PIPEDA Compliance Statement
Our commitment to the ten principles of the Personal Information Protection and Electronic Documents Act (Canada). Last updated: 2026-09-14.
Our Commitment to PIPEDA
LeadPipe AI Inc. is a Canadian B2B SaaS company that collects, uses, and discloses personal information in the course of operating a lead generation platform for home service contractors. We are committed to complying with the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal private-sector privacy law that applies to our commercial activities in Canada.
This Statement is intended to provide contractors and other interested parties with a clear summary of how the ten fair information principles set out in Schedule 1 of PIPEDA map onto our actual practices. This Statement is companion to our Privacy Policy at /privacy, which provides more granular detail about what we collect and how it is processed. Where the two documents differ, the Privacy Policy governs.
We review this Statement and our underlying practices at least annually, and whenever our processing activities or infrastructure change materially. A designated privacy officer is accountable for PIPEDA compliance and may be reached at privacy@leadpipe.me.
The 10 PIPEDA Principles
How each principle from Schedule 1 of PIPEDA maps onto our practice.
LeadPipe AI Inc. is responsible for personal information under its control. A designated privacy officer oversees compliance with PIPEDA and applicable provincial privacy legislation, maintains this Statement, and responds to access requests and complaints.
We identify the purposes for which personal information is collected at or before the time of collection. Purposes include account setup, lead delivery, payment processing, fraud prevention, and regulatory compliance, as detailed in our Privacy Policy.
We obtain consent for the collection, use, and disclosure of personal information at registration and at other relevant moments. Consent may be express or implied where appropriate. Contractors may withdraw consent at any time, subject to legal or contractual restrictions.
We limit collection of personal information to that which is necessary for the identified purposes. We do not collect personal information that is not relevant to delivering the Service. We do not purchase third-party personal information lists.
Personal information is not used or disclosed for purposes other than those for which it was collected, except with consent or as required by law. We retain account data for ninety (90) days after account closure and lead data for seven (7) years for audit and tax compliance, then destroy or de-identify it.
We keep personal information as accurate, complete, and up-to-date as necessary for its identified purposes. Contractors may update business and contact information from the dashboard at any time. We respond promptly to correction requests submitted to privacy@leadpipe.me.
We protect personal information with security safeguards appropriate to its sensitivity. Measures include bcrypt password hashing, HTTPS (TLS 1.2+) in transit, encrypted environment variables on Vercel, role-based production access, and rate limiting on authentication endpoints.
We make our privacy policies and practices available in this Statement and in our Privacy Policy at /privacy. Information is available in plain language and is kept current. Contractors may request additional information by emailing privacy@leadpipe.me.
Upon written request, we inform contractors of the existence, use, and disclosure of their personal information, and provide access to that information. Contractors may challenge the accuracy and completeness of their information and request corrections. We respond to verified requests within thirty (30) days.
We maintain a documented process to receive and respond to complaints or inquiries about our compliance with PIPEDA. Contractors may escalate unresolved complaints to the Office of the Privacy Commissioner of Canada. We do not penalize contractors for raising a complaint in good faith.
Provincial Privacy Legislation
PIPEDA applies to federally regulated organizations and to the collection, use, and disclosure of personal information in the course of commercial activities in Canadian provinces that do not have substantially similar privacy legislation. Three provinces have enacted substantially similar private-sector privacy laws: Quebec (An Act respecting the protection of personal information in the private sector, often referred to as Law 25), British Columbia (Personal Information Protection Act, PIPA BC), and Alberta (Personal Information Protection Act, PIPA AB).
LeadPipe AI Inc. treats these provincial regimes as applicable to the personal information of contractors and homeowners located in their respective provinces. Where Law 25 in Quebec imposes stricter requirements — for example, mandatory privacy impact assessments for projects involving personal information, and explicit consent requirements for certain commercial communications — we adhere to those heightened standards for Quebec contractors.
As we expand our market presence into British Columbia and Alberta, we will continue to align our practices with PIPA BC and PIPA AB. Contractors with questions about how provincial privacy legislation applies to their account are welcome to contact us at privacy@leadpipe.me.
Complaint Process
We take privacy complaints seriously and aim to acknowledge any complaint within five (5) Canadian business days of receipt and to resolve it within thirty (30) days. To file a complaint, contact us at pipeda@leadpipe.me or support@leadpipe.me. Please include your business name, account email, and a brief description of your concern.
If our response does not resolve your concern, or if you wish to escalate a complaint directly, you may contact the Office of the Privacy Commissioner of Canada (OPC). The OPC is an independent body that oversees PIPEDA compliance and provides a complaint process at no cost to complainants. Contact information is available at opc.gc.ca or by mail at Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec, Canada.
Contractors in Quebec may also escalate complaints to the Commission d'accès à l'information du Québec; in British Columbia to the Office of the Information and Privacy Commissioner for British Columbia; and in Alberta to the Office of the Information and Privacy Commissioner of Alberta. We do not penalize contractors for raising complaints in good faith.