Privacy Policy

Account information: When you register, we collect your name, email address, and role (driver or host). Hosts additionally provide a service address, banking details (via Stripe — we never store payment card data directly), and charger specifications.

Location data: We collect the general location you search from and the address of listed chargers to power our map. We do not track your device location continuously.

Transaction data: Session records including energy delivered (kWh), session duration, timestamps, and amounts charged are stored for billing, dispute resolution, and payout purposes.

Usage data: We collect standard server logs (IP address, browser type, pages visited) and aggregate analytics to improve the platform. We do not sell this data.

Communications: When you contact support or submit forms, we retain those communications to resolve your inquiry and improve service quality.

Installation information: For Host + Install subscribers, we collect your property address, electrical panel details, and installation photos for the purposes of scheduling and completing your installation.

• To create and manage your account and verify your identity.
• To facilitate bookings, process payments, and issue payouts through our payment gateway.
• To operate the peer-to-peer marketplace and display charger listings on the map.
• To send transactional emails (booking confirmations, session receipts, payout notifications). You may not opt out of transactional emails while your account is active.
• To send optional marketing communications (newsletters, product updates). You may unsubscribe at any time.
• To coordinate and complete charger installations under the Host + Install plan.
• To detect fraud, enforce our Terms of Service, and comply with legal obligations.
• To improve, personalize, and develop the platform using aggregated, de-identified analytics.

We rely on contractual necessity and legitimate business interests as the primary legal bases for processing your data. Where we rely on consent (e.g., marketing emails), you may withdraw it at any time.

We do not sell your personal information. We share data only in the following circumstances:

• Stripe Inc. — Payment processing and host bank account payouts. Stripe is PCI-DSS Level 1 certified. Stripe's privacy policy applies to payment data.
• Amazon Web Services (AWS) — Cloud infrastructure (database, authentication via Cognito, file storage, email via SES). AWS data centres used are located in Canada (ca-central-1) for personal data storage.
• Licensed electricians / installation partners — For Host + Install subscribers, your installation address and scheduling information is shared with the contracted electrician assigned to your job.
• Legal authorities — We may disclose information if required by law, court order, or government authority.
• Business transfers — In the event of a merger, acquisition, or asset sale, personal data may transfer to the acquiring party, subject to equivalent privacy protections.

When data is shared with third-party processors, we require contractual commitments to handle it consistent with this policy and applicable law.

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data: Retained while your account is active and for 7 years after closure (Canadian tax and audit obligations).
• Transaction records: Retained for 7 years per CRA requirements.
• Installation records: Retained for 10 years (ESA and Ontario electrical code compliance).
• Support communications: Retained for 3 years.
• Marketing preferences: Deleted upon opt-out or account closure.

Under PIPEDA, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your account and personal data (subject to legal retention obligations).
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe your rights have been violated.

To exercise any of these rights, email us at privacy@borrowmywatts.com. We will respond within 30 days. Account deletion requests can also be submitted directly through the platform under Settings → Delete Account.

We implement industry-standard safeguards including TLS encryption in transit, encryption at rest for sensitive fields, access controls, and regular security reviews. Authentication is managed through AWS Cognito with support for multi-factor authentication.

No method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a breach, we will notify affected users and the OPC as required under PIPEDA's breach notification rules.

We use essential cookies to maintain your authenticated session and preserve your preferences. We do not use third-party advertising cookies or cross-site tracking.

We may use anonymized analytics (aggregated page visit counts, error rates) to improve the platform. These analytics do not identify you personally.

Our platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered an account, contact us at privacy@borrowmywatts.com.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date and, for material changes, notify you by email or prominent notice within the platform. Continued use of our services after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

You may also contact the Office of the Privacy Commissioner of Canada with concerns at any time.