Privacy Policy

Scope

This policy applies to public visitors, clients, workers and professionals, worker applicants, administrators, and people who communicate with MJ Maison.

Information collected

MJ Maison collects information needed to operate the service, protect security, support billing, and provide customer support.

• Account information: name, email, phone, role, language, password hash, and account status.
• Client profile: addresses, service preferences, and favorite or preferred professionals.
• Worker or applicant profile: service areas, availability, experience, qualifications, certifications, and rate preferences.
• Booking information: service type, schedule, address, notes, assignment, status, and operational history.
• Communications: booking messages, notifications, reviews, and job reports.
• Photos and uploaded documents: home or workplace photos and job-report evidence.
• Worker verification documents: background, reference, CPR, first-aid, or certification documents, review statuses, and admin notes.
• Billing and payment metadata: invoices, receipts, amounts, payment status, refunds, card brand, last four, expiry, and country where available.
• Security and technical information: sessions, request IDs, audit or security logs, and IP address where logged.
• Social-login information: provider name, provider account ID, email, verified-email status, display name, and optional avatar.

Google and Facebook social login

Google or Facebook may provide MJ Maison with a provider ID, email, name, verified-email state, and optional profile image.

MJ Maison uses those details to authenticate, create, or link a client or worker account. Administrator accounts cannot use social login.

Workers remain subject to application, profile-completion, and approval requirements.

Worker verification documents are kept in private storage for admin review and are not displayed publicly.

For a new worker account created with Google, MJ Maison may copy the optional Google profile image as the initial worker application photo; it is not shown publicly until worker approval and may be replaced or removed by the worker.

MJ Maison does not store OAuth access tokens, refresh tokens, ID tokens, authorization codes, or raw provider profiles under the current implementation.

Provider use also remains subject to Google and Meta policies.

Distance and travel-time routing

When routing is configured, MJ Maison may send structured professional travel-origin and service-location addresses to the configured routing provider, such as Google Routes, to calculate road distance and travel time.

MJ Maison does not send names, emails, phone numbers, booking references, client notes, or access instructions to the routing provider for this calculation.

These providers may process information outside Québec or Canada. MJ Maison does not store raw Google Routes responses, navigation steps, or polylines.

Purposes

• Create and authenticate accounts.
• Receive, confirm, update, and dispatch bookings.
• Match clients and professionals.
• Enable service communications, notifications, reports, and reviews.
• Manage authorizations, captures, invoices, receipts, refunds, and billing records.
• Provide support, handle disputes, prevent fraud, maintain audit logs, and meet legal, tax, and accounting obligations.
• Operate and improve the product.

Access and sharing

Assigned professionals receive the information needed to perform a booking. Clients receive appropriate professional and service information.

Stripe processes payment information. Google and Meta process social authentication. Hosting and infrastructure providers may process stored data. Authorized administrators and service providers may have limited operational access.

MJ Maison may disclose information when required by law. MJ Maison does not sell personal information.

Payment information

Payment-card entry is handled through Stripe-hosted components. MJ Maison does not store full card numbers or CVC.

MJ Maison stores limited payment metadata and transaction status needed for billing, receipts, refunds, and support.

Cookies and sessions

The application uses essential session and security cookies, plus language-preference or session behavior. CSRF and security functionality are part of those controls.

MJ Maison does not add advertising cookies under the current implementation.

Retention and deletion

MJ Maison keeps records only as necessary for the service, security, legal, tax, accounting, audit, and dispute purposes.

Account deletion may be separate from legally required financial or audit retention. Backups may retain data until ordinary backup expiry.

Security

MJ Maison uses reasonable safeguards such as HTTPS, restricted private uploads, password hashing, role-based access, audit controls, and a protected server environment.

No method is perfectly secure; MJ Maison continues to improve controls as the service operates.

Your requests

You may request access, correction, withdrawal of consent where applicable, deletion, OAuth unlinking, information about data practices, or complaint review through the configured privacy contact.

International processing

Providers such as Stripe, Google, Meta, or hosting services may process information outside Québec or Canada according to their services and contracts.

Policy changes

MJ Maison may update this policy. The last-updated date identifies the applicable version; material changes will be communicated through appropriate channels.