Privacy Policy

BuilderLien
Effective Date: January 11, 2026

1. Introduction

This Privacy Policy explains how Threenorth Consulting Inc. ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use BuilderLien ("Service") at builderlien.ca.

We are committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.

By using BuilderLien, you consent to the collection, use, and disclosure of your personal information as described in this Policy.

2. Information We Collect

2.1 Information You Provide

Account Information:

• Name
• Email address
• Password (stored securely hashed)
• Company or business name
• Phone number (optional)

Billing Information:

• Payment card details (processed and stored by Stripe, not by us)
• Billing address
• Transaction history

Project Data:

• Construction project details (addresses, dates, amounts)
• Client and contractor information
• Lien deadline calculations and tracking data
• Notes and documents you upload

2.2 Information Collected Automatically

Usage Data:

• Pages visited and features used
• Time spent on the Service
• Actions taken within the application

Device and Technical Data:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Referring URLs

Cookies and Similar Technologies:

• Session cookies (essential for login functionality)
• Preference cookies (to remember your settings)
• Analytics cookies (to understand how you use the Service)

See Section 8 for more details on cookies.

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Providing the Service

• Creating and managing your account
• Processing your subscription payments
• Calculating and tracking lien deadlines
• Sending deadline reminders and notifications
• Providing customer support

3.2 Improving the Service

• Analyzing usage patterns to improve features
• Identifying and fixing technical issues
• Developing new functionality

3.3 Communications

• Sending transactional emails (receipts, password resets, deadline reminders)
• Sending service announcements and updates
• Responding to your inquiries

3.4 Legal and Security

• Complying with legal obligations
• Enforcing our Terms of Service
• Protecting against fraud and unauthorized access
• Protecting our rights and the rights of others

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Service Providers

We use trusted third-party service providers to operate BuilderLien:

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.2 Analytics (If Applicable)

We may use Google Analytics to understand how users interact with the Service. Google Analytics collects anonymized usage data. You can opt out using the Google Analytics Opt-out Browser Add-on.

4.3 Legal Requirements

We may disclose your information if required by law, such as:

• In response to a court order or subpoena
• To comply with legal process
• To respond to lawful requests from government authorities
• To protect our rights, privacy, safety, or property

4.4 Business Transfers

If Threenorth Consulting Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Storage and Transfer

5.1 Where Your Data Is Stored

Your data is primarily stored on servers operated by our service providers:

• Supabase: Servers located in the United States and other regions
• Stripe: Global infrastructure with data centers in multiple countries
• Vercel: Global edge network with data centers worldwide

5.2 International Transfers

Your personal information may be transferred to and processed in countries outside Canada, including the United States. These countries may have different privacy laws than Canada.

When we transfer your information internationally, we take steps to ensure it remains protected, including:

• Using service providers with strong privacy commitments
• Ensuring contractual protections are in place
• Complying with PIPEDA requirements for cross-border transfers

By using BuilderLien, you consent to the transfer of your information to countries outside Canada.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service while your account is active
• Comply with legal obligations (e.g., tax records)
• Resolve disputes and enforce agreements
• Maintain business records as required by law

Specific retention periods:

After the retention period, we securely delete or anonymize your information.

Requesting Deletion

You may request deletion of your account and personal information at any time (see Section 7). Some information may be retained as required by law.

7. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act, you have the following rights:

7.1 Access

You have the right to know what personal information we hold about you and how it is used. You may request access to your information by contacting us.

7.2 Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update most account information directly in your account settings.

7.3 Withdrawal of Consent

You may withdraw consent for certain uses of your information. Note that withdrawing consent may affect our ability to provide the Service.

7.4 Deletion

You may request deletion of your personal information, subject to legal retention requirements.

7.5 Complaint

You have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe we have violated your privacy rights.

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: priv.gc.ca

How to Exercise Your Rights

To exercise any of these rights, contact us at:

Email: hello@builderlien.ca

We will respond to your request within 30 days, as required by PIPEDA. We may need to verify your identity before processing your request.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly and provide information to website operators.

8.2 Cookies We Use

8.3 Managing Cookies

You can control cookies through your browser settings:

• Block all cookies: May prevent the Service from functioning properly
• Block third-party cookies: Analytics may be affected
• Delete cookies: You may need to log in again

Most browsers allow you to:

• See what cookies are stored
• Delete cookies individually or all at once
• Block cookies from specific sites
• Block all third-party cookies

8.4 Do Not Track

Some browsers send "Do Not Track" signals. There is no industry standard for how websites should respond to these signals. Currently, BuilderLien does not respond to Do Not Track signals.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

9.1 Technical Safeguards

• Encryption of data in transit (TLS/HTTPS)
• Encryption of sensitive data at rest
• Secure password hashing
• Regular security updates and patches
• Access controls and authentication

9.2 Organizational Safeguards

• Limited access to personal information on a need-to-know basis
• Service provider agreements requiring data protection
• Incident response procedures

9.3 Your Responsibilities

You are responsible for:

• Keeping your login credentials confidential
• Using a strong, unique password
• Logging out of shared devices
• Notifying us immediately of suspected unauthorized access

9.4 No Guarantee

While we take security seriously, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

10. Children's Privacy

BuilderLien is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

11. Third-Party Links

BuilderLien may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will post the updated Policy on builderlien.ca
• We will update the "Effective Date" at the top
• For material changes, we will notify you by email or prominent notice in the Service

Your continued use of BuilderLien after changes take effect constitutes acceptance of the updated Policy.

13. Privacy Officer

Threenorth Consulting Inc. has designated a Privacy Officer responsible for compliance with this Policy and PIPEDA.

For privacy-related inquiries or to exercise your rights:

Privacy Officer
Threenorth Consulting Inc.
Email: hello@builderlien.ca

We aim to respond to all privacy inquiries within 30 days.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

Email: hello@builderlien.ca
Website: builderlien.ca

Threenorth Consulting Inc.
Ontario, Canada

Last updated: January 11, 2026