Effective date: June 1, 2026 · Last updated: June 1, 2026
Tondazo ("we," "us," or "our") is committed to protecting the privacy of the contractors and homeowners who interact with our platform. This Privacy Policy explains what data we collect, why we collect it, and how it is used.
This policy covers:
| Category | What We Collect | Why |
|---|---|---|
| Contractor Account | Name, company name, email, phone, trade type, city, billing plan | Account creation, authentication, billing, and service delivery |
| Lead Data | Homeowner name, phone, email, service type, city, job description, quote amount | Executing follow-up calls on the contractor's behalf |
| Call Records | Call date/time, duration, outcome, AI-generated summary, lead temperature, next action | Reporting to the contractor, improving follow-up quality |
| Portal Usage | Login sessions, pages visited, actions taken in the dashboard | Security, session management, and product improvement |
| Communications | Emails sent/received related to your account | Support, onboarding, billing notifications |
We do not sell your data or homeowner data to any third party. We do not use homeowner contact information for any purpose other than the contractor's requested follow-up.
We use the following third-party services to operate the platform:
Each provider has its own privacy policy and security standards. We only share the minimum data necessary with each provider to deliver the Service.
All data is stored in Google-managed infrastructure with access controls. Passwords are stored as one-way hashes (bcrypt) — we cannot read your password. API keys and credentials are stored as environment variables and never hardcoded. Access to contractor data is authenticated via session tokens.
Contractors are responsible for ensuring they have the right to have homeowners contacted on their behalf. Tondazo acts as a service provider executing the contractor's follow-up instruction. Alexandra identifies herself and the contractor's company on every call. Homeowners who ask not to be called again are flagged and removed from the active queue immediately.
As a contractor, you have the right to:
To exercise any of these rights, email team@tondazo.com.
We retain your account data for as long as your subscription is active, plus 90 days after termination (to allow for reactivation). Call records and lead data are retained for 24 months then automatically purged unless you request earlier deletion. Anonymized aggregate analytics may be retained indefinitely.
The Tondazo portal uses a session cookie to keep you logged in. This cookie is essential to the Service and cannot be disabled. We do not use advertising cookies or cross-site tracking.
The Service is intended for business use only. We do not knowingly collect personal information from individuals under 18 years of age.
This policy is governed by applicable Canadian privacy law (PIPEDA / Quebec Law 25) and, where applicable, U.S. state privacy laws. Homeowner calls in the U.S. are conducted in compliance with the TCPA. Homeowner calls in Canada are conducted in compliance with CASL and CRTC telemarketing rules.
We may update this Privacy Policy from time to time. We will notify you via email at least 14 days before material changes take effect. Continued use of the Service constitutes acceptance.