Privacy Policy

Last updated 6 August 2026

This Privacy Policy explains how Azuro Digital Inc. (“Contractorz”, “we”, “us”) collects, uses, discloses and protects personal information when you use Contractorz, our field-service management application available at app.contractorz.com and on mobile (the “Service”). Depending on where you are, our handling of personal information is governed by Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, the UK and EU General Data Protection Regulation (the “UK GDPR” and “GDPR”), and Australia’s Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Region-specific rights are set out below.

Who this applies to

Our direct customers are the businesses that use the Service (“Account Holders”). For an Account Holder’s own account information we are the controller (in PIPEDA terms, the organization). Account Holders also enter information about their own clients into the Service. For that client information, the Account Holder is the controller and decides how it is collected and used; we act as their processor (service provider), handling it on their behalf and on their instructions. If you are an individual whose information was entered by an Account Holder, please contact that business directly; we will assist them in responding to your request.

Information we collect

• Account information - your name, business name, email, role, and sign-in details.
• Business data you enter - your clients, properties, jobs, schedules, quotes, invoices, photos and notes (“Your Data”).
• Billing information - subscription and payment details, processed by our payment processor (we do not store full card numbers).
• Usage and device data - log data, app interactions, and basic device information, used to operate, secure and improve the Service.

How we use information

• to provide, maintain and improve the Service;
• to process subscriptions and payments;
• to send messages you ask us to send (such as quotes, invoices and reminders to your clients) and service communications to you;
• to provide support, prevent abuse and keep the Service secure;
• to comply with legal obligations.

Service providers we share with

We use trusted third parties to run the Service. They may process information only as needed to provide their service to us, and some may process or store data outside your country (for example, in the United States):

• Supabase and Vercel - database hosting and application hosting.
• Stripe - subscription billing and, if you enable it, online invoice payments.
• Intuit / QuickBooks Online - if you connect it, to sync your invoices and payments to your accounting.
• Resend (email) and Twilio (SMS) - to deliver messages you send. Email we send on your behalf is sent from a contractorz.co address with your business name shown as the sender.
• Sentry and PostHog - error monitoring and product analytics.

We do not sell your personal information. We may disclose information if required by law, to protect our rights or users, or in connection with a business transfer.

Text messaging (SMS)

When a business’s customer opts in to text messages – for example, by checking the SMS consent box on that business’s booking page – Contractorz, on the business’s behalf, may send service-related texts such as appointment confirmations, appointment reminders, “on my way” notifications, quote and invoice notifications, and review requests. Consent to receive texts is always optional and is never a condition of booking or of using a business’s services. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Opting out of texts does not affect email messages.

Mobile phone numbers and SMS opt-in (consent) information are never sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. We share this information only with our messaging provider (Twilio) and other subprocessors strictly as needed to deliver the messages a business asks us to send, and where required by law.

Connecting a Google or Microsoft calendar

Connecting a calendar is entirely optional and is switched off until you choose to connect one. Each person connects their own calendar; nobody else in your business, and nobody at Contractorz, can browse it.

When you connect a Google account we request two permissions, and we use them for exactly two things:

• Reading your calendar (calendar.readonly) – so that your booking page never offers a customer a time when you are already busy. We read the times you are busy. We do not read, store or display the titles, guests, locations or contents of your existing events.
• Writing events (calendar.events) – so that a visit assigned to you appears in your own calendar, and is updated or removed if that visit is rescheduled or cancelled. We only create and modify events that Contractorz itself put there.

We store the access tokens needed to keep the connection working, and the identifiers of the events we created, so we can update them later. We do not store copies of your other calendar events. Calendar data is never used for advertising, never sold, never shared with third parties, and never used to train machine-learning or artificial-intelligence models.

Contractorz’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time from Settings, or from your profile, which deletes the stored tokens. You can also revoke our access directly at myaccount.google.com/permissions. The equivalent Microsoft connection works the same way, using the Calendars.ReadWrite permission for the same two purposes.

International transfers

We are based in Canada, and some of our providers are located in the United States, so your information may be stored or processed outside your country and may be subject to the laws of those jurisdictions, including lawful access requests by authorities. Where we transfer personal information out of the United Kingdom or the European Economic Area, we rely on a recognized transfer mechanism - such as the UK International Data Transfer Agreement or Addendum and the European Commission’s Standard Contractual Clauses - together with our providers’ own data protection commitments. Where we transfer personal information out of Australia, we take reasonable steps to ensure overseas recipients handle it consistently with the Australian Privacy Principles (APP 8). You can ask us for more detail using the contact below.

How we protect information

We use technical and organizational safeguards, including encryption in transit, encryption of sensitive credentials at rest, and strict per-account data isolation so one customer cannot access another’s data. No method of transmission or storage is completely secure, but we work to protect your information.

Retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting and security requirements, after which it is deleted or anonymized.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may withdraw consent to certain uses. You can also export or delete your account data from Settings, or by contacting us. To make a request, contact info@contracterz.com. We will respond within the time required by the law that applies to you.

If you are in the United Kingdom or European Union

Under the UK GDPR and GDPR, we rely on the following legal bases to process the personal information of Account Holders:

• Performance of a contract - to create and run your account and provide the Service you signed up for;
• Legitimate interests - to secure, support, analyze and improve the Service, where not overridden by your rights;
• Consent - where you opt in to something specific (you can withdraw consent at any time);
• Legal obligation - to meet our legal, tax and accounting duties.

For the client information Account Holders enter, the Account Holder is the controller and we are the processor, acting under their instructions. You also have the rights to access, rectify, erase, restrict or object to processing, and to data portability. If you believe we have not handled your personal information properly, you may lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk, or with your local EU data protection authority. We would appreciate the chance to address your concern first.

If you are in Australia

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may request access to, and correction of, the personal information we hold about you (APP 12 and APP 13). As described under International transfers above, we may disclose personal information to overseas recipients (primarily in the United States) and take reasonable steps to ensure they handle it consistently with the APPs. If you have a privacy concern or complaint, contact us first at info@contracterz.com; if you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and, if the changes are material, provide additional notice.

Contact

For privacy questions or requests, contact our privacy contact at info@contracterz.com, Azuro Digital Inc. (Contractorz).