Privacy Policy

Dumeau Home Management Inc.(“Dumeau”, “we”) is a home-management company based in St. Albert, Alberta. Members pay a monthly fee and we look after their home: tracking its systems, planning maintenance, and coordinating trusted trade partners to do the work. This policy explains what personal information we collect to do that, how we use it, who we share it with, and the choices you have. It is written to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

Questions, requests, or complaints about privacy go to hello@dumeau.ca.

Account and contact information. Your name, email address, phone number, and login credentials. Passwords are stored only as one-way cryptographic hashes — we cannot read them, and a lost password is reset, never recovered.

Your home's profile.The address and details of the home we manage: its systems and appliances (make, model, age, condition), maintenance history, service records, warranties, and the documents and photos you or our staff add to your home's vault.

Service and billing records. Service requests, quotes, appointments, completed work, invoices, and payment history — the record-keeping that is the heart of the membership.

Communications.Messages you exchange with Dumeau staff and, during a booked job, with the assigned trade partner through the portal's job chat, plus emails between us.

Technical information. Essential cookies that keep you signed in, anonymous cookieless visitor statistics (no advertising trackers, no cross-site tracking, no consent-banner data brokering), and error reports when something in the product breaks. Error reports are configured to exclude personal information.

What we deliberately do not collect: gate, alarm, and entry codes. We never ask for them and our systems have no fields to store them. On service days, you coordinate access directly with the assigned trade partner in the job chat. We also never see or store your full payment card or bank account numbers — those are entered directly with our payment processor (see below).

We use personal information only to run the membership you signed up for:

• building and maintaining your Home Care Plan and maintenance schedule;
• coordinating service work: requesting quotes from trade partners, booking jobs, and documenting the results;
• billing you and processing payments;
• sending you the service's notifications — quotes ready, bookings, reminders, receipts;
• operating, securing, and improving the product itself; and
• meeting legal obligations, such as tax record-keeping.

We do not sell personal information, and we do not use it for third-party advertising.

Trade partners. When work is quoted or booked at your home, the assigned partner sees what they need to do the job: the scope of work, relevant details of the affected system, the service address and schedule, and the job chat. Partners never see your billing or payment details.

Service providers (processors). Like most modern services, we run on established infrastructure providers who process data on our behalf under their own security and privacy commitments:

• Stripe — payment processing. Card and bank-account details are entered directly with Stripe and never touch Dumeau's systems.
• Vercel — application hosting and file storage.
• Neon — database hosting.
• Resend — transactional email delivery.
• Sentry — error monitoring (configured to exclude personal information).

Where your data lives. Some of these providers store and process data in the United States. That means your information may be subject to lawful access requests under U.S. law while it is there. We choose providers with strong security practices and limit what each one holds to what its job requires.

Legal requirements. We will disclose personal information if a law, court order, or government authority with jurisdiction validly requires it.

While your membership is active, we keep your home's records — that continuity is the product. If you end your membership, your records are retained so your home's history is intact if you return, and so we can meet legal and tax retention requirements. You can ask us to delete your personal information at any time; we will honour the request except where the law requires us to keep specific records, and we will tell you what, if anything, must be kept and for how long.

• All traffic is encrypted in transit (HTTPS).
• Passwords are one-way hashed; nobody at Dumeau can read them.
• Every portal is scoped: members see only their own home, partners see only their own jobs, and files are served only to the people entitled to them. These boundaries are covered by automated tests that run on every change to the product.
• Payment details never enter our systems at all.

Subject to the exceptions in PIPEDA and Alberta PIPA, you may ask us at any time to:

• see the personal information we hold about you;
• correct information that is inaccurate;
• withdraw consent to uses that are not required to deliver the service; and
• delete your information (see retention, above).

Write to hello@dumeau.ca and we will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

Dumeau's services and website are directed to homeowners, not children, and we do not knowingly collect personal information from anyone under 18.

If we change this policy in a way that matters — new categories of data, new kinds of sharing — we will notify members by email before the change takes effect and update the effective date above. The current version always lives at this address.