Privacy Notice

Who is accountable

Check My Contractor is operated by Ryan Johnson (sole proprietorship, British Columbia, Canada). Privacy questions, access and correction requests, deletion requests, and incident reports go to the contact address shown on the website; the accountable person is the owner.

What we collect and why

To deliver a review we collect only what the review needs: your name and contact details, the project address and province, your contractor's business details as you supplied them, the quote/contract documents you upload, your stated concerns, and payment confirmation from our payment provider (never your card number).

Free tools on the site (the deposit checker and quote-completeness scan) run in your browser; the numbers and selections you enter there are not transmitted to us or stored.

We do not collect government ID, banking details, credit reports, or alarm/access information, and we prompt you to redact them if they appear in a document.

Where your data lives

Case records are stored in a Canadian-region managed database (Montréal). Uploaded documents are stored in a private Canadian-region object store (Central Canada) and are malware-scanned before any analyst access. The website is served from a Canadian region. If any future subprocessor would move personal data outside Canada, this notice will be updated first and consent obtained where required.

AI processing

AI tools may assist with document text extraction, checklist comparison, and drafting — always under human-controlled rules. Your documents and identifying information are never sent to an AI provider that trains on its inputs or that lacks approved contractual controls. AI never decides whether a contractor is trustworthy and never releases a report.

Retention and deletion

Default retention: uploaded original documents are deleted 30 days after your report is delivered; reports are deleted 90 days after delivery. Financial transaction records are kept separately only as long as tax and accounting law requires.

You may request earlier deletion, or an export of your data, at any time. We honour deletion requests unless a documented legal hold applies (for example an open payment dispute), and we tell you exactly which categories were deleted and, narrowly, anything lawfully retained.

Who sees your data

The analyst and reviewer working your case, under least-privilege access with mandatory two-factor authentication and audit logging. We never sell data, never publish reports or contractor information, and never contact your contractor, insurer, or references without your specific consent.

Service providers that process data on our behalf: a Canadian-region database and authentication provider, a Canadian-region document store with malware scanning, our website host, and a hosted payment provider. Each is bound by contract to process data only for our documented purposes.

Incidents and complaints

If a privacy incident affects your data we will assess it promptly, notify you where required, and record what happened and what changed. If you are not satisfied with our answer to a privacy request you may complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.