Privacy policy

WeCanBuy Inc. ("WeCanBuy", "we", "us") runs a buying group based in Toronto, Ontario. This policy explains what personal information we collect through the WeCanBuy website (wecanbuy.ca and app.wecanbuy.ca) and the WeCanBuy apps for iOS and Android, why we collect it, who we share it with, and the choices you have.

We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Our privacy contact is listed at the end of this policy.

Account details: your email address and password (the password is held only as a secure hash by our sign-in provider), your name and phone number, and your mailing address.

Buyer details: your CRA GST/HST number, your business name if you give one, the email address and method we pay you through, and the date and version of the terms you accepted.

Business details, if you post deals: your business name, business number and website.

Order activity: the deals you take, retailer order numbers, tracking numbers, what our warehouse received and checked, and what we have paid you.

Files you upload: the invoices your business issues to us for your orders (PDF, JPEG or Word) and, if you post deals, product photos.

Messages you send to our team or to a deal manager through the app or website.

Device information: a push-notification identifier for your device, and the sign-in signals our sign-in provider uses to recognise a trusted device.

We do not collect your precise location, your contacts, or your browsing activity on other apps and websites. We do not use advertising or analytics tools that track you.

Camera: used only when you choose to scan a tracking-number barcode. We keep only the number the scanner reads; no picture is taken or stored.

Photos: used only when you pick a product photo from your library for a deal listing. We receive only the photo you choose.

Files: when you attach an invoice to an order, you choose it with your device’s file picker. We receive only the file you choose; nothing else on your device is read.

Notifications: used to tell you about new deals, order updates, payments and messages. You can turn each type off in the app, or turn notifications off in your device settings.

Face ID, Touch ID or fingerprint: if you turn on biometric unlock, your device checks your face or fingerprint. We never receive or store biometric data; the app only remembers on your device that you turned the feature on.

Every permission is optional. You can refuse or withdraw it in your device settings and still use the rest of the app.

To create and secure your account, and to review your application before you can take deals.

To run deals: reserving your units, matching the packages that arrive at our warehouse to your orders, and checking that each item is the right product.

To pay you, and to keep the records that show what we paid and why.

To contact you about your account, your orders and your payments, and — if you leave the setting on — about new deals.

To answer your messages and support requests.

To prevent fraud, enforce our terms, and meet our legal, accounting and tax obligations.

We do not sell your personal information, and we do not use it for advertising.

We share personal information only with service providers that help us run WeCanBuy, and only what each one needs:

Clerk — sign-in and account security (email, password hash, sign-in device signals).

Cloudflare — hosting for our website and servers, storage for uploaded files, and sending our emails.

DigitalOcean — our database, hosted in Toronto, Canada.

OneSignal — delivering push notifications to your device (a device identifier linked to your account).

OpenStreetMap (Nominatim) — on the website only, the address you type is sent to suggest a matching address.

The deal manager who posted a deal sees the messages you exchange with them about it. Our warehouse and operations staff see what they need to receive your packages and pay you.

We may also disclose information where the law requires it, to protect against fraud, or as part of a sale or reorganisation of our business, in which case this policy continues to apply.

Our main database is in Toronto, Canada. Some of our service providers — including Clerk, Cloudflare and OneSignal — process or store information in the United States or elsewhere, where it may be accessible to authorities under local law. We choose providers that protect information to a standard comparable to Canadian law.

We keep your account information while your account is open.

Records of orders, payments and tax details are kept for as long as Canadian tax and accounting law requires — generally six years after the end of the tax year they relate to — even after your account is closed.

When information is no longer needed, we delete it or make it anonymous.

You can ask us to delete your account at any time: send a message to support from the app (Account → Contact support) or email info@wecanbuy.ca from the address on your account.

We delete your sign-in account and your profile. If we still owe you money, we pay it first. Records we are legally required to keep — such as what we paid you and the tax details on those payments — are kept for the required period and then deleted.

Information is encrypted in transit between your device and our servers. Uploaded files are kept in private storage and are only shown to you and to staff who need them. Access inside WeCanBuy is limited by role, and changes to accounts, orders and payments are recorded in an audit log.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner of Canada as the law requires.

You can see and update most of your details in your account. You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or withdraw your consent to a use of it — though some information is required to take deals and be paid.

We will reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

WeCanBuy is for adults. You must be at least 18 to register, and we do not knowingly collect information from anyone younger.

If we change this policy, we will publish the new version here with a new date. If a change is significant, we will also tell you in the app or by email before it takes effect.

Questions or requests about your personal information: info@wecanbuy.ca, or WeCanBuy Inc., 6-40 Ironside Crescent, Scarborough, ON M1X 1G4, Canada.