PRIME Carpet & Upholstery Cleaning
(647) 558 8730
Get Free Estimate

Privacy Policy

primecarpetcleaning.ca website is owned by PRIME, which is a data controller of your personal data.
We have adopted this Privacy Policy, which determines how we are processing the information collected by primecarpetcleaning.ca, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using primecarpetcleaning.ca website.
We take care of your personal data and undertake to guarantee its confidentiality and security.

Personal information we collect:
When you visit the primecarpetcleaning.ca, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.” Moreover, we might collect the personal data you provide to us (including but not limited to Name, Surname, Address, payment information, etc.) during registration to be able to fulfill the agreement.

Why do we process your data?
Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.
You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website’s features, or you wish to receive our newsletter or provide other details by filling a form, you may provide personal data to us, such as your email, first name, last name, city of residence, organization, telephone number. You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the website’s features. For example, you won’t be able to receive our Newsletter or contact us directly from the website. Users who are uncertain about what information is mandatory are welcome to contact us via info@primecarpetcleaning.ca.

Your rights:
If you are a European resident, you have the following rights related to your personal data:

  • The right to be informed.
  • The right of access.
  • The right to rectification.
  • The right to erasure.
  • The right to restrict processing.
  • The right to data portability.
  • The right to object.
  • Rights in relation to automated decision-making and profiling.

If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information might be transferred outside of Europe, including Canada and the United States.

Links to other websites:
Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties’ privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Information security:
We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Legal disclosure:
We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Contact information:
If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to info@primecarpetcleaning.ca.

PRIME Tech app and PRIME CRM

Added 8 October 2026. This section covers PRIME Tech, our Android and iOS app for PRIME’s own technicians, and the PRIME CRM that supports it. The sections above continue to cover the website. For the app and the CRM’s work functions, this section is the more specific explanation.

The PRIME Tech Android and iOS apps are tools for authorized field technicians. They do not offer sales or AI drafting controls and do not directly contact OpenAI. The AI drafting functions described below are separate office functions in the web CRM. Messages saved from technician visits may later be included in the conversation context when authorized office staff manually request an AI draft, as described in this notice.

Who operates it and how to reach us

PRIME Carpet Cleaning operates PRIME Tech and the PRIME CRM. Accounts are issued by our office only; the app has no public sign-up. For privacy questions, or to ask to see or correct your information, to have an account deactivated, or to have deletion reviewed, email info@primecarpetcleaning.ca. Our office staff handle each request themselves; requests are not processed automatically.

Information the app and the CRM handle

  • Account and sign-in: the username or user ID the office assigned, sign-in credentials (the CRM stores passwords only in hashed form; the app does not keep the password), session information and, where it is used to sign in, an email address. A real email address is not required for every technician account.
  • Work records: the visits assigned to the technician: customer name, service address, visit time, services, instructions, job status and work confirmations. Customer phone numbers and email addresses are not given to the technician app.
  • Work messages: messages a technician chooses to send to a customer through the CRM, and the replies shown for the assigned visit. They are kept in the CRM conversation and can be read by authorized office staff. The CRM checks outgoing text against its messaging rules before it is sent.
  • Work photos: photos the technician takes or picks and uploads, with the caption, the Before/After label, the visit and the uploading account. The apps remove location (EXIF/GPS) data from photos before upload; anything visible in the picture itself, such as people, rooms or an address, remains visible.
  • Payments already received: the method chosen (Cash, Card or E-transfer) and the CRM’s record of that payment, with the amount the CRM calculates for the visit. The app does not charge cards or start bank transfers and never asks for card numbers, banking details or payment passwords.
  • Technical and security information: IP address, app or browser identifier (User-Agent), sessions and sign-in events, used to authenticate users, prevent abuse and run the service.

Notes typed in the app stay on the device as drafts until the technician sends, uploads or confirms something.

Why we use it

To sign in authorized staff, show and coordinate assigned work, document the service, send and receive customer messages where that is enabled, record payments already received, send an optional review request when a technician starts one, provide support and keep the service secure. Completed visits and recorded payments update the customer’s record and PRIME’s internal business reports. We do not sell this information, do not share it with data brokers, and do not use it for advertising audiences or behavioural profiling. The apps contain no advertising or ad-tracking SDKs and do not request the device’s advertising identifier. They do not continuously collect location, contacts, microphone audio or the whole photo library.

Who receives it

  • PRIME staff: authorized office staff and the assigned technician, each limited to what their role allows.
  • Hosting: the CRM, its files and its mail server run on a virtual server rented from OVH (OVH Hosting, Inc.) in Canada.
  • Backups: a full copy of the CRM database and files is made every night on the same server, where the three most recent copies are kept. Once a week a copy is downloaded to a computer in PRIME’s office, where the eight most recent weekly copies are kept.
  • Message delivery: text messages to customers are delivered by Twilio (SMS) and, when a customer uses WhatsApp, by Meta (WhatsApp). They receive the message and the customer’s number needed to deliver it; that number stays hidden from the technician.
  • AI drafting in the office: office staff can ask an AI assistant provided by OpenAI to draft or polish a reply to a customer. Only when they do, the customer’s recent messages in that SMS or WhatsApp conversation (which can include messages a technician sent from the app) are sent to OpenAI, together with the customer’s name, status, service address, open estimate amount and next visit date. A person reviews every draft and sends it; nothing is sent to a customer automatically. Call recordings are transcribed on our own server, and the text of a call can be sent to OpenAI to produce a short summary for the office. Work photos and payment records are not sent to OpenAI.
  • Maps: when a technician confirms Directions, the service address is passed to Google Maps. The app does not send the device’s location. Choosing to call or email the office opens the phone or mail app; nothing is sent automatically.

These providers handle information under their own privacy terms and may process it outside Canada, for example in the United States.

Work photos use public links

Uploaded work photos are stored as public files: anyone who has a photo’s web link can open it. Access to a job in the app is limited by role, but a photo’s link is not. Please keep unrelated people, documents and unnecessary personal details out of work photos.

How long we keep it

  • Work records, messages, photos and payment records are kept as part of PRIME’s business and financial records for as long as they are needed for the service, support, accounting and legal obligations. There is no automatic deletion period for them.
  • When the office deletes a visit, the work photos uploaded for it that are not used anywhere else are deleted with it. Photo files that are not attached to any visit are not removed automatically; they are reviewed on request.
  • Sign-in and activity records are kept for 90 days and error records for 14 days. Web server and application logs, which include IP addresses and browser identifiers, are rotated automatically.
  • A sign-in session ends after 24 hours of inactivity. Ending a session or signing out does not delete any record.
  • Backups hold copies of records until they are replaced, as described above. Deleting a record from the CRM does not remove it from backups made earlier.
  • On the device, the apps keep the session and work drafts in protected storage for the signed-in account. Cached work data expires within 24 hours. Signing out or deactivation ends access but does not delete CRM records.

Your choices and requests

Technicians choose whether to take or upload a photo or to use an enabled messaging feature, and can refuse camera access. Account and work records are needed to use the service. To stop using the service, to have your account deactivated, to see or correct your information, or to ask us to review deletion, email info@primecarpetcleaning.ca. The office can disable an account and end its sessions straight away. Deleting other records is reviewed case by case, taking into account our record-keeping obligations and the backups described above; we do not promise immediate or automatic erasure. We will update this section when our practices change.