Privacy Policy

Naiiled Platform Inc. Effective Date: March 11, 2026 Contact: naiiledinfo@gmail.com

1. Overview

Naiiled Platform Inc. ("Naiiled," "we," "us," or "our") operates the Naiiled marketplace platform ("Platform"), which connects homeowners with independent contractors. We are committed to protecting the personal information of all users in accordance with PIPEDA and applicable Canadian privacy law.

By using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

2. Information We Collect

2.1 Account Information (All Users)

• Full name (first and last)
• Email address
• Phone number and country code
• Physical address (street address, city, province/state, country, postal code)
• Geographic coordinates (latitude/longitude — stored internally; publicly displayed only in an obfuscated form with a ~500m radius offset)

2.2 Builder-Specific Information

In addition to the above, Builders provide:

• Company name and business type (Individual, Sole Proprietor, or Incorporation)
• Stripe Connect account ID and verification status (Not Verified, Pending, Verified)
• Trade type specializations (used for job-matching notifications)
• Portfolio images and past project photos

2.3 Job and Quote Information

• Job descriptions, trade types, and reference photos submitted by homeowners
• Quote details, pricing, timelines, and descriptions submitted by builders

2.4 Reviews

• Star ratings (1–5) and written review comments submitted by users about other users

2.5 Payment and Transaction Data

Payment card details are processed and stored exclusively by Stripe — we never store card numbers or full payment credentials. We do store:

• Total quoted amounts, platform fees (homeowner and builder), and net payout amounts per job
• Milestone payment phase amounts and statuses
• Affiliate commission amounts and statuses
• Stripe payment intent IDs and references (for reconciliation)

2.6 Affiliate Information

Registered affiliates' affiliate codes, associated referral activity, and commission history.

2.7 Technical and Log Data

• AWS Cognito account identifiers (UUIDs)
• Authentication tokens (JWT — not persisted by Naiiled beyond session use)
• Application logs (AWS CloudWatch) including timestamps, IP addresses, and request metadata
• Email delivery metadata (AWS SES)

3. How We Use Your Information

We use your personal information to:

• Create and manage your account and verify your identity
• Match homeowners with relevant Builders based on job trade types, and send email notifications to matching Builders about new jobs (city/province/country only — full address not shared)
• Process payments and payouts through Stripe, including milestone releases and affiliate commission transfers
• Verify Builder identity for Stripe Connect KYC/AML compliance
• Send platform notifications such as quote activity, job updates, and account communications via email (AWS SES)
• Calculate and distribute affiliate commissions
• Enforce our Terms and Conditions and investigate potential violations
• Improve the Platform through usage analytics and operational monitoring

4. Third-Party Service Providers

We share personal information with the following third-party service providers solely to operate the Platform:

Provider	Purpose	Privacy Policy
Stripe	Payment processing, Builder KYC/AML verification, fund transfers and payouts	stripe.com/privacy
AWS Cognito	User authentication and identity management	aws.amazon.com/privacy
AWS S3	Secure image storage (profile photos, job images, portfolio photos)	aws.amazon.com/privacy
AWS SES	Transactional and notification email delivery	aws.amazon.com/privacy

All AWS infrastructure (Aurora PostgreSQL database, SQS, CloudWatch, SSM) is operated by Naiiled Platform Inc. — not a third-party data processor.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

5. Information Sharing

We may share your information in the following limited circumstances:

• With Builders: When a homeowner posts a job, Builders with matching trade types receive a notification including the job's general location (city, province, country). Full street addresses and coordinates are not shared.
• With Homeowners: Builder profiles — including name, company name, trade types, reviews, and ratings — are visible to authenticated homeowners.
• With Stripe: Billing details (name, address, email) are transmitted to Stripe as required to process payments and complete KYC verification.
• With law enforcement or regulatory authorities: Where required by applicable law, court order, or to protect the safety of users or the public.
• In a business transfer: If Naiiled Platform Inc. undergoes a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

6. Data Retention

Data Type	Retention
Active account data	Retained while your account is active
Soft-deleted accounts	Account is deactivated but data is retained in our database until you request full deletion (see Section 7)
Payment records	Retained for a minimum of 7 years to satisfy legal, accounting, and tax obligations
S3 images	Deleted upon confirmed account deletion
Application logs (CloudWatch)	Retained per AWS default log group settings
SQS messages	Up to 14 days (AWS SQS queue retention period)

Note on account deletion: When you delete your account through the Platform, your account is deactivated (soft-deleted). Your personal data is retained in our systems. If you wish to have all of your personal data permanently deleted, you must submit a deletion request directly to us at naiiledinfo@gmail.com. Deletion requests are subject to our legal retention obligations (e.g., payment records required for tax compliance cannot be deleted before the 7-year retention period expires).

7. Your Rights Under PIPEDA

As a resident of Canada, you have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Withdrawal of Consent: Withdraw your consent to our collection or use of your personal information, subject to legal or contractual obligations. Note that withdrawing consent may limit your ability to use the Platform.
• Deletion: Request permanent deletion of your personal data (subject to legal retention requirements) by contacting us at naiiledinfo@gmail.com.

To exercise any of these rights, contact us at: naiiledinfo@gmail.com

We will respond to access and correction requests within a reasonable timeframe, and no later than 30 days from receipt.

8. Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption in transit: All data transmitted between clients and our servers uses TLS encryption.
• Encryption at rest: Data stored in Aurora PostgreSQL and S3 is encrypted using AWS-managed server-side encryption.
• Access control: Access to the Platform requires Cognito JWT authentication; image storage uses AWS Identity Pool credentials with least-privilege permissions.
• Secrets management: All credentials and API keys are stored in AWS SSM Parameter Store — no hardcoded secrets in source code.

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of your information.

9. Cookies and Tracking

The Naiiled API is a backend service and does not directly set cookies. Any cookie usage is determined by the client application (mobile app or web frontend) that accesses the Platform. Please refer to the privacy notice of the specific client application you use for information about cookies and tracking technologies.

10. Children's Privacy

The Platform is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at naiiledinfo@gmail.com and we will promptly delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy at any time. When we do, we will notify you by updating the "Effective Date" at the top of this policy and, where practicable, by sending a notification to your registered email address. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy. If you do not agree, you must stop using the Platform and may request account deletion as described in Section 6.

12. Contact Us

For privacy-related inquiries, requests, or complaints:

Naiiled Platform Inc. Email: naiiledinfo@gmail.com

Last updated: March 11, 2026