Privacy Policy

FillIn is responsible for the personal information under its control. Our Privacy Officer can be reached at noreply@fillin.ca for any question, access request, or complaint.

Account information: email address and account role (salon or nail technician).

Salon profile: business name, address, city, postal code, phone number, and optional photo.

Technician profile: name, city, postal code, years of experience, skills, certifications, hourly rate, availability, bio, and optional photo.

Location data: approximate coordinates derived from the city or postal code you enter, used only to show shifts within roughly 15 km. We do not track your device's live GPS location.

Shift data: shifts you post, claim, or cancel, and related timestamps.

To create and manage your account and authenticate you.

To display profiles and open shifts to the other side of the marketplace so matches can happen.

To show shifts near you using the location you provide.

To send transactional emails, such as notifying a salon when a technician claims a shift.

To keep the Platform secure, prevent abuse, and meet legal obligations.

By creating an account and accepting our Terms of Service, you consent to the collection and use of your information for the purposes above. You may withdraw your consent at any time by deleting your account, subject to legal retention requirements. Withdrawing consent means you can no longer use the Platform.

Technicians can see open shifts and the posting salon's business details needed to work the shift. Salons can see the profile of a technician who claims their shift. Your email address is not shown publicly to other users; the salon receives notification emails from us.

We use trusted providers to operate FillIn: a managed database and authentication provider for storing account data, an email provider (Resend) for notification emails, and a hosting provider for the website. Some of these providers may store or process data outside Quebec or Canada, including in the United States, where foreign laws may apply. We take reasonable measures to ensure comparable protection.

We never sell your personal information.

We keep your account and profile information for as long as your account is active. After account deletion, we delete or anonymize personal information within a reasonable period, except where retention is required by law or needed to resolve disputes.

Access to data is protected by authentication and row-level access rules so users can only reach the records they are entitled to. Passwords are stored hashed by our authentication provider. No system is perfectly secure, but we work to protect your information and will notify affected users and the Commission d'accès à l'information where required by Law 25 in the event of a confidentiality incident presenting a risk of serious injury.

You have the right to access your personal information, request correction of inaccurate information, withdraw consent, request deletion, and request that your information be transferred to you in a structured, commonly used technological format (data portability under Law 25).

You may exercise these rights, or file a complaint, by writing to noreply@fillin.ca. We respond within 30 days. You may also contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

We use only essential storage needed to keep you signed in and remember your language preference. We do not use advertising trackers, and we do not make decisions about you based solely on automated processing.

We may update this policy. Material changes will be reflected by an updated date at the top of this page.