Privacy Policy

Last updated: June 1, 2026

1. Who is responsible for your data

Dockhand, based in Ontario, is the organization responsible for personal information collected through dockhand.ca. Privacy questions can be sent to hello@dockhand.ca.

2. What we collect and why

3. How we use your information

We use your information to:

• Run the Platform — match tasks, process payments, send messages and notifications;
• Verify identity, prevent fraud, and enforce our Terms;
• Improve the service (in aggregate — we don't sell your data);
• Communicate with you about your account, tasks, and (with your consent) occasional product updates.

4. Who can see your information

Other users. When a Customer posts a task, Taskers whose services match the category see the task title, description, town, and any photos. When a Tasker accepts a task, the Customer sees the Tasker's name, photo, ratings, and contact channel. The Customer's full address is shared with the Tasker only after the booking is confirmed.

Service providers. We use trusted vendors to run the Platform. Each is bound by their own privacy obligations:

• Supabase — hosts the database and authentication
• Stripe — processes payments and identity verification
• Resend — sends transactional email
• Netlify — hosts the website

Some of these providers store data outside Canada (typically the United States). When personal information leaves Canada, it is subject to the laws of the country it is stored in.

Legal requirements. We may disclose information when required by a Canadian law enforcement request, court order, or to protect the safety of users or the public.

We do not sell your personal information.

5. How long we keep your information

We keep account information for as long as your account is active and for a reasonable period after closure (typically up to 2 years) to handle disputes, comply with tax and accounting rules, and prevent abuse. Anonymized data may be kept longer for analytics. You can request earlier deletion — see Section 7.

6. Cookies and similar technologies

We use browser storage to keep you signed in and remember preferences (such as which dashboard view you used last). We do not use third-party advertising cookies. If we add analytics in the future, we will update this page first.

7. Your rights under PIPEDA

You have the right to:

• Access the personal information we hold about you;
• Correct information that is inaccurate or incomplete;
• Withdraw consent for certain processing, subject to legal or contractual restrictions;
• Request deletion of your account and associated personal information (some records may be retained where the law requires it).

To exercise these rights, email hello@dockhand.ca. We respond within 30 days.

8. Security

Passwords are stored using industry-standard hashing through our auth provider. Communications between your device and our servers are encrypted in transit. Access to personal information by our team is limited to what is needed to run the service. No system is perfectly secure, but we work to keep yours safe and will notify you of any breach affecting your information as required by law.

9. How we handle Verified Pro documents

If you apply for the Verified Pro tier, you will be asked to upload supporting documents — typically a Certificate of Insurance and category-specific credentials (e.g. ISA Arborist, ECRA, HCRA, BCIN, OSSWA, gas tickets) — and to provide a customer reference Sonal can phone. This section describes exactly how those documents are handled. You must read and agree to it once before any upload can be made.

Who validates documents

Documents are reviewed by Sonal, the Dockhand founder and the sole verifying admin during launch. Where possible, Sonal cross-checks credentials against the issuing body — for example, the ISA Ontario directory for Arborist certifications, the ECRA-ESA contractor directory for electrical licences, the HCRA directory for builders, the TSSA registry for gas tickets, the Landscape Ontario directory, and the carrier or broker's office for Certificates of Insurance. Each verification action is recorded with the verifier's identity, the date, and the method used. As Dockhand grows, additional named admins may be added; you will be notified of any such change.

Who can see your documents

Only you and named Dockhand admins (currently Sonal alone) can access the files themselves. No customer, no other tasker, and no third party sees the documents. Document URLs are not public — they are protected by row-level security and time-limited signed links, so they cannot be guessed or shared.

Where and how they are stored

Documents are stored in a private storage bucket on our hosting provider (Supabase), in Canadian data-region infrastructure where available. Files are encrypted at rest using AES-256 and in transit using TLS. Access requires a valid Dockhand sign-in plus admin or owner-of-record authorization at the row level — we do not rely on URL secrecy.

What we display publicly

Once a document is verified, only the fact of verification is shown publicly on your profile (for example: "Insured · Aviva · $2,000,000 GL · exp 2027-05" or "ISA Certified Arborist · exp 2026-09"). The document itself is never made public; only the carrier, coverage figure, and expiry date appear, never the policy number or the file.

How long we keep them

We keep documents while you are an active Verified Pro. Expired certificates auto-flag for renewal and are not displayed publicly. If you withdraw your documents or close your account, the file objects are deleted within 30 days and the database records are anonymized, except where Ontario law requires us to retain a record of the verification event itself (no document, just a "verified by [admin] on [date], method: [issuer directory]" log) for up to seven years for business-records purposes.

Your rights and how to withdraw

You may withdraw your Verified Pro documents at any time from the Pro Pipeline screen in the app. Withdrawing removes the files, clears the verification fields, and reverts your account to non-Pro status. We will not contact you to undo this. Withdrawal does not affect your underlying Dockhand account; you remain a tasker on the open tier.

What happens if you don't agree

The Verified Pro tier is optional. If you do not agree to this document-handling section, you cannot apply for the Pro tier, but you can still use Dockhand as a customer or as an open-tier tasker without any restrictions on those tiers.

10. Children

Dockhand is for adults only. We do not knowingly collect information from anyone under 18. If you believe a minor has signed up, please contact us so we can remove the account.

11. Complaints

If you believe we have not handled your personal information properly, contact us first at hello@dockhand.ca — we want to make it right. You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

12. Changes

We may update this policy. Material changes will be communicated by email and posted on this page with an updated date.