Skeelz Privacy Policy
How Skeelz handles personal information and privacy requests.
Effective date: September 18, 2026 • Version: 2026-09-18
This Privacy Policy explains how [LEGAL ENTITY NAME], operating as Skeelz, collects, uses, discloses, retains, and protects personal information through the Skeelz apps, https://skeelz.ca, APIs, marketplace, support channels, messaging, payment features, provider tools, AI-assisted features, moderation systems, and account-deletion processes.
1. Accountability and scope
Skeelz is responsible for personal information under its control, including personal information processed on its behalf by service providers. The person responsible for Skeelz privacy compliance is [PRIVACY OFFICER NAME OR TITLE], reachable at privacy@skeelz.ca. This Policy is designed for a Canada-first launch and to reflect the principles of PIPEDA and applicable substantially similar provincial privacy laws. Additional local law may apply depending on where a user lives.
2. Personal information we collect
| Category | Examples |
|---|---|
| Account and identity | Name, nickname, email address, phone number, account role/capabilities, login method, Apple/Google identity references, account security state. |
| Provider profile and professional information | Business/profile name, biography, services, skills, service areas, availability, portfolio, credentials supplied by the Provider, payout/onboarding status. |
| Projects and marketplace activity | Service requests, Smart Search details, quotes, scope, line items, project status, reviews, favourites, provider matches, marketplace interactions. |
| Communications and user content | Chat messages, support requests, refund explanations, reports, reviews, profile text, portfolio images, chat images and other submitted content. |
| Location | Precise device location only when the user chooses a feature that requests current location; city, area, neighbourhood, postal code or service area when entered manually. |
| Payments and transaction information | Purchase history, payment status, amounts, currency, refund/dispute status, Stripe references, provider payout status, app-store subscription status. Skeelz does not need to store full card numbers. |
| Device, security and technical data | Device or installation identifiers, push-notification tokens, IP address, timestamps, session/security records, browser or app version, error and diagnostic information. |
| AI feature data | Prompts, project descriptions, images or context submitted to AI-assisted features; AI outputs; consent/preferences related to AI processing. |
| Safety, fraud and compliance data | Reports, moderation results, evidence submitted in disputes, records of policy enforcement, security events, admin/audit records. |
3. How we collect information
- Directly from you when you create or edit an account, profile, request, quote, message, review, payment, refund request, support ticket, or report.
- From your device when you use app features, including location only after operating-system permission and a user action that requests it.
- From Apple or Google when you use their sign-in, push, or subscription services.
- From Stripe and connected payment services when processing project payments, refunds, disputes, provider onboarding, and payout status.
- From other Skeelz users when they interact with you, submit reviews, report content, or participate in a transaction.
- From service providers that help us host, secure, monitor, moderate, communicate, or operate the Platform.
4. Purposes for collection, use and disclosure
- Create, authenticate, secure, and administer accounts and sessions.
- Operate client and provider modes and keep shared account details synchronized.
- Match clients with Providers, operate Smart Search, display profiles, favourites and Featured Placement, and support project workflows.
- Deliver messages, notifications, quotes, project updates, receipts, refunds, dispute communications, and support.
- Process eligible payments and provider payouts, verify transaction status, prevent duplicate charges, calculate Platform fees, and manage refunds or chargebacks.
- Moderate text and images, investigate reports, prevent fraud and abuse, enforce policies, and protect users and the Platform.
- Provide AI-assisted features when the required notice and consent have been provided.
- Diagnose errors, maintain reliability, secure the service, and measure product performance using information reasonably necessary for those purposes.
- Comply with accounting, tax, court, regulatory, law-enforcement, payment-network, app-store, and other legal obligations.
- Send optional marketing only where permitted by law and consented to when required.
5. Consent and choices
Skeelz seeks meaningful consent appropriate to the sensitivity and purpose of the information. Some processing is necessary to provide a feature you request—for example, using account data to sign you in or sending payment details to Stripe to process a payment. Optional processing, such as precise location, AI-assisted features, or marketing, should be presented separately when appropriate.
You may withdraw consent to optional processing, subject to reasonable notice and legal or contractual restrictions. Withdrawal may make a feature unavailable. Operating-system permissions for location or photos can be changed in device settings. AI preferences should also be available through Skeelz where the feature supports them.
6. AI-assisted features and moderation
When AI processing is enabled for a feature, Skeelz may send relevant text, images, project context, or other submitted content to OpenAI to generate Smart Search assistance, provider-profile assistance, or safety moderation results. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in to data sharing. Skeelz will use AI data only for disclosed purposes and will update this Policy or obtain additional consent where required before materially changing those purposes.
AI outputs and moderation decisions may be imperfect. Skeelz may combine automated processing with rules, database checks, user reporting, or human review. Users should not submit unnecessary highly sensitive information to AI features.
7. When we share personal information
| Recipient/category | Purpose |
|---|---|
| Stripe / Stripe Connect | Project payments, Provider onboarding, payout routing, refunds, disputes, fraud and payment compliance. |
| Apple and Google | Sign-in, app distribution, push notifications, and mobile subscription billing/verification where applicable. |
| OpenAI | AI-assisted Smart Search, profile assistance, and disclosed AI safety moderation. |
| Cloud/media infrastructure | Hosting and delivery of profile, portfolio or chat media. |
| Hosting, database, cache and infrastructure providers | Operate the backend, website, databases, queues/caches, backups and service infrastructure. |
| Email, notification and monitoring providers | Transactional email, push delivery, security/availability monitoring, diagnostics and error reporting. |
| Other Skeelz users | Information you intentionally publish or share in profiles, requests, quotes, projects, reviews and messages, subject to feature permissions. |
| Professional advisers, regulators, payment networks, app stores or law enforcement | Legal advice, audit, fraud prevention, disputes, legal obligations, lawful requests and enforcement. |
| Business transaction counterparties | If Skeelz is involved in a financing, merger, acquisition, reorganization or sale, subject to appropriate confidentiality and applicable law. |
Skeelz does not sell personal information and, as of the Effective Date, does not use the Platform for third-party cross-context behavioural advertising or declare app tracking in Apple’s privacy manifest. If this changes, the Privacy Policy and required consent/disclosures must be updated before the new practice begins.
8. Cross-border processing
Some service providers may process information outside Canada or outside your province, including in the United States or other jurisdictions. Information processed in another jurisdiction may be accessible to courts, law-enforcement, or national-security authorities under that jurisdiction’s laws. Skeelz remains responsible for personal information under its control and uses contractual, technical, and organizational measures intended to provide appropriate protection. If Quebec privacy law applies, Skeelz should complete required privacy impact assessments before communicating personal information outside Quebec.
9. Retention and deletion
| Information | General approach |
|---|---|
| Active account/profile data | Kept while the account is active and as needed to provide the Platform. After verified deletion, active-profile information is deleted or anonymized unless a retention exception applies. |
| Messages, projects, quotes and reviews | Retained while needed for the transaction, account history, safety, dispute resolution, and legal claims; may be anonymized or limited after account deletion where appropriate. |
| Payment, accounting and tax records | Retained for the period required by applicable financial, accounting or tax law; Canadian business records commonly require at least six years from the end of the relevant tax year. |
| Refund, dispute, fraud and safety records | Retained as reasonably necessary to investigate, defend, prevent repeated abuse, satisfy payment-network obligations, or establish legal claims. |
| Security incident records | Records required by privacy law are retained for the legally required period; PIPEDA breach records are kept for at least 24 months after the organization determines a breach occurred. |
| Backups and logs | May remain temporarily in protected backups or logs until normal rotation or deletion processes complete, unless longer retention is required for security or law. |
Skeelz should maintain an internal retention schedule and delete or anonymize information when the purpose has ended and no legal, security, dispute, or accounting reason requires continued retention.
10. Security
Skeelz uses administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including access controls, authentication, secure transport, password hashing where applicable, token/session controls, payment-provider separation, moderation controls, logging, and role-based administrative access. No system can guarantee absolute security. If a breach of security safeguards creates a real risk of significant harm, Skeelz will follow applicable notification and reporting obligations.
11. Your privacy rights
- Request access to personal information Skeelz holds about you, subject to lawful exceptions.
- Request correction of inaccurate or incomplete personal information.
- Withdraw consent to optional processing, subject to legal or contractual restrictions and reasonable notice.
- Request account deletion and deletion or anonymization of associated information, subject to lawful retention exceptions.
- Ask questions or complain to the Skeelz Privacy Officer and, where applicable, to the Office of the Privacy Commissioner of Canada or a provincial privacy regulator.
- If Quebec law applies, request portability of qualifying computerized personal information collected from you in a structured, commonly used technological format, and exercise other rights available under Quebec private-sector privacy law, including applicable access, rectification, withdrawal-of-consent, and de-indexing/cessation-of-dissemination rights.
Skeelz may need to verify your identity before fulfilling a privacy request and may refuse or limit a request where permitted by law, for example to protect another person’s privacy or preserve information required for an active legal matter.
12. Marketing and electronic communications
Service communications such as receipts, security alerts, project messages, refund notices and important account notices are not marketing. Optional commercial electronic messages will be sent only where permitted by applicable law. Where Canada’s Anti-Spam Legislation applies, Skeelz will rely on valid consent or another lawful basis and will provide required sender identification and an unsubscribe mechanism.
13. Children and minors
The Skeelz marketplace is intended for adults aged 18 and older. Skeelz does not knowingly permit minors to enter into marketplace service transactions. If Skeelz learns that an ineligible minor has created an account, it may restrict or delete the account and associated information as appropriate, subject to legal obligations.
14. Changes to this Policy
Skeelz may update this Policy when practices, technology, vendors, or legal requirements change. Material changes will be communicated in an appropriate manner and fresh consent will be obtained where required for a new collection, use, or disclosure.
Contact
Operator: Skeelz, operated by [LEGAL ENTITY NAME]
Mailing address: [MAILING ADDRESS]
General support: support@skeelz.ca
Privacy Officer: [PRIVACY OFFICER NAME OR TITLE]
Privacy and data requests: privacy@skeelz.ca
Website: https://skeelz.ca
