Your privacy, handled with care

We collect only what we need to run the marketplace. Most of it comes from you; some is created as you use Yobly.

• Account info — your name, email address, password (stored only in hashed form), language preference, and a profile photo if you add one. If you give a phone number, we keep it with your account. If you sign in with Google, we receive your name, email address and basic profile details from Google.
• Job details — what you post: the service you need, your description, timing, photos you add, and the address of the work. We turn your postal code, city and province into an approximate map point so we can find pros near the job. We keep a fingerprint (hash) of job-post photos so they cannot be reused as proof of work.
• Quotes, bookings and payments — quotes, accepted bookings, amounts, taxes, invoices, and the status of payments held until the work is approved, refunds and payouts. Card payments will be processed by our payment partner, Stripe; Yobly will not receive or store your full card number.
• Messages, reviews and disputes — messages and files you send through Yobly, reviews and ratings, and what you write and upload if you open or answer a dispute.
• Job photos & location — photos of the work taken with the in-app camera by the pro or their crew (on arrival, during the work and at completion), with the time, the device location at that moment and technical details (see Section 6).
• Support — what you write to our support assistant or our team, and emails you send to our support or privacy address, with your name and email address.
• For pros — your business profile (business name, description, logo, service area and categories); business contact details (phone number, business address, postal code, business number); GST/HST and QST registration numbers if you give them; identity and business documents you upload for verification (such as a government ID or proof of insurance); and payout details: account holder name, legal name, financial institution and transit numbers, and only the last four digits of the bank account number (some older accounts instead have an Interac e-Transfer email address). When you change payout details, we email you a one-time code to confirm it is you.
• Records of your choices — which version of our terms and of this policy you accepted and when, your email preferences, and consent records for crew links.
• Usage & device — basic technical data such as your IP address, browser type, pages requested and error logs, to keep the service secure and working.
• Location you choose to share — if you tap “Use my location” on the browse page, your browser shares your location. We round it to about 1 km before using it to show pros near you.

We use your information for clear, limited purposes — the ones you would expect:

• To create and secure your account, sign you in and let you reset your password.
• To run the marketplace: show jobs to pros, tell pros about new jobs in their service area, let you exchange quotes and messages, and book, pay for and complete a job.
• To hold payments until the work is approved, issue refunds and payouts, produce invoices and receipts, and calculate sales tax based on the tax registration the pro declares.
• To keep the platform safe: prevent fraud and abuse, moderate messages and reviews, hide phone numbers and email addresses in messages, review proof of work, handle disputes, and warn or suspend accounts that break our rules.
• To protect accounts and prevent fraud, we may compare contact and payout details across accounts. Only authorized staff see the result, and it never triggers an automatic action.
• To meet our legal obligations, including tax and accounting records. For pros, this includes reporting earnings and identifying details (such as legal name, address, business number and yearly payment totals) to the Canada Revenue Agency where Part XX of the Income Tax Act requires it.
• To answer your support requests and privacy requests.
• To email you:
  • Emails you need to use Yobly — about your quotes, bookings, payments, disputes, account security, support replies and privacy requests, messages from the Yobly team, and a reminder when you have unread messages (at most once every three hours per conversation, without the message content). These are part of the service and can't be turned off in your settings.
  • “New job leads” emails (pros only) — emails about new jobs that match your services and area, including jobs from your past customers. These are promotional: you can turn them off at any time in Account → Email notifications or with the unsubscribe link in each email.
  • Announcements — we may show announcements in the app. We email only announcements about the service itself, never promotions.

We ask for your consent before using your information for a new purpose you would not reasonably expect.

We use automated tools, including artificial intelligence (AI), for four things:

• Writing your job post. The text you write is sent to an AI model that suggests a title, category, clearer details, follow-up questions and an estimated budget range. You review the result before you post.
• Message moderation. Messages are checked automatically before they are delivered. The check can block a message (for example, harassment, hate, illegal content, or an attempt to take payment outside Yobly) or hide contact details. Our own filter also hides phone numbers and email addresses.
• Support assistant. When you chat with our support assistant, your messages are sent to an AI model to write replies. If you ask to talk to a person, the conversation is saved and our team reads it.
• Review check. Before a written review is published, its text is checked automatically. A review that may break our rules is held for a person on our team to decide. Negative reviews that follow our rules are published. A rating without text is published right away.

What you should know:

• Who processes it. These AI requests are currently processed by Google (Gemini API). Google may process them outside Canada, including in the United States.
• What we send. Only the text needed for the task. We do not add your name, email address or payment details to these requests — but anything you type yourself is sent as written.
• We do not sell your information.
• Matching is not AI. Pros are told about jobs based on the job's category and its distance from their service area.
• People make the final decisions. Disputes, payouts, suspensions and privacy requests are decided by people on our team. If an automated check blocked your message or held your review and you think it was wrong, write to support@yoblyai.com and a person will look at it.

We never sell your personal information. We share it only as needed to run Yobly:

• The other side of your job. Signed-in members can see a summary of open jobs on the job board; pros can see the full description and photos so they can quote. Your street address is shown only to the pro you hire, after you pay. The customer sees the pro's business profile, quotes and the job photos the pro shares. We do not show your phone number or email address to the other side — you talk through Yobly messages.
• In a dispute. Both sides and Yobly see what each side writes, the photos each side adds, and the decision.
• What is public. A pro's business name, description, logo or profile photo, city, service categories, rating and reviews. Reviews are shown without the author's name. Profile photos are stored in a publicly accessible location.
• Service providers that power Yobly, each only for its part and under contract:
  • Supabase — database, file storage and sign-in (Canada).
  • Vercel — hosting of the website and app (Montréal region).
  • Resend — sending our emails (United States).
  • Cloudflare — our domain name service and the routing of email sent to our addresses.
  • Google — Sign in with Google (if you use it); Gmail, which keeps a copy of emails sent to our support and privacy addresses; Maps geocoding, which receives only a postal code, city and province, or the place you type into the “near” search on the browse page; and the Gemini API for AI (Section 3).
  • Stripe — card payments, once they are enabled.
• Government and the law. When the law requires it — for example, tax reporting to the Canada Revenue Agency, a valid legal request, or to protect someone's safety or rights.

• Our main database and files are stored in the Canada (Montréal) region, and our website and app run in a Montréal hosting region. We chose these regions to keep personal information in Canada wherever we can.
• Some service providers process information outside Canada, mainly in the United States: Resend (email addresses and email content), Google (AI requests, geocoding, Gmail and Google sign-in), Vercel and Cloudflare (global networks that carry web and email traffic and may keep technical logs), and Stripe once card payments start.
• Information processed in another country is subject to that country's laws and may be accessed by its courts and authorities.
• Québec residents: see Section 10.

Once a job is paid, the hired pro documents it with photos taken in the app — on arrival, during the work and at completion. A job can be submitted as done only with the required number of completion photos. Here is exactly what that involves:

• Taken in the app. Photos are taken with the in-app camera by the pro, or by a crew member the pro invites through a crew link. A crew link works for a limited time (48 hours by default, never more than 7 days) and for a limited number of photos. The app does not offer a way to pick proof-of-work photos from a gallery.
• Location is required. With each photo we record the location the device reports at that moment, its accuracy, the time and the device's clock offset. A photo without location is not saved. We never track location between photos. We also record the IP address and browser details of the upload, and the approximate country derived from the IP address.
• Why. To show that the work happened at the job, to prevent fraud, and to serve as evidence if there is a dispute. We compute the distance between the photo and the job's postal-code area (we do not send the street address to our mapping provider). Our systems also flag signals such as the same file used again, identical coordinates, a location outside Canada, a clock mismatch, or an upload that did not come from a regular browser.
• What is automatic. A completion photo taken too far from the job area does not count toward the required photos unless a Yobly reviewer accepts the job's location. A file already used before — at another step of this job, on any other job on Yobly, or a photo the customer added to the job post — never counts. A completion photo smaller than 480 pixels on its shorter side does not count either. The distance and the signals never approve or reject a job, release a payment, or penalize anyone by themselves: payment is released only after approval by the customer and by Yobly.
• Who sees what. The pro sees all photos for their job. The customer sees the photos the pro shares, with an indication of whether each one was taken on site — not the exact coordinates. Precise coordinates, IP address, country and browser details are visible only to authorized Yobly staff, who use them to review work, prevent fraud and handle disputes.
• Crew members. If you upload through a crew link, you do not need a Yobly account. The pro who sent you the link is responsible for bringing this policy to your attention; the link page also explains it before you start. You accept on the link page and can withdraw at any time, which stops the link from uploading. We keep a record of your consent (time, notice version, IP address and browser) as proof. You can exercise your rights (see Section 9) by writing to privacy@yoblyai.com — mention the job or the link.
• Québec. The location function is described here and on the link page before you accept, and it runs only when you take a photo (Act respecting the protection of personal information in the private sector, ss. 8.1 and 9.1).

• While your account is open, we keep your information to provide the service. For most records we have not yet set a fixed deletion period; when we do, we will update this policy.
• Money records — invoices, payments, escrow, refunds, credits and subscriptions — are kept as long as tax and accounting law requires (in Canada, generally at least six years).
• Job photos & location. Photos stay as long as the job record. The precise coordinates, IP address and browser details recorded with each photo are deleted automatically 90 days after upload; we keep the photo's time and clock offset, the distance to the job, the accuracy, whether it counted as on site, and the approximate country. Records of failed crew-link attempts are deleted after 90 days. Crew consent records are kept with the job.
• Security records. IP addresses used to limit repeated requests are kept only for a short time.
• When you delete your account, we delete or anonymize: your profile (name, phone number, photo and language preference); your sign-in details, including your email address; the name and email address you gave in support conversations; and, for pros, your public profile and service categories, business contact details and payout details.
• What stays on file after deletion, attached to your anonymized account: money records; job completion records and proof-of-work photos; disputes; your job posts (including descriptions, photos and service addresses), quotes, appointments and reviews; messages you exchanged, including attached photos (the other member keeps their copy); what was written in support conversations; for pros, the verification documents you uploaded (including the files) and the history of your service category changes and requests; your notification history and the record of the terms you accepted; and a record of your request. Details written inside these records, such as the name on an invoice or a service address, are not changed. We have not yet set a fixed period for how long these records are kept. The full list is also shown in Account → Privacy & your data before you send a request.

• We use encryption in transit, database access controls (row-level security) and least-privilege access to protect your data.
• Job photos, message attachments, proof-of-work photos and verification documents are stored privately and opened through short-lived links. Profile photos and logos are public (Section 4).
• Staff access depends on their role. Decisions on held reviews and on privacy requests are made by administrators. Staff actions are recorded in an audit log.
• Changing a pro's payout details requires a one-time code sent by email.
• No system is perfectly secure, but we work continuously to protect your information. If a privacy breach creates a risk of serious harm, we will notify you and the authorities as the law requires.

Under PIPEDA (and Québec law, see Section 10) you can:

• Access your personal information. You can download a copy at any time in Account → Privacy & your data (a structured JSON file; photos and documents are listed, not attached), or write to us for anything the file does not cover.
• Correct information that is wrong or out of date — in your account settings, or by writing to us.
• Withdraw consent — for example, turn off “New job leads” emails or withdraw a crew-link consent. Some information is needed to provide the service, so withdrawing consent may mean you can no longer use part of Yobly.
• Ask us to delete your account — in Account → Privacy & your data or by email. A person on our team reviews every request and we respond within 30 days. Open jobs, quotes, money held in escrow or an open dispute must be settled first. You will get a notification and an email each time the status of your request changes. Section 7 explains what is deleted and what stays on file.
• Ask questions or make a complaint about how we handle your data — and escalate to the Office of the Privacy Commissioner of Canada if you are not satisfied.

Uploaded photos through a crew link without an account? The same rights apply — write to privacy@yoblyai.com and mention the job or the link.

To exercise any of these rights, contact us using the details in Section 13. We may ask you to confirm your identity before acting on a request sent by email.

If you live in Québec, the Act respecting the protection of personal information in the private sector also applies:

• Person in charge. The owner of KK Car Wrap & Sign Ltd. is the person in charge of the protection of personal information for Yobly. Contact details are in Section 13.
• Your rights. In addition to the rights in Section 9, you can ask for your computerized personal information in a structured, commonly used format (the download in Account → Privacy & your data), and ask us to stop disseminating your information or to de-index a link to it where the law allows.
• Automated decisions. Some decisions are made automatically: blocking a message, holding a review for a check, and whether a proof-of-work photo counts (Sections 3 and 6). You can ask us what information was used and the main reasons for the decision, and ask a person on our team to review it — write to support@yoblyai.com or privacy@yoblyai.com.
• Location and identification. Photo location runs only when a photo is taken; “Use my location” runs only when you tap it; the country derived from an IP address is used only to prevent fraud. We do not use these to profile you for advertising.
• Outside Québec. Your information may be communicated to service providers outside Québec, including in other provinces and in the United States (Section 5).
• Complaints. You can also file a complaint with the Commission d'accès à l'information du Québec.

• Necessary cookies only. We use cookies to sign you in and keep your session secure, and to remember your language.
• Storage on your device. Your browser also keeps a few items on your device: your light/dark theme choice, a draft of the job you are writing (text and address), a reference to your support chat, and, on crew links, information needed to keep working without signal. These stay on your device until you submit them; clearing your browser data removes them.
• No analytics or advertising trackers. We do not use analytics, advertising or social media tracking tools. If we ever add them, we will ask for your consent first; they will stay off until you turn them on.

• When we change this policy, we update the date at the top of this page.
• When a new version needs your acceptance, we show it to you when you are signed in and ask you to accept it before you can post a job, quote, book, pay, or buy credits or a plan. You can still read, send messages, cancel, and finish work that is already paid while you decide.
• We never treat continued use as acceptance of a new version.
• If we want to use your information for a new purpose, we will ask for your consent first.

Yobly is operated by KK Car Wrap & Sign Ltd., which is responsible for the personal information described in this policy. Our Privacy Officer is the owner of KK Car Wrap & Sign Ltd..

For any privacy question, access or deletion request, or complaint, write to our Privacy Officer at privacy@yoblyai.com. We respond to requests within 30 days, as the law requires.

For other questions about your account or a job, write to support@yoblyai.com.

Yobly's mailing address: Unit 622, 3100 Keele St, North York, ON M3M 0E1, Canada.