Skip to main content
DRAFT – pending attorney review

Privacy Policy

Placeholder privacy policy for ToucanBid. This draft must be reviewed and completed by an attorney before launch.

Categories of information we collect

  • Identity and contact: first and last name, email, mobile phone (verified by SMS code).
  • Property and project: address, map location, parcel ID, property facts, job scope, photos and videos, budget and timeline.
  • Licensed Pro business details: business name, Florida license number and license document, and optional business tax receipts, insurance and workers' compensation documents. We do not ask for a government ID.
  • Usage and security data: IP address, device and browser data, consent records with timestamps, and a security log of sign-ins, failed sign-in attempts, account lockouts and payments.
  • Sign-in security: if you turn on two-factor authentication or passkeys, we store an encrypted authenticator secret, hashed recovery codes and your passkey's public key. Face ID, Touch ID and fingerprints stay on your device and are never sent to us.
  • Notifications: if you turn on push notifications, we store your device's push address so we can alert you about bids, messages and awards. You can turn them off at any time.
  • Location: only when you tap a location button (for example, Licensed Pros near me), and only to show nearby jobs. Location is not tracked in the background.
  • Payments: card details are entered directly with Stripe and are never sent to or stored by ToucanBid. We keep only payment status, amount and Stripe reference IDs.

We do not ask for Social Security numbers, date of birth, government ID, bank or card numbers, income, net worth, debts, credit score, tax details, medical information, legal case details, criminal history, immigration status, race, ethnicity, religion, sexual orientation or biometrics. Job posts that contain Social Security, card or bank account numbers are blocked.

Purposes

  • Operating the marketplace: posting jobs, matching, bidding, messaging and award.
  • Checking Licensed Pro licenses and documents against public records.
  • Payments, fraud prevention, security and legal compliance.
  • Contacting you about your project.

Who we share data with

We do not sell your personal information or share it with partners for their own marketing.

  • Licensed Pros who bid on your job (project details only; contact details only after award).
  • Service providers: hosting, email and SMS delivery, payment processing (Stripe), maps and places data (Google).
  • Authorities when required by law.

Text and call consent

If you check the call and text consent box, ToucanBid and Licensed Pros bidding on your job may call or text you, including by automated means, about that project. Consent is not a condition of using the service. Msg & data rates may apply. Reply STOP to opt out at any time.

Opt-out, access and deletion requests

You may withdraw any optional consent, request a copy of your data, correct it or ask us to delete it by using the Contact page. We will verify your identity and respond within the time required by law. [Attorney to add state-specific rights.]

Data security and breach notice

We use HTTPS encryption in transit, hashed passwords, email verification, optional two-factor authentication and passkeys (required for administrators), rate limits and account lockout on sign-in, per-user access controls, field-level encryption of phone numbers, and encrypted private storage for license and insurance documents, which open only through short-lived signed links. If a breach affects your personal information, we will notify you and the authorities as required by Fla. Stat. 501.171 and other applicable laws.

Google Places data

Licensed Pro profiles may display ratings and reviews from Google Maps. By using those features you are also bound by the Google Privacy Policy, which is incorporated into this policy by reference.

Cookies

We use essential cookies to keep you signed in and secure, and to remember your language choice. [Attorney to list any analytics or advertising cookies and opt-out choices before they are enabled.]