Privacy Policy

Last updated: March 14, 2026

Quohta ("we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, embeddable widget, and related services (collectively, the "Service"). This policy applies to users in both Canada and the United States.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, business name, and business address when you create a Contractor account.
• Service Listings: Descriptions, pricing, and categories of services you offer.
• Order Information: Customer name, email, phone number, preferred service date, and order details submitted through the widget.
• Payment Information: Stripe Connect account details for Contractors. We do not store credit card numbers — all payment data is processed and stored by Stripe.
• Verification Documents: Licenses, insurance certificates, and other credentials uploaded for marketplace verification.
• Communications: Messages sent through the dispute resolution system, reviews, and support requests.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage Data: Pages visited, features used, time spent, and interaction patterns within the app.
• Push Notification Tokens: Device tokens for delivering push notifications (with your consent).
• Log Data: IP address, browser type, access times, and referring URLs when using the web widget or website.

1.3 Information from Third Parties

• Authentication Providers: When you sign in using OAuth, we receive your name and email from the authentication provider.
• Stripe: Payment status, payout information, and Connect account status from Stripe.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process orders and facilitate payments between Contractors and Customers
• Send push notifications for new orders, abandoned carts, marketplace matches, and dispute updates
• Send email confirmations for orders and account activity
• Operate the marketplace and match Customers with Contractors by location and trade
• Manage the verification, rating, and dispute resolution systems
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Respond to support requests and communicate with you about the Service
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Between Contractors and Customers: When a Customer places an order, their name, email, phone, and order details are shared with the Contractor. The Contractor's business name, services, and public profile are visible to Customers.
• Stripe: Payment and account information is shared with Stripe for payment processing. Stripe's privacy policy governs their use of this data.
• Service Providers: We may share information with third-party service providers who assist in operating the Service (e.g., email delivery, hosting, analytics), subject to confidentiality obligations.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Order records and transaction history are retained for a minimum of seven (7) years for tax and legal compliance purposes. You may request deletion of your account and personal data at any time (see Section 7).

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and session management
• Regular security assessments
• Access controls limiting employee access to personal data

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Canadian Privacy Rights (PIPEDA)

If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including:

• The right to access your personal information held by us
• The right to request correction of inaccurate information
• The right to withdraw consent for the collection, use, or disclosure of your information (subject to legal or contractual restrictions)
• The right to file a complaint with the Office of the Privacy Commissioner of Canada

We collect and use personal information only with your knowledge and consent, for purposes that a reasonable person would consider appropriate.

7. US Privacy Rights

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell personal information. If this changes, you will have the right to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

7.2 Other US States

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Contact us to exercise any applicable rights.

8. Cookies and Tracking

The Quohta website and widget may use cookies and similar technologies for:

• Authentication and session management
• Remembering user preferences
• Analytics and performance monitoring

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be stored and processed in Canada, the United States, or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

11. Push Notifications

With your consent, we send push notifications for new orders, abandoned carts, marketplace matches, dispute updates, and other Service-related events. You can manage notification preferences in the app Settings or disable notifications through your device settings at any time.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to file a complaint, contact us at:

Quohta
Email: privacy@quohta.com
General: support@quohta.com

For Canadian privacy complaints, you may also contact the Office of the Privacy Commissioner of Canada.