Privacy Policy
Last updated June 22, 2026
MyWebsiteBuilder is operated from Alberta, Canada. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). This policy explains what we collect, how we use it, who we share it with, and the rights you have over it.
Information we collect
From you, our client: your name, email, phone, business details, and billing information needed to run your storefront and CRM.
From your customers: the contact and job details you or your customers enter into your CRM — names, phone numbers, emails, addresses, quotes, invoices, and message history. You are responsible for having a lawful basis to collect this from your own customers; we process it on your behalf.
How we use it
To provide and maintain your storefront and CRM, process payments, send the messages you initiate, provide support, and keep the service secure. We do not sell your information.
How our staff may access your account
To set up, support, and troubleshoot your storefront, authorized MyWebsiteBuilder staff may securely access your account on your behalf. We take this seriously and have built specific safeguards:
- Access is limited to a small, named list of our staff — never shared logins.
- Each access session is time-limited and logged: we keep an audit record of which staff member accessed which account and when.
- Staff acting on your account work in an account you can configure (products, settings, quotes, invoices). Staff impersonation is blocked from reading your connected email/message inbox.
- We never change your login email or password to gain access.
If you would prefer we obtain explicit confirmation from you before each support session, contact us and we’ll arrange it.
Who we share it with
We use trusted processors to run the service. They handle data only on our instructions:
- Supabase — database and authentication hosting.
- Stripe — billing and payments. Customer funds settle directly to your own Stripe account; they never pass through ours.
- Twilio — phone numbers and SMS/call messaging in the CRM.
- Google — sign-in identity when you log in with Google.
Data retention & security
We retain your information for as long as your account is active and as needed to provide the service and meet legal obligations. Access is protected by row-level security so each account can only see its own data. When you close your account, your associated records are deleted.
Your rights under PIPEDA
You may request access to, correction of, or deletion of your personal information, and you may withdraw consent at any time. To make a request — including on behalf of one of your own customers — email hello@mybuilder.ca. You also have the right to complain to the Office of the Privacy Commissioner of Canada.
Contact
Questions about this policy or your data? Email hello@mybuilder.ca.