Privacy Policy

Last updated: March 8, 2026

FenceFlow (“we,” “us,” or “our”) is committed to protecting the privacy of our customers and the individuals who interact with our platform. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.

1. Privacy Officer

FenceFlow has designated a Privacy Officer who is accountable for our compliance with this Privacy Policy and PIPEDA. You may contact our Privacy Officer with any privacy-related questions or concerns:

2. Information We Collect

From fence company customers (our business clients):

• •Business name, contact name, email address, and phone number
• •Company branding assets (logos, color preferences)
• •Pricing configurations and business settings
• •Payment information (processed and stored securely by Stripe; FenceFlow does not store credit card numbers)

From homeowners (individuals who use the quoting widget):

• •Name, email address, and phone number
• •Property address
• •Fence project details (fence type, materials, dimensions, gate preferences)
• •Property map data and fence line drawings (via Google Maps)
• •Customer type (residential or commercial)
• •Additional notes or comments about the project

Automatically collected information:

• •Device type and browser information
• •IP address and general geographic location
• •Pages visited and interactions with the Service

3. How We Use Information

We collect and use personal information only for the purposes identified at or before the time of collection. These purposes include:

• •Generating fence quotes and delivering lead information to the appropriate fence company
• •Processing subscription payments and managing billing
• •Providing customer support and responding to inquiries
• •Sending transactional communications (account confirmations, quote notifications, password resets)
• •Improving the Service, including analytics and performance monitoring
• •Complying with legal obligations

4. Who We Share Information With

We share personal information only with the following categories of recipients, and only to the extent necessary for the identified purposes:

• •Fence companies: Homeowner information submitted through the quoting widget is shared with the fence company whose widget was used
• •Stripe: Payment processing (Stripe's privacy practices are governed by their own privacy policy)
• •Supabase: Database hosting and authentication services (data stored in the United States)
• •Vercel: Application hosting and content delivery (servers in the United States)
• •Resend: Transactional email delivery (quote notifications, account communications)
• •Loops: Marketing email communications (with your express consent only)
• •Google: Maps API for property visualization and fence line drawing

We do not sell personal information to third parties. We do not share personal information for advertising purposes.

5. Cross-Border Data Transfers

FenceFlow is based in Ontario, Canada. However, certain personal information may be stored and processed in the United States through our service providers (Supabase, Vercel, Stripe). When your information is transferred to another jurisdiction:

• •It may be subject to the laws of that jurisdiction, including lawful access requests by courts, law enforcement, or government authorities
• •We ensure that our service providers maintain a comparable level of protection through contractual agreements and industry-standard security certifications (including SOC 2 compliance)

6. Data Retention

We retain personal information only as long as necessary to fulfil the purposes for which it was collected:

• •Active accounts: Data is retained while your subscription is active
• •Cancelled accounts: Data is retained for 30 days after your subscription ends, then permanently deleted
• •Homeowner quotes: Retained for the duration of the fence company's active subscription
• •Legal requirements: Certain records may be retained longer if required by law (e.g., billing records for tax purposes)

7. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

• •Access: Request a copy of the personal information we hold about you
• •Correction: Request correction of inaccurate or incomplete information
• •Withdraw consent: Withdraw your consent for certain uses of your information (subject to legal or contractual restrictions)
• •Complain: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact our Privacy Officer at privacy@getfenceflow.com. We will respond to your request within 30 days.

8. Cookies and Tracking

FenceFlow uses cookies and similar technologies for the following purposes:

• •Necessary cookies: Session management, authentication, and security (required for the Service to function)
• •Functional cookies: Google Maps functionality within the quoting widget

We do not use third-party advertising or cross-site tracking cookies. The quoting widget embedded on fence company websites may set cookies for session management; these are disclosed in this policy and are strictly necessary for the widget to function.

9. Security Safeguards

We implement appropriate technical and organizational safeguards to protect personal information, including:

• •Encryption in transit (TLS/HTTPS for all communications)
• •Encryption at rest for stored data
• •Row-level security (RLS) policies to ensure data isolation between customers
• •Role-based access controls
• •Regular security audits and automated vulnerability scanning
• •Secure payment processing through Stripe (PCI DSS compliant)

10. Breach Notification

In the event of a security breach involving personal information that poses a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and affected individuals as soon as feasible, as required by PIPEDA. We maintain a breach record in accordance with regulatory requirements. If a breach affects information processed on behalf of a fence company, we will also notify the affected company so they can take appropriate action.

11. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email to our business customers. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

13. Contact

For privacy-related inquiries or to exercise your rights under PIPEDA, please contact: