This Privacy Policy describes how PeakShift Inc. ("PeakShift", "we", "us", "our"), a corporation incorporated in Ontario, Canada, collects, uses, processes, stores, and safeguards personal information and smart meter utility interval datasets when you interact with our website at peakshift.ca, our Contractor Pro Engine, our homeowner energy analytics portal, our Free Public Energy Report engine (/report), our developer APIs (/api-docs), and any associated services (collectively, the "Platform").
Strict No-Sale Pledge
PeakShift does NOT sell, rent, monetize, trade, or disclose your personal information or energy interval datasets to third-party advertising networks, data brokers, or marketing firms.
1. Who We Are & Regulatory Scope
PeakShift Inc. operates as a certified Green Button Connect My Data (CMD) and Download My Data (DMD) intermediary under standard agreements with 17 regulated electricity distributors in Ontario representing over 4.5 million connected households (~92% of the provincial electrical grid), as well as natural gas interval telemetry:
Our data processing practices are strictly governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the Ontario Energy Consumer Protection Act, 2010, Ontario Energy Board (OEB) Regulation O. Reg. 633/21, and the North American Energy Standards Board (NAESB) REQ.21 / ESPI 1.2 standard.
2. Categories of Data We Collect
We collect information across four primary categories:
2.1 Information You Provide Directly
- Homeowner Profile Information: Service address, postal code, dwelling square footage, construction era, primary heating fuel source (natural gas, electric baseboard, heat pump), and contact details (name, email address, phone number) when requesting a contractor consultation.
- Contractor Organization Data: Business legal name, operating trade name, business address, primary contact email, phone number, trade license designations (e.g., TSSA, 313A, 309A), team seat assignments, and custom company branding logos for proposal headers.
- Uploaded Energy Files: Standardized Green Button XML / CSV data files manually uploaded by users to evaluate historical consumption.
- Customer Support Records: Communications, feedback, and technical support requests submitted via email or our contact forms.
2.2 Utility Interval Data (Green Button® OAuth)
Upon explicit authorization via OAuth 2.0 PKCE through your utility's official customer portal, we retrieve:
- Up to 12 consecutive months of 15-minute or hourly electrical interval readings (kWh).
- Peak electrical power demand metrics (kW).
- Natural gas hourly or daily volumetric interval streams (m³).
- Billed energy summaries, delivery charges, and rate schedule classifications (TOU, ULO, Tiered).
- Utility account identifiers and service address validation metadata.
2.3 Technical & Telemetry Data
- Security Logs: Request timestamps, IP addresses, HTTP status codes, and browser user-agent strings retained for 30 days for cybersecurity auditing, rate-limiting, and fraud prevention.
- API Telemetry: API key identifiers, endpoint paths, latency figures, and webhook delivery statuses for platform developer accounts.
2.4 Payment & Billing Data (Stripe)
Payment transactions are handled directly by Stripe, Inc. PeakShift does not collect, capture, or store raw credit card numbers, CVV codes, or banking credentials. PeakShift stores only tokenized customer identifiers (cus_XXXX), subscription tier statuses, billing cycle dates, and invoice history.
4. Data Processing for Homeowners & Free Public Reports
PeakShift processes homeowner energy data to power the following client-side and server-side features:
- Tariff Optimization: Comparing 12-month interval consumption against Ontario Energy Board (OEB) Time-of-Use, Ultra-Low Overnight (ULO), and Tiered rate structures to calculate optimal cost schedules.
- IESO Wholesale Tracking: Synchronizing provincial electricity grid price signals to model real-time load-shifting value.
- Appliance Breakdown & Baseload Modeling: Statistical disaggregation of continuous phantom loads (baseload) versus seasonal heating and cooling spikes.
- Opt-In Contractor Matching: Connecting homeowners who voluntarily request proposals with vetted, certified local HVAC or solar installers serving their specific municipal jurisdiction.
5. Data Processing for Contractor Pro Engine
For certified HVAC and solar contractors, PeakShift processes data to deliver high-velocity engineering workflows:
- CSA F280-12 Empirical Heat Loss Sizing: Calibrating weather-correlated heat loss slopes against 8,760 hourly interval readings and local Environment Canada meteorological stations.
- 100A/200A Electrical Panel Feasibility: Evaluating non-coincident peak ampacity loads to determine heat pump and electric auxiliary backup compatibility.
- Rebate Pre-Qualification: Automating equipment match eligibility for Enbridge Clean Home Heating Initiative (CHHI), Ontario Home Peak Advantage (OHPA), and Canada Greener Homes Affordability Program (CGHAP).
- Dynamic PDF Engineering Proposals: Generating turnkey 3-page contractor proposal documents formatted with equipment specifications, COP curves, balance points, and ROI schedules.
6. Magic Link Data Sharing & Homeowner Consent
PeakShift's Magic Link allows contractors to invite clients to share utility data securely:
- Affirmative Explicit Consent: Data is never retrieved or shared based on implied consent. The homeowner must click the secure link, review the data sharing scope, and authenticate with their utility.
- Data Minimization: Contractors receive only the necessary interval metrics, sizing parameters, and address validation required to build an accurate proposal. Raw credentials are never exposed.
- Independent Data Controller Status: Once authorized, the contractor's organization acts as an independent data controller of the proposal records they generate.
7. Billing & Payment Processing (Stripe, Inc.)
All financial transactions for paid subscription tiers (Starter, Pro, Enterprise) are managed viaStripe, Inc. PeakShift records billing metadata (plan tier, renewal date, payment status, itemized 13% Ontario HST) in our database to manage platform entitlements. For further details on Stripe's security practices, refer to stripe.com/privacy.
8. How We Use Your Information
In accordance with PIPEDA Principle 2 (Identifying Purposes), we process personal data strictly for:
- Delivering and operating the core software sizing engines and proposal generation tools.
- Executing certified Green Button interval data synchronization with Ontario utilities.
- Facilitating requested introductions between homeowners and licensed local contractors.
- Processing SaaS subscription billings and enforcing fair use data pull quotas.
- Maintaining platform cybersecurity, monitoring error rates, and preventing unauthorized API abuse.
- Complying with applicable provincial and federal legal, taxation, and regulatory mandates.
11. Enterprise Security Safeguards
PeakShift enforces multi-layered technical and organizational controls aligned with SOC 2 Type II principles:
- Encryption in Transit: Mandatory TLS 1.3 encryption across all public and internal network communications.
- Encryption at Rest: AES-256 GCM encryption for all database storage volumes and OAuth credential tokens.
- Row-Level Security (RLS): Database-level tenant isolation preventing any contractor from querying another organization's leads or proposals.
- Automated Threat Defense: Edge-level rate limiting, DDoS mitigation, and continuous vulnerability scanning.
- Mandatory Breach Notification: Established incident response protocols adhering to PIPEDA mandatory reporting to the Office of the Privacy Commissioner of Canada.
For complete details, review our Security Center.
12. Data Retention & Permanent Deletion
- Active Accounts: Retained while your account remains active to provide continuous historical comparisons and proposal archives.
- Account Deletion: Upon receiving an account deletion request via Settings or email, all personal data, utility tokens, and interval records are permanently purged within 30 calendar days.
- Statutory Financial Records: Invoices and transaction audit trails are retained for up to 7 years in compliance with Canada Revenue Agency (CRA) tax legislation.
13. Your Statutory Rights Under PIPEDA
Under Canadian privacy law, you hold the following fundamental rights:
- Right to Access: Request a complete copy of all personal records and interval datasets associated with your account.
- Right to Rectification: Request correction of incomplete or outdated personal information.
- Right to Withdraw Consent: Revoke utility data sharing permissions or contractor access at any time.
- Right to Data Portability: Export your 12-month interval datasets in standardized Green Button JSON/XML formats.
To exercise any statutory right, email our Privacy Officer at contact@peakshift.ca. We fulfill all verified requests within 30 calendar days at zero cost.
14. Minors & Children's Privacy
The Platform is exclusively designed for commercial enterprises and adult homeowners (aged 18 and older). We do not knowingly collect personal data from minors. Any inadvertently acquired minor data will be promptly deleted upon notification.
15. Policy Changes & Updates
We may update this Privacy Policy periodically to reflect technological advancements, new utility integrations, or legislative amendments. Material updates will be highlighted via in-app dashboard notices and email notifications to registered account holders.
16. Privacy Officer & OPC Escalation
For questions, inquiries, or privacy complaints, please contact our designated Privacy Officer:
Privacy Officer: PeakShift Inc.
Email: contact@peakshift.ca
Mailing Address: Ontario, Canada
Response Commitment: Within 30 calendar days
If you believe your privacy concerns have not been adequately resolved, you maintain the right to file an inquiry with the Office of the Privacy Commissioner of Canada (OPC):
- Website: www.priv.gc.ca
- Toll-free telephone: 1-800-282-1376
- Address: 30 Victoria Street, Gatineau, Quebec, K1A 1H3