Datenschutzerklärung

1. Who we are and how to reach us

People Partner Powered Corporation (“we”, “us”) operates the Perxon marketplace at perxon.com. The Service is not offered in Quebec. We are accountable for personal information in our custody or control under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Our privacy officer — the Privacy Officer, People Partner Powered Corporation — can be reached at privacy@perxon.com for any privacy question, request, or complaint — including access, correction, deletion, consent withdrawal, or challenges to our compliance. We aim to respond within 30 days.

2. Information we collect

We collect only what we need to operate the Service, and most of it is information you choose to give us. The categories are:

• Account and verification: name, email address, email-verification status, sign-in identifiers, and — for OAuth sign-in only — the account identifiers and tokens supplied by Google or Apple. Passwords are stored as irreversible hashes, never in readable form.
• Content you publish: profile fields (display name, bio, phone, public email, address lines, city, region, postal code, country, coordinates, service radius, skills, schedule and blackout dates), service listings (description, price, currency, duration, location, remote options), and recommendations, reviews, and ratings you write.
• Bookings and coordination: requested slots, duration, delivery mode, location notes, price snapshots, booking status history, and review requests between providers and customers.
• Links and attribution: metadata for share links, access grants, and invites (labels, use counts, expiry, revocation state, and who invited whom). Only one-way hashes of tokens are stored — never the raw links.
• Usage analytics: append-only event records such as profile or service views, booking lifecycle steps, review submissions and publications, and invite activity. Logged-out page views are counted without attributing them to an account.
• Technical and security data: session records (including IP address and user agent where provided), device and browser information, error logs, and locale preferences needed for security, fraud prevention, and troubleshooting.
• Correspondence: messages you send us, such as support or privacy requests and your verification or password-reset emails.

3. How we use it

We use personal information for the purposes identified at collection, including:

• Creating and securing your account, verifying your email, and keeping you signed in.
• Publishing and displaying the profiles, services, reviews, and bookings you choose to make visible.
• Coordinating booking requests, notifying the other party, and maintaining status history.
• Operating share links, access grants, invites, QR artifacts, and embeds.
• Preventing fake reviews, spam, abuse, and security incidents, and enforcing the Terms.
• Measuring aggregate conversion and reliability (for example, views to bookings) to improve the Service.
• Sending transactional emails you asked for — verification, password resets, booking notifications — via our email provider.
• Complying with legal obligations and responding to lawful requests.

4. Consent

We rely on your consent to collect, use, and disclose personal information for the purposes above. Consent may be express (for example, ticking a box or submitting a form) or implied by voluntarily providing information for an obvious purpose, such as publishing a public profile. Verification and transactional emails are part of the Service you requested.

You may withdraw consent at any time, subject to legal or contractual limits and reasonable notice — for example by making content private, deleting it, or requesting account deletion. Withdrawing consent for information essential to the Service (such as an account email) may mean we can no longer provide the Service to you. There is no penalty for withdrawing consent beyond that consequence.

5. Visibility: what “public” really means

Perxon is built around owner-controlled visibility, and your choices have real consequences — please read this section carefully:

• Public profiles and services are visible to everyone on the internet, may be indexed by search engines, and may appear in sitemaps, discovery results, embeds, and rating badges. Only publish information you are comfortable sharing publicly.
• Private profiles are visible only to you when signed in. Semi-private pages are visible to anyone holding a valid share link — treat links like keys and revoke them when no longer needed.
• Contact details on public pages are partially masked for logged-out visitors (for example, most phone digits and email characters are hidden) and shown in full only to signed-in users.
• Recommendations and reviews you write start hidden and appear publicly only if the profile or service owner publishes them. Reviews you receive are moderated by you on your own pages.

6. When we share information

We do not sell personal information. We disclose it only as follows:

• Service providers (subprocessors) that help us operate the Service: Cloudflare (hosting, delivery, and security), Neon (managed Postgres database, reached through Hyperdrive connection pooling), Resend (transactional email delivery), and Google or Apple (OAuth sign-in, only if you choose it). Providers process data solely to provide their services to us under contractual confidentiality and security obligations.
• Other users, exactly as your visibility settings direct (see section 5).
• Legal and safety disclosures: where required or permitted by law — for example, to comply with a court order, to investigate fraud or abuse, or to protect the rights, safety, or property of users or the public.
• Business changes: if People Partner Powered Corporation is involved in a merger, acquisition, or asset transfer, users will be notified and their information transferred only subject to these same protections.

7. Processing outside Canada

Our infrastructure providers may store and process personal information outside Canada, including in the United States. When information leaves Canada, it becomes subject to the laws of the jurisdiction where it is processed. We select established providers, limit what is transferred to what is necessary, and bind providers to protect the information with safeguards comparable to our own. By using the Service, you consent to this cross-border processing as described here.

8. How long we keep it

We retain personal information only as long as necessary for the purposes it was collected, plus a reasonable period afterwards:

• Account data is kept while your account is active and for a reasonable period after closure to handle disputes, fraud prevention, and legal obligations.
• Content you delete (profiles, services, reviews, bookings notes) is removed from the live Service promptly; residual copies roll off backups in the ordinary course.
• Share-link and invite metadata is kept while links are live plus a reasonable audit window after expiry or revocation.
• Analytics events are retained in identifiable form only as long as needed for operational analysis and are otherwise aggregated or deleted.
• Where the law requires longer retention (for example, to respond to a legal claim), we keep the minimum necessary for that purpose.

9. How we protect it

We apply safeguards appropriate to the sensitivity of the information: encrypted connections (TLS) in transit, one-way hashing of passwords, share-link tokens, and invite tokens so raw secrets are never stored, request-scoped database access with short-lived connections, least-privilege access for operations, and append-only audit trails for moderation-sensitive actions.

No system is perfectly secure. You play a part too: use a strong unique password, keep your devices updated, and promptly revoke share links or sessions you no longer need. We will notify affected individuals and the Office of the Privacy Commissioner of Canada of any breach carrying a real risk of significant harm, as the law requires.

10. Your rights

Subject to limited legal exceptions, you have the right to be informed about, access, correct, and challenge the accuracy and completeness of your personal information; to withdraw consent; and to request deletion or a portable copy of information you provided.

Much of this is self-serve: you can view, edit, hide, or delete your profile, services, availability, and reviews from your dashboard at any time. For anything you cannot do yourself — including full account deletion, an access or portability request, or a compliance challenge — email privacy@perxon.com from your account address describing the request. We will verify your identity, respond within 30 days, and explain any lawful reason if we cannot fully comply.

If you remain unsatisfied, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

11. Cookies and similar technologies

Perxon uses only what is needed to run the Service: strictly necessary session and authentication cookies that keep you signed in and protect against forgery, and functional preferences such as your locale. We do not use third-party advertising trackers or cross-site behavioral profiling cookies. Public rating badges and booking embeds load from Perxon itself when a third-party site includes them, and count a view without attributing it to an account unless you are signed in.

You can block cookies in your browser, but sign-in and other essential features will not work without the session cookie.

12. Minors

The Service is intended for people who have reached the age of majority in their province or territory, and we do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact privacy@perxon.com and we will promptly review and delete it.

13. Automated decisions

Perxon does not make decisions producing legal or similarly significant effects about you by means of solely automated processing. Recommendations and bookings are moderated by people (owners and providers), and discovery ranking reflects owner-published content and aggregate counts, not automated profiling of individuals.

14. Changes to this statement

We may update this statement to reflect new features (such as payments), providers, or legal requirements. The current version is always posted at /privacy with its effective date, and material changes will be highlighted for at least 30 days before taking effect where reasonably practicable. Continued use after the effective date signifies acceptance. For questions about this statement or our practices, contact privacy@perxon.com.