Privacy Policy
Last updated 3 August 2026
iFloor provides operations software to flooring retailers. This policy explains what personal information we handle, why, and what choices you have. It covers two different groups of people, and the distinction matters.
Two roles
For our clients — the flooring retailers who buy our software — we are the organisation deciding how their account information is handled, and this policy applies directly.
For our clients' customers — the homeowners and businesses buying flooring — the retailer decides what information is collected and why. We process that information only on the retailer's instructions, as their service provider. If you are a customer of a flooring retailer that uses iFloor and you want your information corrected or deleted, contact that retailer directly; they control it. If you contact us instead, we will pass the request to them.
What we collect from clients
- Business contact details: name, business name, email address, phone number, address.
- Account details for the people at that business who use the software.
- Billing information. Card details are handled by our payment processor; we never see or store full card numbers.
- Usage and diagnostic records: sign-in times, actions taken in the software, and error reports, so we can support the account and keep it secure.
What we process on our clients' behalf
A retailer using iFloor stores information about their own customers and jobs: names, contact details, service addresses, quotes, measurements, appointments, invoices, payments, and the messages exchanged about a job. We store and process this so the retailer can run their business. We do not sell it, we do not use it to advertise, and we do not use it to train machine-learning models.
Why we handle information
- To provide, support and secure the software.
- To send transactional messages a retailer's customer expects — quotes, invoices, appointment reminders, and links to review or sign their own estimate.
- To bill our clients and keep proper financial records.
- To meet legal obligations.
We do not send marketing email to our clients' customers, and we do not send messages to purchased or rented contact lists.
Where information is stored
Each client's data is held in its own separate database, not pooled with other clients'. Our databases and email infrastructure are hosted in Canada where the provider offers a Canadian region. Some service providers listed below operate outside Canada, which means information may be processed in other countries and be subject to the laws there.
Service providers
We use a small number of providers to run the service. Each handles only what it needs to:
- Supabase — database and account authentication.
- Vercel — application hosting.
- Amazon Web Services — sending transactional email.
- Twilio — text messages and phone calls, where a client uses those features.
- Stripe — billing our clients.
- Shopify — for clients who also use our storefront product, on their own Shopify account.
- Anthropic — AI assistance features, where a client uses them. Content sent for these features is not used to train models.
How long we keep it
Client account information is kept while the account is open and for seven years afterwards where records and tax law require it. Information we process for a client is kept for as long as that client instructs. When a client leaves, we provide an export of their data and then delete it from active systems, with backups ageing out on their normal cycle.
Security
Access to client information is restricted to staff who need it, and every privileged action is recorded in an audit log. Credentials we hold on a client's behalf are encrypted, and are never displayed back to anyone. Accounts with administrative access require two-factor authentication. No system is perfectly secure, but we take this seriously and design for it.
Your rights
Under Canadian privacy law, including PIPEDA and British Columbia's Personal Information Protection Act, you may ask what personal information we hold about you, ask for it to be corrected, and complain about how it has been handled. Write to info@ifloor.app and we will respond within 30 days. If you are a customer of a retailer using iFloor, please contact that retailer first, as they control their own records.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or the Office of the Information and Privacy Commissioner for British Columbia.
Changes
If we change this policy we will update the date at the top, and tell our clients directly if the change is significant.
Contact
iFloor — British Columbia, Canada
info@ifloor.app