supports provider assessment and the requested services. Optional marketing consent is separate and can be withdrawn. You may request access, correction or information about our practices at support@urbance.ca. Withdrawing necessary consent can limit the services we can provide.
Location and job photos
Location sharing is optional, visible to the assigned customer and authorized business staff during an active job, and stops on completion or when you turn it off. We display the last update time. Photos should show the work area with customer permission. Do not photograph people or unrelated private information. The customer and authorized staff can view relevant job evidence.
Who receives information
We share necessary job information with the customer and authorized team members. Verification documents are restricted to the applicant and authorized reviewers. Supabase hosts account, database and file services; Vercel hosts the websites; the configured email provider delivers operational messages; Stripe handles relevant platform payments. When you choose Vision or Shadow and confirm permission, the notes and optional photo you submit are processed by OpenAI through our existing company API account to prepare a draft. Do not include access codes, identification documents or unnecessary personal details. AI output requires your review and does not automatically contact clients, approve work or move money. Service providers may process data outside Canada; applicable contracts and safeguards apply. We disclose information where legally required.
Security and retention
We use access controls, private storage and expiring file links. No system is risk-free. Financial records are generally retained for seven years under company policy; support records for two years; provider verification records for up to three years after closure, unless a shorter period, legal hold or other requirement applies. Active location coordinates are cleared when sharing stops or the job completes. Request deletion or correction through support; we retain records where law or unresolved claims require it.
BC and Canadian law
Our BC private-sector practices are governed by applicable BC PIPA and applicable Canadian federal privacy law. You may raise concerns with our privacy contact and the appropriate privacy regulator, including the Office of the Information and Privacy Commissioner for BC. This policy does not waive statutory rights.