1. Who We Are
Trevolo ("we", "us", "our") operates the Trevolo booking marketplace at trevolo.ca (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
2. Information We Collect
Account information: email address, name, phone number, and your role (customer or service provider).
Business information: business name, address, service descriptions, employee profiles (name, photo, bio where a business chooses to make them public), availability schedules, and pricing.
Booking information: appointment details, service addresses you provide, booking notes, and booking history.
Automatically collected information: IP address, browser type, device information, pages visited, and actions taken on the Platform. This data is collected through server logs and error-monitoring tools to maintain platform reliability.
Payment information: Trevolo does not collect or store your payment card details. All payment processing is handled securely by Stripe, Inc., our PCI-compliant payment processor. See Stripe's Privacy Policy.
3. How We Use Your Information
We use the personal information we collect to:
- Provide, operate, and maintain the Platform and the services you request.
- Send booking confirmations, reminders, and service-related notifications.
- Process subscription billing and payments through Stripe.
- Monitor and improve the Platform's performance, reliability, and security.
- Respond to your inquiries and provide customer support.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Information Sharing
With service providers you book: when you make a booking, your name, email, and booking details are shared with the service provider fulfilling that appointment. This disclosure is necessary to deliver the service you requested.
With third-party service providers: we use trusted third-party companies to help us operate the Platform. These providers only access personal information as needed to perform services on our behalf and are contractually obligated to protect it:
- Stripe — payment processing and subscription management.
- Amazon Web Services (SES) — transactional email delivery (e.g., booking confirmations).
- Sentry — error monitoring and performance diagnostics.
- Cloudflare — image storage and content delivery.
Legal requirements: we may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
5. International Data Transfers
Some of our third-party service providers operate in the United States or other jurisdictions outside Canada. When your personal information is transferred outside Canada, it may be subject to the laws of those jurisdictions. We take reasonable steps to ensure that our service providers maintain safeguards consistent with applicable Canadian privacy legislation.
6. Data Retention
We retain your account information for as long as your account remains active. Booking records are retained for a minimum of 24 months after the appointment date for business, legal, and dispute-resolution purposes. After account deletion, we may retain anonymized or aggregated data that can no longer identify you.
7. Cookies and Local Storage
Trevolo uses a session cookie to keep you signed in while you use the Platform. This cookie is essential for the Platform to function and does not track you across other websites. We do not use advertising cookies or third-party tracking technologies.
8. Your Privacy Rights
Under PIPEDA and applicable privacy laws, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information via your account settings.
- Delete your account and personal data. You can do this from your Account page, or by emailing us.
- Withdraw consent to optional communications at any time.
If you are located in the European Union (GDPR), California (CCPA/CPRA), or Québec (Law 25), you may have additional rights including data portability and the right to object to processing. Contact us at admin@trevolo.ca to exercise any of these rights. We will respond within 30 days.
9. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including:
- Encryption of all data in transit (TLS/HTTPS).
- Passwordless authentication — we use one-time codes sent to your email, so no passwords are stored.
- Access controls limiting data access to authorized personnel only.
- Regular security updates and monitoring.
While we strive to protect your information, no method of electronic storage or transmission is 100% secure. If you believe your account has been compromised, please contact us immediately at admin@trevolo.ca.
10. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. If we make material changes, we will notify you by email or by posting a prominent notice on the Platform before the changes take effect. The "Last updated" date at the top of this page indicates the most recent revision.
12. Contact Us
If you have questions or concerns about this Privacy Policy or how your personal information is handled, please contact us at:
Email: admin@trevolo.ca