Privacy Policy

This Privacy Policy explains how Jobyard handles personal information through jobyard.ca, the Jobyard dashboard, and the communications and scheduling service we provide to local businesses (the “Service”).

For account, website, support, and direct sales information, Jobyard determines why and how that information is handled. When Jobyard answers calls, sends messages, manages contacts, or books appointments for a business, that business controls its customer relationship and Jobyard processes the information to provide the Service. Businesses are responsible for giving their callers and customers any notices and choices required by applicable law.

Jobyard’s Privacy Lead is accountable for this Policy and can be reached at hello@jobyard.ca.

Depending on how the Service is used, Jobyard handles:

• Account and business information: names, email addresses, membership and access records, business contact details, services, hours, policies, verified facts, booking rules, notification preferences, and configuration history.
• Customer and lead information: names, phone numbers, email addresses, preferred language, notes, requested services, booking fields, appointments, estimates, invoices, photos and other attachments, file metadata, work status, and related history supplied by the business or its customers.
• Communications: call metadata, call recordings when recording is enabled, transcripts, summaries, operational classifications, SMS content, website-assistant messages, staff replies, delivery state, and escalation details.
• Scheduling and integrations: Jobyard appointments, blocked time, and the identifiers, calendar availability, and encrypted authorization credentials needed for an optional connected calendar.
• Business listing lookup: the search text, country, language, selected Google Place ID, and listing details used to suggest business information during setup.
• Technical and security information: IP address and request metadata, device and browser information available in service logs, authentication sessions, audit events, tool outcomes, errors, and provider usage records.

Jobyard does not ask callers for payment-card details through the receptionist and is not designed for emergency, medical, or other highly sensitive requests.

We receive information from business owners and their authorized team members; from callers, texters, and website visitors who communicate with those businesses; from telephone, authentication, hosting, and calendar providers used to deliver the Service; and from the Service itself when it creates an appointment, notification, transcript, audit event, or operational record.

Jobyard uses information to:

• authenticate members and keep each business’s data within its authorized tenant;
• answer customer requests from verified business facts and configured services;
• check availability, create and manage bookings, and mirror optional calendar events;
• send transactional confirmations, reminders, follow-ups, and owner notifications;
• produce transcripts, call summaries, intent and sentiment indicators, and follow-up tasks;
• provide support, diagnose failures, secure the Service, prevent abuse, and reconcile provider actions;
• measure provider usage and costs; and
• comply with legal obligations and enforce agreements.

We do not use one business’s customer records as verified facts for another business. The public marketing preview uses fictional deterministic data, not live customer information.

Jobyard uses automated voice and language systems to converse with callers and to support transcription, summaries, service-request understanding, and message responses. Relevant business configuration and communication content may be sent to those systems only as needed to perform the requested function. Business rules, such as whether a service is offered, what availability exists, and whether a booking was committed, are decided by Jobyard’s application tools rather than treated as model-generated facts.

When recording is enabled, telephone calls are recorded through the business’s telephone service. Recordings may contain the caller’s voice, the conversation, and incidental personal information. Jobyard may store the recording and create a transcript, summary, intent, sentiment, and operational tags. Jobyard does not use voice recordings to create a voiceprint or authenticate a person by voice.

The business using Jobyard is responsible for telling callers that a call is being recorded, explaining the purpose, obtaining any required consent, and offering an appropriate alternative where required. SMS and website conversations are stored with their delivery and operational history so the business can see and continue the customer relationship.

Jobyard relies on service providers to operate the Service. These currently include Clerk for authentication, Twilio for telephone and SMS, xAI for voice and language processing, Railway and compatible infrastructure providers for application hosting, databases, and private object storage, and Google when a business searches for a public listing or chooses to connect Google Calendar. Google listing lookup is subject to the Google Privacy Policy. Providers receive only the information needed for their function and process it under their applicable service terms and agreements with Jobyard or the business.

We may also disclose information to authorized members of the relevant business; at the business’s direction; to professional advisers bound by confidentiality; in connection with a financing, reorganization, or sale subject to appropriate protections; or where required to comply with law, protect people, investigate abuse, or secure the Service.

Jobyard does not sell personal information.

Jobyard is operated from Canada, but some providers process or store information in the United States or other jurisdictions. Information in another jurisdiction may be subject to that jurisdiction’s laws and lawful access by its courts, law-enforcement, or national-security authorities. Jobyard assesses providers and uses contractual and technical controls appropriate to the information and service involved.

Jobyard currently retains account, business, customer, booking, call, recording, transcript, conversation, attachment, and operational records while the applicable business account is active so the Service can provide history, follow-up, support, and auditability. Account closure does not currently trigger instant self-service deletion; the business must coordinate closure, export, and deletion with Jobyard.

We delete or anonymize personal information when it is no longer required for the purposes described here, subject to legal, security, fraud-prevention, dispute, backup, and legitimate audit needs. Records connected to an access request or legal hold may be kept long enough to complete that process. Provider copies are removed according to the relevant provider’s deletion process. Contact us for the retention and deletion status applicable to a specific account or record.

Jobyard uses safeguards proportionate to the information and risks involved. Current controls include authenticated membership and role checks, per-business data scoping, separate staging and production environments, protected credentials, encryption of connected-calendar tokens, verified provider webhooks, restricted private object storage, expiring file-access links, audit and provider-outcome records, and processes for investigating operational failures. No system is completely secure. We assess incidents and provide notices when required by applicable law.

Jobyard uses authentication cookies and similar storage needed to keep members signed in, protect routes, remember language, and apply a visitor’s light, dark, or system theme choice. Jobyard does not currently run third-party advertising trackers on the public site. Hosting and security providers may maintain request logs needed to deliver and protect the Service.

You may ask about personal information Jobyard holds about you, request access or correction, challenge our handling of it, or withdraw consent where consent is the applicable basis. Legal exceptions may limit a request, for example, where disclosure would reveal another person’s information. We may need to verify your identity and coordinate with the business that controls the customer relationship before responding.

Send privacy questions, requests, or complaints to hello@jobyard.ca with “Privacy request” in the subject. Include enough context to identify the relevant business and interaction, but do not email sensitive information. We will acknowledge and respond in accordance with applicable law. You may also contact the Office of the Privacy Commissioner of Canada or the privacy regulator that applies in your province.

We may update this Policy as the Service, providers, or legal requirements change. We will post the updated version at this URL and change the effective date. If a change materially affects how active customer information is handled, we will provide additional notice appropriate to the change.