Your data, in plain English.
Ontyx connects you with local providers. To do that we hold a small amount of your information — here is exactly what, why, who can see it, and how to take it back. No dense legalese, no hidden clauses.
What we collect
We only collect what a marketplace actually needs to work:
- Account details — your name and email, so we can send login codes and keep your inquiries and saved providers in one place. There is no password.
- Provider profile — if you sell, the business details you choose to publish: services, prices, story, photos, and the city you serve.
- Inquiry contact details — when you message a provider, the phone number and preferences you enter so they can reply to you.
- Verification documents — for gated categories (like trades or childcare) we ask providers for ID or a licence so we can verify them before they go live.
We don't ask for anything we don't use, and we don't build advertising profiles about you.
How we protect it
Your data is protected at every stage, not just in transit:
- Encrypted in transit — every connection uses TLS (HTTPS), so nothing travels in the clear.
- Encrypted at rest— sensitive fields are protected with AES-256 field-level encryption in our database: phone numbers, inquiry contact details, and every uploaded ID or licence document. A stolen database backup shows ciphertext, not people's phone numbers.
- Private storage — documents live in private, access-controlled storage — never on a public URL.
- Least access — our admins can open a licence document only to verify a provider, and nothing more.
What's public, what's private
Provider listings are meant to be found — that's the whole point of a marketplace. Your personal contact details are not.
- •Provider business profiles, photos and story
- •Published reviews and ratings
- •Listed services and prices
- •The city and area a provider serves
- •Your phone number, until you send an inquiry
- •Your uploaded ID and licence documents
- •Your account email address
- •The contents of your inquiries
Who sees your inquiry
When you message a provider, your name, phone number and message go to only that one provider— the business you chose to contact — and stay visible to you in your account. No other provider sees it. We don't broadcast your inquiry to a marketplace of bidders, and we never post your phone number publicly.
We never sell your data
We do not sell, rent, or trade your personal information — to anyone, ever. There are no third-party advertising trackers on this site and no cross-site ad profiling. We make money from providers' flat monthly fee, not from your data.
Your privacy rights
Under PIPEDA you can see and take back what we hold. Both are self-serve from your account — no forms, no waiting:
- Access & export— download a copy of your data as a file, with your encrypted fields shown back to you in the clear. Ask us if you need anything it doesn't cover.
- Deletion— permanently delete your account. We remove your account and personal details; a provider's past lead history is kept but anonymized so it is no longer tied to you.
Email & CASL
We only email you two kinds of things: the login codes you request, and the alerts you explicitly turn on (like a reply to your inquiry). We don't send marketing blasts. If you want to stop receiving alert emails, contact us and we will action it.
Contact
Questions about your privacy, or want a hand exercising your rights? Reach our privacy contact at privacy@communityconnect.ca. We answer real people, quickly.