This policy explains how BlueOak Solutions handles personal information on our website and in our Android and iOS apps. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, Quebec's Law 25.
Who is responsible
BlueOak Solutions is responsible for your personal information. For any privacy question, write to aleotcanada@gmail.com.
Information we collect
Quote requests
When you request a quote, we collect your name, email address, phone number (optional), preferred contact method, city and the details of your request, such as the type of facility or home, its size, the frequency and your preferred hours. You can send a request without an account, and you must agree to be contacted about it before sending it.
Sign-in and profile
You sign in with Google, Apple, Microsoft or Facebook. We never see or store your password. The provider shares an account identifier, your name and, if the provider gives it, your email address. Your profile can also include your company, phone number, client type (business or residential) and language.
Quotes, messages and payment records
With an account, we keep your quote requests, the proposals we send you, your decisions and the messages between you and BlueOak. We may also record the payment status of a service: amount, payment method, due date, status and a note. We do not process payments online.
Reviews and feedback
If you leave a review, we collect your rating, review text, first name, client type and the type of service or business. After a completed visit, you can rate it and add a comment. We may also show public reviews from our Google Business Profile, with a link to the original.
Sites, visits and team members
For clients with a cleaning plan, we keep the sites we clean (name, address, access notes, areas and cleaning plan), scheduled visits, checklists and quality inspections. For members of our crew, we keep the invitation email, their role, their visit assignments and the work they record, including notes saved while offline.
Purpose of each use
- Quote requests and messages: to prepare your quote, send you a proposal and contact you about it.
- Sign-in and profile: to identify you, secure your account and show the app in your language.
- Sites, visits, checklists and inspections: to plan and deliver our services and check their quality.
- Payment records: to track payments and show you their status.
- Reviews and visit feedback: to publish your review with your consent, after we check it, and to improve our work.
- Security signals: to protect the service against spam and abuse.
- Analytics and crash reports: only with your consent, as described below.
Service providers
- Google Firebase (Google Cloud): sign-in (Firebase Authentication), database (Cloud Firestore), website hosting (Firebase Hosting), abuse protection (App Check), Google Analytics 4 and Firebase Crashlytics.
- Sign-in providers: Google, Apple, Microsoft and Facebook (Meta), only the one you choose. Their own privacy policies apply to your account with them.
- App Check: reCAPTCHA Enterprise on the web, Play Integrity on Android and App Attest on iOS confirm that requests really come from our website and apps.
- Google Business Profile: the source of the public Google reviews we may show.
Analytics and diagnostics
With your consent, we use Google Analytics 4 on the website and in the apps to count page views, quote requests and sign-ins by language and client type. In the Android and iOS apps, we use Firebase Crashlytics to receive crash reports with the app version, platform and technical error details. These events and reports do not include your name, email address, phone number or the content of your quotes.
Nothing is loaded until you choose "Accept" in the consent banner, and "Reject" is just as easy. You can change your choice at any time with "Cookie settings" in the footer. If you withdraw your consent, collection stops and the Google Analytics cookies are removed from your browser. Your choice is saved on your device only.
Where your data is stored
Our database is hosted by Google Cloud in the northamerica-northeast1 region (Montréal, Canada) or, if that region is not available for our plan, in the nam5 multi-region in the United States. Sign-in, analytics and crash reports are handled by the providers listed above and may be processed outside Quebec or Canada.
How long we keep your data
- Your account, profile, quotes, messages, reviews and feedback are kept until you delete them or delete your account.
- Quote requests sent without an account are kept until you ask us to delete them.
- Sites, visits and payment records are business records that we keep after an account is deleted. Within 30 days, we remove the site name, address and access notes from them, and the client link and the note from payment records.
- We keep a record of each deletion request, and technical records that contain no personal information.
Your rights: access, correction and deletion
You can access, correct and delete your personal information, and withdraw your consent, subject to the limits set by law.
- Access and correction: sign in and open My account to see and update your profile and to follow your quotes, messages and services. For any other access or correction request, write to aleotcanada@gmail.com.
- Deletion: with an account, choose "Delete my account" in My account on the web, Android or iOS. Without an account, use the form on the Data Deletion page. We complete deletion requests within 30 days.
If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.
Security
Sign-in goes through your provider, so BlueOak holds no passwords, and strict database security rules let each client see only their own information.
Changes to this policy
When we change this policy, we publish the new version on this page with a new effective date.