Privacy Policy

1. Introduction

This Privacy Policy explains how HandlerHub ("we," "us," or "our") collects, uses, and protects your personal information when you use our platform at https://handlerhub.com. HandlerHub connects dog show exhibitors with professional handlers. Users create profiles, browse handlers, submit service requests, and communicate through the platform.

HandlerHub is operated by Yellow Bird, a Canadian sole proprietorship. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the General Data Protection Regulation (GDPR) where applicable.

If you have questions about this policy, you can reach us at privacy@handlerhub.com.

2. What We Collect

When you create an account and use HandlerHub, we collect the following categories of information:

• Account information: Your name and email address, provided directly or through Google OAuth.
• Profile information: Business name, bio, specialties, breed specializations, regions served, fee schedule, and profile photos.
• Location and region data: Geographic regions you serve or are searching within, used to match exhibitors with nearby handlers.
• Service preferences: The types of services you offer or are looking for (handling, grooming, transport, etc.).
• Request information: Details you include when posting or responding to service requests on the Request Board.
• Messages: Content of messages sent through the HandlerHub messaging system.
• Payment information: When you make payments through HandlerHub, payment details are collected and processed by Stripe. We do not store your full credit card number or payment credentials on our servers.
• Usage and analytics data: Pages visited, time on site, browser type, device information, and general traffic patterns, collected through Google Analytics (GA4).
• Cookies: Small text files stored on your device for authentication, session management, and analytics. See our Cookie Policy for details.

3. How We Collect Your Information

We collect information in the following ways:

• Directly from you: When you create an account, fill out your profile, post requests, or send messages.
• Through authentication providers: When you sign in using Google OAuth, email/password, or magic link (sent via Resend), your name and email are shared with us to create or access your account.
• Automatically: Through cookies and Google Analytics (GA4) when you browse the platform.
• From payment processing: Stripe shares limited transaction data with us (such as payment status and amount) to manage subscriptions and billing.

4. How We Use Your Information

We use your information to:

• Display your profile in our handler directory so exhibitors can find you
• Show your requests on the Request Board so handlers can respond
• Enable messaging between exhibitors and handlers
• Process payments and manage subscriptions through Stripe
• Send account notifications (e.g., new messages, responses to your requests, payment confirmations)
• Analyze usage patterns to improve the platform and fix bugs
• Comply with legal obligations under PIPEDA, GDPR, and other applicable laws

5. We Do Not Sell Your Data

HandlerHub does not sell, rent, or share your personal information with third parties for marketing purposes. We will never monetize your data. Your information is used solely to operate the HandlerHub platform and as described in this policy.

6. Third-Party Service Providers

We share your information with the following trusted third-party providers, only as necessary to operate HandlerHub:

• Supabase: Hosts our database (PostgreSQL) and provides authentication services. Your account data, profile information, messages, and requests are stored in Supabase.
• Cloudflare R2: Stores uploaded files such as profile photos.
• Stripe: Processes payments securely. Stripe receives your payment information directly and is subject to their own privacy policy.
• Resend: Delivers transactional emails, including magic link sign-in emails and account notifications.
• Google Analytics (GA4): Collects anonymized usage data for traffic analysis.
• Vercel: Hosts the HandlerHub website and application.

Each of these providers is bound by their own privacy policies and data protection obligations. We select providers that maintain appropriate security standards.

7. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) for structured data and Cloudflare R2 for uploaded files. These services use industry-standard encryption for data in transit and at rest.

We take reasonable measures to protect your personal information, including secure authentication methods (Google OAuth, email/password with hashing, and magic links via Resend). However, no system is completely secure, and we cannot guarantee absolute security.

8. Data Security & Breach Notification

We take the security of your personal information seriously and maintain safeguards designed to prevent unauthorized access, use, or disclosure. In the event of a data breach that creates a real risk of significant harm to affected users, we will notify the affected individuals and report the breach to the Office of the Privacy Commissioner of Canada without unreasonable delay, as required under PIPEDA.

Where we are required to notify you of a breach, our notice will describe, to the extent known at the time:

• What happened, including the date or period of the breach
• The categories of personal information involved (such as name, email, or profile data)
• The steps we have taken or are taking to contain the breach and mitigate the risk of harm
• Steps you can take to protect yourself and reduce the risk of harm
• How to contact us for more information or assistance, at privacy@handlerhub.com

We maintain records of any breaches of security safeguards as required by PIPEDA, regardless of whether they trigger a notification obligation.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. When you delete your account, we anonymize the personal information associated with it (such as your name, email address, profile details, and messages) so that it can no longer be linked to you, and we remove it from active use on the platform. This process is completed within 30 days of your request.

Certain financial and transaction records (such as payment, invoice, and subscription history processed through Stripe) are retained in order to meet our legal, accounting, and tax obligations. These records are kept only for the statutory retention period required by applicable law, after which they are deleted or anonymized.

Analytics data collected through Google Analytics is retained according to that service's default retention policies.

10. International Data Transfers

HandlerHub is operated from Canada. Some of our third-party service providers (such as Stripe, Google, and Vercel) may process data in the United States or other countries. When data is transferred outside of Canada or the European Economic Area, we ensure that appropriate safeguards are in place, such as standard contractual clauses or the service provider's certification under recognized data protection frameworks.

11. Your Rights

Under PIPEDA and GDPR, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information in your profile
• Request deletion of your account and associated data
• Withdraw consent for non-essential data processing (such as analytics cookies) at any time
• Object to processing based on our legitimate interests
• Request a portable copy of your data
• Lodge a complaint with the Office of the Privacy Commissioner of Canada or your local data protection authority

To exercise any of these rights, please contact us at privacy@handlerhub.com or visit our contact page. We will respond within 30 days.

12. Children's Privacy

HandlerHub is not intended for use by anyone under the age of 13. We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us and we will remove it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify users through the platform. Continued use of HandlerHub after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or want to request data access or deletion, please contact us at privacy@handlerhub.com or visit our contact page.