Privacy notice

Version 5 · Effective 24 September 2026 · Whew, Calgary, Alberta

This notice explains what personal information Whew collects when you use getwhew.ca, why we collect it, who we share it with and how you can reach us about it. Whew is an Alberta business and this notice is written to meet Alberta's Personal Information Protection Act (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect, and why

• Account details — your name, email address and mobile number. Used to create and secure your account, to send you one-time sign-in codes, and to tell you what is happening with your jobs or bookings.
• Job details (customers) — what you need done, photos you choose to add, and the address where the work is to happen. Used to describe the job to businesses that may quote on it. Businesses see your street address only after you accept their quote; before that they see the area only.
• Business details (providers) — your business's legal name, structure, service areas, availability and the categories of work you do. Used to match you with jobs and to show customers who is quoting.
• Credential documents (providers) — trade certificates, WCB coverage, liability insurance and business licence details, where a category of work requires them. Used only to check that the requirement is met. How these are held and for how long is described in our credential custody notice, published separately.
• Payment details — your card is handled by our payment processor, Stripe; Whew never sees or stores your full card number. We keep the amounts, dates and status of each payment and payout.
• Service records — quotes, bookings, changes recorded on site, completion records, messages sent through Whew, and the emails we send you. Used to run the service, to resolve disputes and to meet our record-keeping obligations.
• Technical information — the IP address and device details of requests to our servers, used for security and to keep the service working.
• How you found us (providers) — some links we share carry a channel tag, for example a link posted in a WhatsApp group or on Facebook, Instagram or LinkedIn. When you open such a link, your browser keeps the tag and the page it opened in a cookie for 30 days. If you then create a business account, we record that tag against your business, once. It tells us which channel brought you to Whew and nothing else: no browsing history, no advertising identifier, and nothing is sent back to the channel. Whew sets no other cookies except the one that keeps you signed in. You can clear the cookie at any time; an account created without it is simply recorded with no channel.

We collect only what the service needs. We do not buy personal information about you, and we do not sell it.

Consent

By creating an account you consent to the collection, use and disclosure described here. Marketing email is separate: we send it only if you opt in, and every such email carries a way to stop. Service emails about your own jobs, quotes and bookings are not marketing and are sent as long as your account is open.

Who we share it with

• The other party to your job. A customer's job details go to the businesses invited to quote; a business's name and quote go to the customer. After a quote is accepted, each side sees the contact details needed to do the work.
• Service providers that run Whew for us (PIPA s. 13.1 notice). Our database and sign-in service (Supabase) and our application hosting (Vercel) are located in Montréal, Canada. Our email delivery service (Resend) and our payment processor (Stripe) process information in the United States. We use an AI service (Anthropic, United States) to turn a customer's job description into a structured scope; the description you type is sent for that purpose and no more. Each of these providers is bound to use the information only to provide its service to us. Information held in the United States is subject to that country's laws. Questions about this can be sent to the contact below. We use an error-monitoring service (Sentry, United States) to be told when something in Whew breaks. It receives the technical details of the failure — which page, which part of the code, the browser and device type — and never your name, email, phone number, address, postal code, sign-in cookies or anything you typed; those are removed before the report leaves our servers.
• When the law requires it, for example a court order, or to investigate fraud or a safety concern.

How long we keep it

We keep personal information only as long as we reasonably need it for the purposes above and to meet legal obligations — records of bookings and payments are kept for the period tax and consumer law require. Credential documents are kept for the period stated in the credential custody notice and then destroyed. When you close your account we delete or de-identify what we no longer need.

Your rights

You may ask to see the personal information we hold about you, and ask us to correct it. Write to the contact below; we answer within 45 days as PIPA requires. If you are not satisfied with our answer, you may complain to the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).

Security

Information is encrypted in transit and at rest, access inside Whew is limited to what each role needs, and every change to a booking or payment record is logged. No system is perfectly secure; if a breach creates a real risk of significant harm to you, we will tell you and the Commissioner as the law requires.

Changes and contact

If we change this notice we will publish the new version at getwhew.ca/legal/privacy_notice with its effective date; your account records which version you accepted. Whew's Privacy Officer — the founder — is the person responsible for privacy at Whew and the person who can answer your questions about how our service providers outside Canada handle your information; reach them at support@getwhew.ca.

Whew · getwhew.ca · Calgary, Alberta · support@getwhew.ca