Back to Syndex

Legal

Privacy Policy

Effective August 21, 2026 · Version 2026-08-21

This policy explains what Syndex collects when you use syndex.ca, why we collect it, who we share it with, and what you can ask us to do about it. We handle personal information under Alberta’s Personal Information Protection Act (PIPA) and Canada’s PIPEDA where it applies.

1. What we collect

Account and profile. Your email address and password (stored hashed by our authentication provider — we never see it), your name, business name, phone number, city, trade, and the details you choose to add: service area, crew size, years in business, rates, insurance status and limits, a short bio, and a profile photo.

Verification documents. If you are a subcontractor, the Workers’ Compensation Board document you upload. It is stored in private storage and is visible only to you and to Syndex staff reviewing it — never to other members.

Requests and replies. If you are a GC: the requests you post, including job title, trade, location, date, crew size, budget range, and description. If you are a sub: which requests you were invited to and how you replied.

Consent records. Which version of these documents you accepted and when, and whether you opted in to promotional email. Canadian law requires us to be able to demonstrate consent, so we keep this record.

Internal notes. Notes our staff write about an account while reviewing or supporting it — why an application was held, what a support conversation covered. They are visible only to Syndex staff and never to other members, and like everything else here you can ask to see them (section 7).

Operational logs. Records of messages we sent you and whether delivery succeeded, plus standard server logs from our hosting provider.

Usage measurement. We count page views and visits using our hosting provider’s built-in analytics. It sets no cookies and builds no profile of you: each visit is counted using a short-lived, non-reversible value derived from the request, and we see only aggregate numbers — which pages are viewed and how many people viewed them. We do not use advertising trackers, third-party analytics cookies, or cross-site tracking of any kind, and we do not attempt to identify individuals from this data.

2. Why we collect it

  • To run the matching service — to invite you to relevant requests, show your replies to the GC who posted, and let members contact each other.
  • To verify members — a person reviews your WCB document so other members can rely on the network being screened.
  • To communicate with you — invitations, replies, verification outcomes, and account, security, and legal notices.
  • To improve and secure the service — diagnosing failures, preventing abuse, and keeping records we are required to keep.
  • To send promotional email, only if you opt in — product news, new features, and offers.

3. Who sees your information

Other members, in a limited way. When a sub replies to a GC’s request, that GC sees the sub’s business name, contact name, phone, email, city, service area, trade, verification status, insurance status, crew size, years in business, rate, bio, photo, and how quickly they replied to that request — the information needed to decide whether to hire them and how to reach them. A sub who is invited to a request sees the request details and who posted it: the GC’s company name, city, the month that GC joined Syndex, and how many requests they have posted. Subs do not see the GC’s contact name, phone, or email — contact runs from the GC to the sub, and the GC decides when to make it. Members who are not matched with you do not see your profile: there is no public or browsable directory of members.

That list is exhaustive. Our internal notes about you and the stored location of your verification document are not part of it and are not served to another member’s account, at the database level as well as in the interface.

Service providers. We use a small number of processors to run the service: a database and file storage provider (hosted in Canada), an application hosting provider, and an email delivery provider. They process data on our instructions only.

Cross-border processing. Our hosting and email providers operate in the United States, so some information — including your email address and message contents — is processed and stored outside Canada and is subject to the laws of that country, including lawful access by its authorities.

Legal. We may disclose information where required by law, to enforce our terms, or to protect the rights and safety of members and the public. We do not sell your personal information, and we do not share it with advertisers.

4. Email you receive from us

Operational email is part of the service and continues while your account is open — invitations, replies, verification outcomes, and account, security, and legal notices. These are not promotional and have no unsubscribe link, because turning them off would break the service you signed up for. To stop them, ask us to close your account by emailing privacy@syndex.ca from the address on the account. There is no self-serve close button in the product today; we action closure requests within a reasonable period and tell you when it’s done.

Promotional email is optional and separate. We send it only with your express consent, it always identifies us and includes a working unsubscribe link, and you can turn it off at any time in your account settings or from any such message. Unsubscribing takes effect immediately and changes nothing else about your account.

5. How long we keep it

We keep your profile and activity while your account is open. Closure is by request — email us and we’ll close it — and when an account is closed we delete or anonymize personal information within a reasonable period, except where we must keep it longer — consent records, records of messages sent, and anything needed to resolve a dispute or meet a legal obligation. Backups are cycled out on a rolling basis.

6. Security

Access to member data is restricted at the database level so that members can only reach their own records and the records they are matched with. Verification documents are held in private storage and served only through short-lived links. Administrative access is limited and separately controlled. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected members and the Office of the Information and Privacy Commissioner of Alberta as required.

7. Your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it, and you can withdraw consent — including promotional consent — at any time. Most of it you can change yourself in your profile. For anything else, email privacy@syndex.ca. We respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Information and Privacy Commissioner of Alberta.

8. Children

Syndex is a service for businesses operating in Calgary and area, Alberta, Canada. It is not directed at children and we do not knowingly collect information from anyone under 18.

9. Changes to this policy

When we make a material change we publish the new version here with a new version number and effective date, and ask you to acknowledge it in the app.

10. Contact

Privacy questions and requests: privacy@syndex.ca. General contact: hello@syndex.ca.

See also our Terms of Service.