Last updated: April 2026

Privacy Policy

1. Who We Are

prework.ca is operated by Swell Farms Inc., located in Campbell River, British Columbia, Canada. We generate land intelligence PDF reports and KMZ map packs for properties in British Columbia.

For any privacy-related questions or requests, contact our privacy officer at info@prework.ca.

2. Information We Collect

We collect the following personal information:

• Email address, provided when you create an account or place an order.
• Password, which is hashed and stored securely by Supabase. We never have access to your plaintext password.
• Site polygon coordinates, drawn by you in the map tool and used to generate your report.
• Payment information, collected and processed by Stripe. Card details are never transmitted to or stored on our servers.
• Marketing consent preference, recorded when you opt in or out at checkout.
• Saved map project data, including polygon boundaries, water features, and site plan features you choose to save to your account.

3. How We Collect Your Information

We collect personal information through the following means:

• Account sign-up. When you create an account, we collect your email address and password.
• Checkout. When you purchase a report, Stripe collects your payment details on our behalf.
• Map tool usage. When you draw a site boundary or save a map project, we collect polygon coordinates and related project data.
• Consent checkbox. When you opt in to marketing emails at checkout, we record your consent and a timestamp.

4. Why We Collect Your Information

We collect and use your personal information for the following purposes:

• Deliver reports. To generate and email your land intelligence PDF report and KMZ map pack.
• Manage your account and subscription. To authenticate you, manage billing, and provide access to saved maps.
• Send transactional emails. To send order confirmations, report delivery emails, account notices, and password resets. These are required for the service to function and do not require marketing consent.
• Send marketing emails. To send product updates, tips, and promotions, only with your express consent.
• Improve the service. To understand how the tool is used and to fix issues.

We never sell, rent, or share your personal information with third parties for their own marketing purposes.

5. Third-Party Service Providers

We use the following third-party processors to operate our service:

• Supabase provides authentication, user account storage, and saved map metadata. Supabase servers are located in the United States.
• Stripe processes all payments. Stripe is PCI-DSS compliant and handles all card data directly. See Stripe's privacy policy.
• Cloudflare R2 stores generated report files, KMZ map packs, and saved map project data.
• Resend delivers transactional and marketing emails on our behalf.
• Mapbox provides map tiles and geocoding within the map tool. Mapbox may collect anonymized usage data per their own privacy policy.
• DataBC, NASA POWER, iNaturalist are public data sources we query to generate reports. No personal information is shared with these services.

Your personal information may be stored or processed in the United States by some of these providers. By using our service, you consent to this transfer.

6. CASL Compliance (Canada's Anti-Spam Legislation)

We fully comply with Canada's Anti-Spam Legislation (CASL).

• Express consent required. We only send marketing emails (product updates, promotions, tips) if you have given express opt-in consent via the checkbox at checkout.
• Consent is recorded. When you opt in, we record your consent along with a timestamp for our records.
• Implied consent from purchase. If you purchase a report without opting in to marketing, we may send you related commercial messages for up to two years from the date of purchase, as permitted under CASL. You may opt out at any time.
• Every marketing email includes: a working unsubscribe link, Swell Farms Inc. as the sender, and our contact information.
• Transactional emails do not require consent. Emails directly related to your order (report delivery, account notices, password resets) are not commercial electronic messages under CASL and are sent without marketing consent.
• Withdraw consent anytime. You can withdraw your marketing consent at any time by clicking the unsubscribe link in any marketing email, or by emailing info@prework.ca. We will process your request within 10 business days.

7. Cookies and Local Storage

• Supabase auth token. When you log in, an authentication token is stored in your browser's localStorage. This is required for the login session to persist and is not a tracking cookie.
• Session storage. We use sessionStorage to temporarily preserve your map state during authentication redirects. This data is cleared when you close the browser tab.
• No third-party tracking cookies. We do not use any third-party tracking or analytics cookies.

8. Data Retention

• Report files (PDFs, KMZ map packs): retained for 90 days after generation, then permanently deleted.
• Site polygon coordinates: not linked to your identity. Deleted after 90 days.
• Account email address: retained for as long as your account is active. Deleted upon account deletion request.
• Saved map projects: retained for as long as your account is active. Deleted upon account deletion request.
• Payment records: retained by Stripe in accordance with their data retention policy and applicable financial regulations.
• Marketing consent records: retained for as long as necessary to demonstrate CASL compliance.

9. Your Rights Under PIPEDA and BC PIPA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA), you have the right to:

• Access your personal information held by us.
• Request correction of any inaccurate personal information.
• Request deletion of your personal information, subject to any legal obligations we may have to retain it.
• Withdraw marketing consent at any time, without affecting your ability to use the service.
• File a complaint with the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, email info@prework.ca. We will respond within 30 days.

10. Data Security

• All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
• Passwords are hashed by Supabase. We never store or have access to plaintext passwords.
• All payment card data is handled by Stripe, which is PCI-DSS Level 1 compliant.
• Access to personal information on our systems is restricted to authorized personnel only.

11. Data Breach Notification

In the event of a data breach that creates a real risk of significant harm to affected individuals, we will notify those individuals and report the breach to the Office of the Privacy Commissioner of Canada as required under PIPEDA. We will also notify the BC Information and Privacy Commissioner where required under PIPA.

12. Data Disclaimer

Report data is sourced from DataBC, NASA POWER, iNaturalist, and other public data sources. All data is provided for informational purposes only. We make no representations or warranties regarding the accuracy, completeness, or reliability of the data. Reports are not a substitute for professional legal, survey, environmental, or planning advice.

13. Children

Our service is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from someone under 18, we will take steps to delete that information promptly.

14. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Your continued use of the service after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

15. Contact

If you have questions about this privacy policy or wish to exercise your privacy rights, contact us:

Swell Farms Inc.
Campbell River, British Columbia, Canada
info@prework.ca