Privacy Policy
Effective July 27, 2026 · Last Updated August 2026
Basera Trades (“we,” “us”) is founded on the core principle of customer data protection and direct relationship integrity. This policy explains what information we gather, our limited operational purposes, and our strict safeguards under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Information We Collect & Process
Contractors and Trade Businesses:
- Legal business identity, primary email, contact phone number, and municipal service region;
- Public narrative descriptions, starting price expectations, and completed project portfolio images (up to 10 files);
- Optional Business Verification documentation: provincial contractor license records or certificates of commercial general liability insurance submitted for moderation auditing.
Homeowners and Property Clients:
- Contact name, primary email address, property service location, and phone number;
- Job inquiry specifics: targeted trade category, scheduling availability windows, and problem descriptions;
- No homeowner account registration is required — this details are gathered exclusively per individual booking request to facilitate direct communication with your chosen tradesperson.
Automated Web System Metadata:
- Standard diagnostic routing telemetry: IP addresses, user agent browser type, and timestamps;
- Session security tokens (encrypted authentication cookies for trade business accounts).
2. Operational Purpose & No Data Brokerage Promise
Unlike conventional home services marketing networks, Basera Trades explicitly guarantees that we will never sell, lease, broadcast, or auction homeowner names, addresses, or telephone numbers to third-party telemarketers, lead brokers, or competing advertisers.
We process personal data solely for specific, essential functional purposes:
- Displaying verified contractor listings and portfolio images in the public directory;
- Instantly dispatching homeowner booking inquiries directly to the selected trade business via encrypted notifications;
- Facilitating follow-up reputational review solicitations to authentic Google Business Profile endpoints;
- Verifying contractor credentials during audit reviews;
- Defending server infrastructure against automated spam intrusions or security exploits.
3. Third-Party Infrastructure Sub-Processors
To maintain reliable high-speed web operations, we transmit encrypted functional data to trusted enterprise infrastructure providers bound by rigorous data compliance agreements:
| Infrastructure Partner | Operational Purpose | Compliance Guarantee |
|---|---|---|
| Supabase Inc. | Relational database storage and authenticated session management | SOC2 Type II / ISO 27001 |
| Resend Inc. | Transactional booking emails and review dispatch routing | Encrypted TLS Relay |
| Twilio Inc. | Instant SMS alert routing for arriving booking inquiries | Carrier TLS / SOC2 |
| Vercel Inc. | Edge CDN distribution and serverless execution environments | SOC2 Type II / PIPEDA Compatible |
4. Data Retention, Security & Verification Documents
All traffic between your browser and Basera Trades servers is protected via industry-standard 256-bit TLS HTTPS encryption. Contractor verification uploads (such as commercial liability insurance policies or trade certificates) are persisted within private cloud storage buckets accessible solely by credentialed moderation administrators for auditing validation.
We retain account listings and historical booking transaction logs until an account holder explicitly requests account deletion or data erasure.
5. Your Rights Under PIPEDA & Access Requests
Under Canadian privacy law, both homeowners and trade business owners hold the unalienable right to request access to, correction of, or complete deletion of their stored personal information. To initiate an export report of your records or execute a total data purge from our primary databases, contact our team at: hello@baseratrades.com. We fulfill all authenticated statutory privacy inquiries within 30 calendar days.
6. Strict Cookie Minimization Policy
We utilize a solitary session authentication cookie to sustain signed-in contractor account sessions (managed via Supabase Auth). This cookie is technically vital for dashboard interaction. We deploy zero advertising tracking cookies, third-party marketing pixels, or invasive consumer profiling beacons across our public directory.
7. Policy Modifications & Administration
We reserve the right to revise this privacy document periodically as our engineering platform matures. Any operational alterations will be immediately posted on this URL with an amended effective timestamp. Inquiries regarding our PIPEDA compliance practices should be directed to our privacy operations officer at: hello@baseratrades.com
Basera Trades Platforms — Canada