Privacy Policy

Last updated: 17 March 2026

This Privacy Policy describes how VolumeOps (CRA Business Number 739667350), 1000-10055 106 ST NW, Suite 339, Edmonton, Alberta T5J 2Y2, Canada ("VolumeOps," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with the VolumeOps platform and website (the "Service"). This Policy is written in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), where applicable, and other applicable provincial privacy legislation.

1. Accountability

VolumeOps is responsible for the personal information under its control. Our Privacy Officer oversees compliance with this Policy and applicable privacy law. The Privacy Officer role is fulfilled through the contact channel below—the same email and address we use for privacy requests and general inquiries identified as privacy-related.

Privacy Officer — VolumeOps
Email: [email protected]
Mailing address: 1000-10055 106 ST NW, Suite 339, Edmonton, Alberta T5J 2Y2, Canada

2. Who This Policy Applies To

This Policy applies to personal information we collect from: (a) Subscribers — business operators who register for and use the Service; (b) End customers — individuals whose information is submitted through the Service by Subscribers (e.g., customers requesting a junk removal quote); and (c) Website visitors. Subscribers are responsible for their own privacy obligations toward their end customers, including obtaining necessary consents before submitting end-customer data to the Service.

3. What We Collect and Why

Subscriber account information

We collect your business name, contact name, email address, phone number, billing address, and payment token (tokenized via Stripe; we never store raw card numbers). Purpose: account creation, authentication, billing, customer support, and service communications.

End-customer data (submitted by Subscribers)

Subscribers may submit end-customer names, email addresses, phone numbers, pickup addresses, photos of items for removal, and related messages through the Service. The Service also records whether end customers have provided SMS consent for job notifications. When SMS consent is collected on the public quote form, we store the time of submission and the IP address associated with that submission for compliance, security, and abuse-prevention purposes. Purpose: generating volume estimates and quotes on behalf of the Subscriber, sending job-related SMS notifications where consented, and sending one post-job review request as a service communication after completion.

Website visitor data

We collect IP addresses, browser type, pages visited, and referrer information via server logs for security and performance monitoring. We use minimal session and CSRF-protection cookies required for the Service to function; we do not use third-party advertising or tracking cookies. Some pages may load scripts from third parties for security (e.g., bot protection) or optional address lookup, as described below.

We do not intentionally collect sensitive personal information (e.g., Social Insurance Numbers, medical or financial account details).

Cookies and third-party scripts

We use essential first-party cookies and similar technologies for session management and CSRF protection. We do not use third-party advertising or cross-site tracking cookies. For security, public and authentication forms may load Cloudflare Turnstile, which may process technical signals and IP-related data under Cloudflare's policies. Where enabled, Google Maps / Places scripts on the quote form may process address search queries and related technical data under Google's policies. Please review those vendors' privacy notices for details.

4. Consent

We collect personal information with consent. Subscriber consent is provided at account registration and through use of the Service. Subscribers are solely responsible for obtaining any required consent from their end customers before submitting end-customer data to the Service. You may withdraw consent at any time subject to legal or contractual restrictions by contacting our Privacy Officer at [email protected]. Withdrawal of consent may result in our inability to provide the Service.

5. Use and Disclosure

We use personal information only for the purposes identified at or before the time of collection, or as permitted by law. We do not sell, rent, or trade personal information. We may disclose personal information to:

  • Service providers (including, without limitation): Stripe (payment processing); OpenAI (AI photo analysis); Twilio (SMS notifications); Cloudflare (Turnstile bot protection on selected forms); Google (Maps / Places address autocomplete on the public quote form, when configured); and your configured email delivery provider (e.g., SMTP or transactional email) for service and notification messages. Each is engaged under contractual or standard terms requiring appropriate handling of personal information.
  • Legal and regulatory authorities: where required by applicable law, court order, or regulatory requirement.
  • Business successors: in connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.

We do not use personal information for advertising to or marketing by third parties.

6. AI Processing

Photos submitted through the Service are sent to OpenAI's API for volume estimation only. We do not use your or your end customers' photos or other data to train our own or third-party AI models for purposes unrelated to providing the Service to you. OpenAI processes data under its own privacy and data usage policies. AI-generated estimates are provided as estimates only and may not be error-free.

7. Retention

We retain personal information only as long as necessary for the purposes for which it was collected, or as required by law:

  • Subscriber account data: retained for the duration of the Subscription plus 7 years (to satisfy applicable tax and billing record obligations), then securely deleted.
  • End-customer quote data (photos, contact details, messages): retained for the duration of the Subscriber's active account plus 90 days after account termination, then securely deleted.
  • Website server logs: retained for up to 90 days.

Following termination of a Subscription, Subscribers may request an export of their data by contacting us (Privacy Officer or Support) for up to 30 days; we will provide a reasonable export in a common electronic format where technically practicable. We retain account and end-customer data for up to 90 days from the end of the Subscription, after which it may be permanently deleted. Billing records and data required under applicable law are retained for the period required by law.

8. Safeguards

We protect personal information using industry-standard safeguards appropriate to the sensitivity of the information, including: TLS encryption in transit; encryption at rest; access controls limiting access to authorized personnel; and activity logging. Sub-processors (such as Stripe, OpenAI, Twilio, Cloudflare, Google when used, and your email provider) maintain their own security programs. No security measure is perfect; in the event of a breach posing a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and affected individuals as required by PIPEDA.

9. Data Storage Location

Subscriber and end-customer data is stored on servers located in Calgary, Alberta, Canada. AI photo analysis is processed via OpenAI's API, payments via Stripe, and SMS notifications via Twilio; Turnstile, Google Maps/Places (when used), and your configured email provider may also process personal information off-platform. These providers may process data outside Canada under their own agreements and privacy programs.

10. Your Rights

Under PIPEDA, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Withdraw consent (subject to legal or contractual restrictions).
  • Request deletion of your personal information (subject to retention obligations under applicable law).
  • File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe we have not complied with PIPEDA.

To exercise these rights, contact our Privacy Officer at [email protected]. We will respond within 30 days.

11. Anti-Spam (CASL)

When Subscribers use the Service to send communications to their end customers (e.g., review requests, SMS notifications), Subscribers are responsible for compliance with Canada's Anti-Spam Legislation (CASL) and any other applicable anti-spam or direct-marketing laws. For Alberta and other Canadian jurisdictions, Subscribers must ensure they have an appropriate legal basis and all necessary express or implied consents before enabling outbound communications through the Service.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or in-app notice where practicable. The current version is always available on our Privacy Policy page. Continued use of the Service after the effective date of changes constitutes acceptance.

13. Contact

For privacy questions, access requests, or to file a complaint:

Privacy Officer — VolumeOps
Email: [email protected]
Contact form: Contact us
Mailing address: 1000-10055 106 ST NW, Suite 339, Edmonton, Alberta T5J 2Y2, Canada

Questions about these terms?

Email us and we'll usually respond within one business day.

Contact us