Privacy policy
Effective November 3, 2026.
Paidara is run by 15317886 Canada Inc., a federal corporation with its office in Edmonton, Alberta, operating as Paidara. This policy covers paidara.com, the Paidara app, each company’s Paidara text number and the signing pages we send. It explains how we handle personal information. We follow Alberta’s Personal Information Protection Act (PIPA) and, where it applies, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Paidara is opening to a small group of pilot companies first. This policy covers what is live and what pilot contractors will use, and we update it before we start collecting anything new.
1. Questions
Our Privacy Officer answers questions about this policy and about how we and our service providers, including those outside Canada, handle personal information. Email privacy@paidara.com. To see or correct your information, see section 12.
2. Two roles
| When | Our role |
|---|---|
| A contractor uses Paidara for its crew, jobs and clients | We act for the contractor, as its service provider. The contractor decides what goes in and is responsible for it under privacy law. We use the information to run Paidara for that contractor, keep it secure and fix it, and only in the other ways section 5 sets out. We help the contractor tell its crew and clients by showing a short notice on signing pages and in our texts |
| You visit paidara.com, apply for the pilot, sign up, text FEEDBACK or contact us | We are the organization responsible for your information |
3. What we collect
| From | What | Why |
|---|---|---|
| Contractor owners and office staff | Name, business email and phone, company details, how you sign in, billing details once paid plans start, a log of what each person does in Paidara, and which version of the Terms and Privacy Policy the owner agreed to and when | To run the account, sign you in safely, bill you, keep a record of who approved what, and support you |
| Crew and drivers, sent by text | Name and phone number, texts, photos of tickets and work, voice notes if sent, the time each was sent, and each person’s yes to texts and any STOP | To file tickets and extra work to the right job, ask for a retake, build the daily log, and show each person agreed to texts |
| Contractors’ clients, such as a GC, owner or producer rep | Name, business email and phone, role, who signs, and a signature with its time. When a link we sent is opened or used, the time it happened. Whether an email we sent was opened | To send change orders, notices, invoices and requests for dates, to text a client contact when the contractor’s office asks us to confirm extra work or get a missing signature or code, keep proof of what was signed, and chase what is still waiting |
| Contractors’ business details for texting | Legal name, business number, address, website, and a business contact’s name, email and phone | To get the contractor its own text number and file Twilio’s verification for it in the contractor’s name |
| Truck owners a contractor hires | Business name, contact name, email and phone, and the tickets and pay sheet for their trucks | To build the contractor’s hired truck pay sheet. It is kept with the contractor’s records, goes in the owner’s export, and is deleted with the rest when the account is deleted |
| Contractors’ records | Contracts, invoices, tickets, receipts and payments. A receipt photo can show card digits and names. With the contractor’s OK, send approved invoices to QuickBooks Online and read payments back from it | To build invoices, check them and show the dates that matter for getting paid |
| Company papers and workers’ papers | Company papers, workers’ tickets and certificates, equipment papers and their files, and who in the office read or checked each one and when | To show the office which papers are current, warn before one ends, and share the papers the office picks with a client |
| Website visitors | Simple daily counts of visits and sign ups. They hold nothing about who visited. A source tag such as video-1 or ad-1, which says which link or ad you came from, stays in your browser tab until you close it, and is saved with your application if you apply. On a friend’s shared link page, if a wrong link code is tried, a scrambled form of your internet address, for up to 24 hours | To see what works on the site, and to stop people guessing link codes |
| People who apply for the pilot | Name, company, kind of work, town, crew size, what costs most, mobile, email, accounting program, best time to call and the source tag, and, if you came from a friend’s link, the referral code on it, which tells us which customer shared it. Who sent the form, when, and the words shown with it | To reply, decide who joins the pilot, and call you when you asked, and give the right customer their free month |
| People who use the contact form | What you send in the form, such as your name, email and message | To reply to you. The message is emailed to us and the site saves nothing |
| People who book a call | The name, email and phone you give Calendly at paidara.com/call | To book and hold the call |
| Owners and office staff using help in Paidara | Questions and searches typed into help, messages sent to us, and whether an answer helped. Email addresses and phone numbers are taken out before a question is saved | To answer, and to make help better. We keep who asked a saved question, and never attach a contractor’s records to it |
We do not track anyone’s location, and the crew never installs an app. Some phones add the place a photo was taken to the photo file. We take it off when we save the photo, and we never read or use it.
Our sign up forms save who sent them, when, what they chose and the exact words shown, so we can show what you agreed to. The contact form only emails us your message and saves nothing on the site.
When you book a call at paidara.com/call we send you to Calendly, in the United States. Nothing from Calendly loads on paidara.com, and Calendly’s own notice applies on its pages.
4. Free tools on paidara.com
- Paidara has no free tools on paidara.com yet. If we add one, we update this policy first
5. How we use it
- Only for the reasons in section 3, to keep Paidara secure, to show the owner views of its own records, to fix and improve it, to meet our legal duties, and to handle any dispute or claim
- Paidara keeps a company’s records whether or not the owner looks at them. The optional views only read those records, and the owner chooses which ones to show
- We never sell personal information and never use it for anyone else’s marketing
- During the pilot we do not combine one customer’s information with another’s to make reports. After the pilot we may combine information from many customers into anonymous form that can no longer identify any person or name any customer, for reports such as an Alberta Pay Speed report
- During the pilot, we remember each office’s corrections to suggest fixes on that company’s next tickets. We do not use photos or corrections to make the reader better for any other company. After the pilot, we may also keep each correction with its photo to make the reader better, after names, signatures and phone numbers are covered on it
- We email you about your account. If you apply for the pilot, we contact you about it. We send news or texts only if you agree to them. Every one has a way to stop, and we stop right away. Account emails such as the Monday summary also have a link to stop them. It works for at least 60 days after we send the email, and we honour it right away and always within 10 business days
- When a customer shares a link with a friend, the friend’s page shows that customer’s first name. The customer sees a preview first. We tell the customer how many free months they have earned and how many friends did not count. We never tell the customer who a friend is
- Our emails and links tell the contractor’s office when a link was opened or an email was read, so it knows what to chase
- We use an AI service provider in the United States to read contracts, ticket photos, receipt photos and texts, to put crew texts about extra work into English, and to answer questions in help. Nothing the AI reads goes to a client or onto an invoice until someone in the contractor’s office approves it. The provider may not use any of it to train its AI, and deletes it within 30 days unless it is flagged for breaking its usage rules. The help bubble always shows you are talking to an AI
- The owner chooses which office staff can see workers’ papers. Everyone in the office can at first. The owner can take it away from one person or from everyone else
- A contractor’s office can send a client a link that opens with no sign in. It shows only the papers the office picked and ends on the day the office chose, between 1 and 30 days. The office can pull it back at once, and we log when it is opened. A worker’s paper is on it only while that worker has said yes for that client
- Reminder emails about papers go to people in the office, never by text, when a paper is about to end and again once it has ended. A worker’s paper is in the email only for someone who may see workers’ papers
- An assistant that answers from a company’s own records is off unless the owner turns it on. It reads only what the person asking can already see
6. Consent
- We collect, use and share personal information with consent, or where the law allows without it
- When a contractor signs up, it agrees that we share its business details and a business contact’s name, email and phone with Twilio, to verify the contractor’s own text number. The owner is that contact unless the contractor names someone else who agreed
- Crew agree to get texts by texting the contractor’s Paidara number first. The office can also invite someone with a link that opens a text to that number, and their own text is their agreement. The office gives the link to its own crew, for example in a message from its own phone or email, so each person chooses to send the first text. We record who agreed, when and how before any text is sent. Crew can reply STOP at any time, and HELP for help
- A worker’s papers are shared with a client only while that worker has said yes for that client. The worker can take the yes back at any time, and the link then stops showing them
- A worker can open their own page from a private link we text them, with no password. The link works for 30 days. The worker can add photos of their own papers and can make a link that shares chosen papers with a client for 7 or 30 days
- When a client signs on a Paidara page, the page shows who sent it and links to this policy
- On our sign up forms, we save who sent each form, when, what they chose and the exact words shown, so we can show what you agreed to
- You can withdraw consent by emailing privacy@paidara.com, replying STOP to a text, or using the unsubscribe link in an email. We tell you what that changes, for example that a crew member who sends STOP gets no more texts from us, although a ticket photo they still send is filed for the contractor. We still keep records the law requires, such as signed copies and billing records
7. Where it is stored and who helps us
Our main database and files are in Canada. Some services we use are in the United States, so personal information may be stored or processed there and may be accessed by the courts, law enforcement and national security authorities of that country. Each provider has agreed by contract to protect it. Twilio and Stripe also use some of it for their own legal duties, such as security and fraud checks, under their own privacy policies.
| Service | What it does for us | Where |
|---|---|---|
| Supabase | Main database and file storage, and daily backups of the database. It also holds pilot applications and the record of what each form said when it was sent. Its support staff see it only when we ask them for help | Canada (Canada Central region) |
| Vercel | Runs the app and website | Canada (Montréal region). Pages pass through Vercel’s network in the United States and other countries on the way to you |
| Twilio | Sends and receives texts and photos. Receives each contractor’s business details and contact to verify its text number. Phone carriers carry each text | United States |
| AI service provider | AI that reads contracts, ticket photos, receipt photos and texts, and answers questions in help | United States |
| Amazon Web Services (Transcribe) | Turns crew voice notes into text. It deletes the note once it is written down. We keep our own copy of the note | Canada (Montréal region) |
| Resend | Sends email from the app and the website. That includes each pilot application and each contact form message, sent to our inbox. It keeps its copy of each email for 30 days | United States |
| Google and Microsoft | Sign in, if you choose them. They tell us your name and email | United States |
| Stripe | Bills contractors for Paidara once paid plans start. We never see full card numbers | United States |
| Microsoft 365, through GoDaddy | Our own email, including privacy@ and hello@ | Canada |
| Calendly | Books intro calls when you use paidara.com/call. Holds the name, email and phone you give when you book. Its own notice also applies on its pages | United States |
QuickBooks Online is the contractor’s own service. With the contractor’s OK we send approved invoices to it, read payments back from it, and keep what we read in our database in Canada. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Ask our Privacy Officer for more about these providers and how they protect information.
8. How long we keep it
| Information | Kept for |
|---|---|
| A contractor’s data | While the account is open. After it closes, we offer the owner an export, then delete everything 90 days after closing, or within 30 days of a request if sooner, except what the law makes us keep. Backups are erased within 8 days after that. An owner can close the account in the app, or ask us to. When a pilot ends with no yes, the account closes on its own. We delete the data on the day set above, after we offer an export. We always give at least 14 days after offering the export. A short record is kept |
| Ticket photos and signatures | Kept while the account is open, so the record stays complete. The place a photo was taken is removed when we save it, and the time stays. Then deleted as above |
| Crew yes to texts and any STOP | As long as the contractor’s data, so the record of each yes stays with the texts it covers. After deletion, a short note stays that a yes or STOP happened and when, with none of its contents |
| Copies our providers hold | Twilio’s copy of each text, photo and voice note is deleted one day after we have saved ours. Our AI service provider deletes what it reads within 30 days unless it is flagged for breaking its usage rules |
| Support access logs and change logs | As long as the records they relate to. After deletion, a short note stays that a look or change happened and when, with none of its contents |
| Record of a deletion, a number hold and the Terms yes | Kept after the data is deleted, with none of its contents. It shows that a deletion happened, when and who asked, that a number was held, moved or released, and which version of the Terms and Privacy Policy the owner agreed to and when |
| Our own billing records | Six years after the end of the tax year they relate to, as tax law requires |
| Pilot applications, call bookings and messages to us | Two years after our last contact, unless you become a customer. Resend keeps its copy of the emailed application for 30 days |
| What each form said when it was sent | Who sent it, when and the words shown, kept for 3 years after our last contact with you or after you withdraw, to show we had your OK |
| Visit counts | Kept as long as we run the site. They hold nothing about who visited |
| Questions typed into help | Two years, then kept only in anonymous combined form |
The owner can export from the app at any time while the account is open. The app emails the owner a link that works for 24 hours. A few logs are not in it, such as the support look log. For those, for a very large export, and after an account closes, the owner can ask us and we make it within 2 business days. We offer an export before anything is deleted. When we build an export for you, the link works on one device and ends after 4 hours.
9. Notice a contractor can give its crew and clients
Contractors can copy this into their welcome text, onboarding or contracts. Paidara fills in your company name and contact from your settings.
| [Company name] uses Paidara to collect texts, photos, tickets and signatures for our jobs, so we can keep job records, bill and get paid. Some of this is processed in the United States by Paidara’s service providers. For questions about our privacy practices, including Paidara’s service providers outside Canada, contact [name or title, email]. Paidara’s policy is at paidara.com/privacy. |
|---|
Short version for texts. [Company name] uses Paidara for job texts and photos. Some is processed in the US. Questions [contact] or paidara.com/privacy
10. Keeping it safe
- Owners and office staff sign in with Google, Microsoft, or a one time code by text or email. We do not use passwords
- Each contractor sees only its own records, plus anything it chooses to share, such as with its accountant. We test this before every release
- An owner can give a bookkeeper or accountant a look only role. It shows invoices, payments, clients and figures, and never crew names, photos, signatures or worker papers. It can show notes typed on invoices and payments and a client contact’s phone and email
- Information is encrypted on its way to and from our systems and when it is stored. Ordinary texts and picture texts travel over phone networks, which do not encrypt them end to end
- Paidara staff open a contractor’s records only when its owner turns on support access, when the contractor asks us to do something that needs it, such as setup or an export, or when we must to keep Paidara secure or meet the law. Support access lasts up to 7 days and lets staff look but not change anything. Every look and every change is logged for the owner to see
11. If something goes wrong
If personal information is lost or seen by someone who should not see it, here is what we do.
- For a contractor’s records, we tell the contractor within 72 hours of confirming it and offer to file the report to the privacy commissioner for it. We help it tell the people involved, as the law requires of it
- For our own records, where there is a real risk of significant harm, we report to Alberta’s Information and Privacy Commissioner, and to the Privacy Commissioner of Canada where PIPEDA applies, and tell the people affected
12. Your rights
- Ask to see the personal information we hold about you, how we have used it and who we have shared it with, and ask us to correct it. Email privacy@paidara.com or write to us. It is free
- We answer within 30 days. If we need more time, we tell you within those 30 days, with the new date, why, and that you can complain to the Commissioner
- If the information belongs to a contractor’s records, we pass your request to that contractor, tell you we did, and help it answer
- If you are not happy with our answer, you can contact the Office of the Information and Privacy Commissioner of Alberta, or the Office of the Privacy Commissioner of Canada
13. Changes
We post any change here with a new effective date, and email customers about changes that matter before they take effect. If a change means using your information for a new purpose, we ask you first.
14. Cookies and website visits
paidara.com sets no cookies and loads nothing from other companies. We count visits and sign ups as simple daily totals for each page and source tag. The totals hold no names, no internet addresses and nothing else about who visited. Vercel, which hosts the site, handles your internet address to send you each page. A source tag such as video-1 or ad-1 stays in your browser tab until you close it. If you apply, it is saved with your application. If you click one of our ads, the ad company may know you clicked it. That is under its own privacy policy. On the page a friend opens from a shared link, if a wrong link code is tried, we count the tries by a scrambled form of your internet address for up to 24 hours, only to stop people guessing link codes. A right code does not save your address, and we never save the address itself. We make the scrambled form with a secret that only Paidara holds, so it cannot be turned back into your address without that secret. The Paidara app keeps you signed in on your device while you use it. We do not use advertising or tracking cookies and never sell visit data.