BLVCKSHELL
Log in

Privacy Policy

Last updated: February 25, 2026

1. Information We Collect

BLVCKSHELL Facilities Services ("we", "our", "us") collects the following information in the course of providing workforce operations services:

  • Account information: Name, email address, phone number, role, and organization affiliation.
  • Job data: Scheduled dates, completion records, checklist responses, and timestamps.
  • Evidence photos: Images captured during job completion, with automatic redaction of sensitive content before upload.
  • Financial data: Invoice amounts, payout amounts, and payment references. We do not store credit card numbers — payment processing is handled by Stripe.
  • Compliance documents: Certificates of Insurance (COI), WSIB clearance certificates, and HST registration numbers for vendor/contractor accounts.
  • Usage data: Login timestamps, check-in/check-out times, and audit trail of actions taken within the portal.

2. How We Use Your Information

  • To operate the workforce management portal and assign jobs.
  • To process invoices, payouts, and financial transactions.
  • To track compliance with insurance and safety requirements.
  • To send operational notifications (job reminders, approval updates) via email and SMS.
  • To maintain audit trails for accountability and dispute resolution.
  • To improve our services and platform security.

3. Data Sharing

We do not sell your personal information. We share data only with:

  • Service providers: Supabase (database hosting), Vercel (application hosting), Stripe (payment processing), SendGrid (email), Twilio (SMS).
  • Clients: Property managers receive job completion records, evidence photos, and invoice data for sites they manage.
  • Legal requirements: We may disclose information if required by law or to protect our legal rights.

4. Data Security

We implement security measures including:

  • Encrypted data transmission (HTTPS/TLS).
  • Bcrypt password hashing — we never store plaintext passwords.
  • Role-based access control (RBAC) limiting data access by user role.
  • Evidence photo redaction enforced before upload — unredacted photos are never transmitted to our servers.
  • Audit logging of all state changes and administrative actions.
  • Security headers (HSTS, X-Frame-Options, Content-Type-Options).

5. Cookies

We use essential cookies for authentication (session management via NextAuth.js JWT tokens). We do not use tracking or advertising cookies. Functional cookies may be used to remember your preferences (e.g., cookie consent choice).

6. Data Retention

We retain account and job data for the duration of our business relationship plus 7 years for financial and compliance records, as required by Canadian tax and employment regulations. Evidence photos follow the retention schedule in our Data Retention Policy.

7. Your Rights

Under applicable Canadian privacy legislation (PIPEDA), you have the right to:

  • Access your personal information held by us.
  • Request correction of inaccurate information.
  • Withdraw consent for non-essential communications.
  • Request deletion of your account (subject to legal retention requirements).

To exercise these rights, contact us at privacy@blvckshell.com.

8. Contact

For privacy inquiries or complaints:

BLVCKSHELL Facilities Services
Email: privacy@blvckshell.com
Ontario, Canada