Privacy Policy

Caliber AI ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our AI-powered back office platform for small contractors (the "Service").

We are based in Toronto, Canada, and comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

We collect the following types of information:

• Account information: Your name, email address, and password (encrypted) when you register.
• Business information: Business name, trade type, address, phone, email, hourly rates, tax settings, and branding you enter in Settings.
• Customer data: Names, phone numbers, email addresses, and job addresses you enter for your customers. This is entered by you, not collected directly by us from your customers.
• Job and estimate content: Text descriptions, photos, line items, pricing, and notes you create while using the Service.
• Usage data: How you interact with the Service, such as features used and device/browser information, collected via analytics.
• Payment data: We use Stripe to process payments. We do not store your full credit card number — Stripe handles that securely.

We use your information to:

• Provide, maintain, and improve the Service and its features.
• Generate AI-powered estimates, pricing suggestions, and business insights from your inputs.
• Process subscription payments and manage your account.
• Send you service-related communications, such as invoice follow-ups, security alerts, and account updates.
• Provide customer support and respond to your inquiries.
• Monitor for fraud, abuse, and security threats.
• Comply with legal obligations.

When you submit job descriptions, notes, or photos, we process them through AI models to generate estimates and pricing suggestions. This processing is done to provide the Service to you. We do not use Your Content to train AI models that are shared with or sold to third parties.

AI-generated estimates are suggestions only. You are responsible for reviewing and approving all output before sharing it with your customers.

The Service includes a customer portal that allows your clients to view their estimates, invoices, and job status. When a client requests access, we send a 6-digit verification code to their email. The code expires after 10 minutes, and access is limited to the specific records associated with their email address.

We do not share your business data with your customers beyond what is necessary for them to view their own estimates, invoices, and job updates. Sensitive fields such as cost breakdowns, profit margins, and internal notes are never exposed in the portal.

We do not sell your personal information. We may share it only in these circumstances:

• Service providers: Third parties that help us operate the Service, such as Stripe (payments), our hosting provider, and email delivery services. These providers are bound by confidentiality obligations.
• Legal compliance: If required by law, court order, or to protect our rights, safety, or property.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality protections.

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, secure verification codes generated with cryptographic randomness, rate limiting on authentication attempts, and row-level access controls that isolate each contractor's data.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we work hard to protect your information.

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information and Your Content within a reasonable period, except where we are required to retain it for legal, accounting, or dispute-resolution purposes.

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your account and associated data.
• Withdraw consent for certain processing activities.
• Object to or restrict certain uses of your data.

To exercise any of these rights, please contact us. We will respond within 30 days.

We use cookies and similar technologies for authentication, remembering your preferences, and analytics. You can control cookies through your browser settings, but disabling them may affect some features of the Service.

The Service may contain links to third-party websites or integrate with third-party services (such as Stripe and Wave). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us and we will delete it.

The Service is hosted in Canada. If you access the Service from outside Canada, your information may be transferred to and processed in Canada. By using the Service, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or your personal data, please contact us.