MFI Privacy Policy

Effective Date: December 10th 2025

MFI Group ("MFI”, "we”, "us”, "our”) respects your privacy and is committed to protecting the personal information of our users.

This Privacy Policy explains:

What personal information we collect
How we use, share, and protect it
Your choices and rights regarding your information

This Privacy Policy applies to:

The MFI website and any related web or mobile applications (the "Platform”)
All services offered by MFI (the "Services”)

By accessing or using the Platform or Services, you agree to the collection, use, and disclosure of your information in accordance with this Privacy Policy and our User Agreement.

If you do not agree, you must not use the Platform.

1. WHO WE ARE & HOW TO CONTACT US

MFI Group
MFI Group
C113 - 199 Bay Street
Toronto ON, M5L 1L5
Canada

Privacy Contact / Data Protection Contact
Email: support@mfi.group

We are the organization responsible for deciding how and why your personal information is processed when you use the Platform.

If you have any questions about this Privacy Policy or our handling of personal information, you can contact us at the email above.

2. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to:

Clients – businesses or individuals using MFI to post jobs and hire Installers
Installers – independent installers, agencies, or businesses seeking work via MFI
Agency Members – installers working under an Agency Account
Site Visitors – people browsing the Platform without creating an Account

The Platform is intended for business use only, not for personal/consumer purposes, but we may still process personal information of individuals (e.g., sole proprietors, contact persons).

3. INFORMATION WE COLLECT

We collect information in three main ways:

Information you provide directly
Information we automatically collect when you use the Platform
Information from third parties

3.1 Information You Provide Directly

When you create an Account, use the Platform, or communicate with us, you may provide:

Account & Profile Information

Name, business name, and contact details (email, phone, address)
Account username and password
Role on the Platform (Client, Installer, Agency, etc.)
Professional details (skills, experience, certifications, portfolio items, company profile, services offered)
Business registration or tax ID (if applicable)

Job & Contract Information

Job postings and project details
Quotes, proposals, and bids
Service Contracts, scopes of work, timelines, and pricing
Messages and communications between Users (e.g., chat, notes, attachments, photos)

Verification & Compliance Information

Government-issued identification or business documents (e.g., license, registration)
Selfie or facial image for identity verification (if used)
Proof of address or business location
Insurance certificates (e.g., liability, workers’ compensation where applicable)

Payment & Billing Information

We typically do not store full payment card details ourselves. However, through our payment and escrow providers, we may receive and process:

Limited payment details (e.g., last 4 digits of card, card type, billing country)
Bank account or payout details for Installers
Transaction-related information (amount, currency, status)

Support & Communication

Emails and support requests
Feedback, complaints, or dispute information
Survey responses or participation in beta programs

3.2 Information We Collect Automatically

When you visit or use the Platform, we may automatically collect:

Usage & Device Data

IP address
Browser type and version
Device type, operating system, and device identifiers
Pages visited, actions taken, and features used
Timestamps, session duration, and referring URLs

Cookies & Similar Technologies

We use cookies and similar technologies (e.g., pixels, local storage) to:

Keep you logged in and maintain sessions
Remember your preferences
Analyze usage and performance
Support security and fraud prevention

You can control cookies through your browser settings, but disabling them may affect Platform functionality.

3.3 Information from Third Parties

We may receive information about you from:

Payment processors and escrow providers (e.g., transaction status, limited payment metadata)
Identity or compliance service providers (e.g., ID verification results, watchlist checks where legally required)
Other Users (for example, feedback from Clients about Installers, or vice versa)
Public or commercial sources (e.g., business registries, professional platforms)

We use this information to help verify identity, combat fraud, comply with law, and improve trust and safety.

4. HOW WE USE YOUR INFORMATION

We use personal information for the following purposes:

4.1 To Operate and Provide the Services

Creating and maintaining your Account
Allowing Clients to post jobs and Installers to submit bids
Facilitating messaging and communication between Users
Managing Service Contracts and project workflows
Processing payments through escrow and disbursing funds
Providing customer support and resolving issues

4.2 To Maintain Trust, Safety & Compliance

Verifying identity and business details (where applicable)
Detecting, preventing, and investigating fraud, abuse, or security incidents
Enforcing our User Agreement, Escrow Instructions, and policies
Complying with legal obligations, regulatory requirements, and law enforcement requests

4.3 To Improve, Personalize, and Develop the Platform

Analyzing usage patterns to understand how the Platform is used
Improving features, workflows, and user experience
Personalizing job recommendations, search results, or Installer recommendations
Testing and deploying new tools, including AI-powered features

Where permitted, we may use User Content and usage data in aggregated or de-identified form for analytics, product development, and business intelligence.

4.4 To Communicate with You

Sending service-related messages (e.g., contract updates, system alerts, payment notifications)
Responding to your inquiries and support requests
Sending marketing communications where permitted by law (you may opt out at any time)
Informing you about updates to this Privacy Policy or our Terms of Service

5. LEGAL BASES (IF YOU ARE IN THE EEA/UK OR SIMILAR REGIONS)

If you are in a jurisdiction that requires a "legal basis” for processing (e.g., EEA/UK), we typically rely on:

Performance of a contract – to provide the Services and operate the marketplace
Legitimate interests – to secure the Platform, prevent fraud, improve services, and communicate reasonably with you
Legal obligations – to meet regulatory, compliance, and bookkeeping requirements
Consent – for certain marketing or optional cookies, where required

Where we rely on consent, you have the right to withdraw your consent at any time.

6. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to data brokers.

We may share your information in the following limited ways:

6.1 With Other Users (as Part of the Marketplace)

Clients may see Installer profiles, ratings, work history, and certain contact/business information as needed to evaluate and engage them
Installers may see Client profile details, job posts, and information relevant to the Project
Messages and attachments you send via the Platform are visible to the counterparties to that conversation

You control much of what appears in your profile and proposals, subject to our Terms.

6.2 With Service Providers

We use trusted third-party service providers who help us operate the Platform, such as:

Hosting and infrastructure providers
Payment processors and escrow providers
Identity verification and compliance tools
Analytics and performance services
Communication tools (email delivery, support platforms)

These providers access your information only as necessary to perform services on our behalf and are bound by contractual confidentiality obligations.

6.3 For Legal, Compliance, and Protection Purposes

We may disclose information if we reasonably believe it is necessary to:

Comply with a law, regulation, subpoena, court order, or legal process
Respond to a lawful request from law enforcement or government authorities
Enforce our User Agreement, Escrow Instructions, or other policies
Protect the rights, property, or safety of MFI, our Users, or the public
Detect, prevent, or address fraud, security, or technical issues

6.4 Business Transfers

If MFI is involved in a merger, acquisition, financing, sale of assets, reorganization, or similar event:

Your information may be transferred as part of that transaction, subject to appropriate confidentiality protections
We will take reasonable steps to ensure the recipient continues to protect your personal information in a manner consistent with this Privacy Policy

7. INTERNATIONAL TRANSFERS

MFI is based in Canada. Your information may be stored and processed in Canada and other countries, including where our service providers or infrastructure are located.

These countries may have different data protection laws than your home jurisdiction. Where required, we will:

Implement appropriate safeguards (e.g., contractual clauses) to protect personal information during such transfers; or
Rely on other lawful transfer mechanisms as permitted by applicable law.

8. DATA RETENTION

We retain personal information for as long as reasonably necessary to:

Provide the Services;
Maintain legitimate business records;
Comply with legal, tax, and accounting obligations;
Resolve disputes and enforce agreements;
Maintain security and prevent fraud.

We may retain certain data even after you close your Account where we have a legitimate, lawful reason to do so — for example, to comply with legal obligations, retain transaction records, or prevent abuse.

When information is no longer needed, we will securely delete, anonymize, or de-identify it.

9. SECURITY

We implement technical and organizational measures designed to protect personal information, including:

Encryption in transit (e.g., HTTPS)
Access controls and authentication
Limited access to personal data on a need-to-know basis
Monitoring for suspicious activity where feasible

However, no system can be 100% secure. You are responsible for:

Keeping your password confidential
Using unique, strong passwords
Promptly notifying us if you suspect unauthorized access to your Account

10. YOUR RIGHTS & CHOICES

Your rights will depend on where you are located and the laws that apply. Depending on your jurisdiction, you may have the right to:

Access – request a copy of the personal information we hold about you
Correction – request corrections to inaccurate or incomplete information
Deletion – request that we delete certain personal information (subject to legal limits)
Restriction – request that we restrict certain processing activities
Portability – request your personal information in a structured, commonly used, machine-readable format
Objection – object to certain processing, especially where based on legitimate interests or direct marketing
Withdraw consent – where processing is based on your consent

To exercise these rights, contact us at: [Insert privacy email]. We may need to verify your identity before fulfilling your request.

We will respond within the timeframe required by applicable law. In some cases, we may refuse or limit a request if:

The law allows or requires us to do so; or
We cannot adequately verify your identity; or
The request is manifestly unfounded or excessive.

Marketing Communications

You can opt out of marketing emails:

By clicking "unsubscribe” in the email; or
By contacting us directly.

Service-related notifications (e.g., security alerts, payment notices) may still be sent as they are necessary for operating the Platform.

11. COOKIES & TRACKING TECHNOLOGIES

We use cookies and similar technologies for:

Authentication and session management
Preferences (e.g., language, layout)
Analytics and performance
Security and fraud detection

You can manage cookies through your browser settings. Blocking all cookies may impair the Platform’s functionality.

If we use third-party analytics or advertising services, those providers may set their own cookies. These third parties are responsible for their own privacy practices.

If you want, we can later create a separate Cookie Policy with more granular detail.

12. CHILDREN’S PRIVACY

The Platform is intended for adults engaged in business (such as company representatives, sole proprietors, or professional contractors).

We do not knowingly collect personal information from children under the age of 16. If we learn that we have collected personal information from a child under that age:

We will take reasonable steps to delete such information; and
May close the associated Account.

If you believe a child has provided personal information through the Platform, please contact us immediately.

13. THIRD-PARTY LINKS & SERVICES

The Platform may contain links to third-party sites or services that are not controlled by MFI.

We are not responsible for:

The privacy practices of those third parties; or
The content, security, or operations of their websites.

We encourage you to review the privacy policies of any third-party services you use.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

If we make material changes, we will:

Post the updated version on the Platform with a new "Effective Date”; and
Provide reasonable notice via the Platform or email where appropriate.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

15. HOW TO CONTACT US OR COMPLAIN

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, you can contact us at:

MFI Group – Privacy
Email: support@mfi.group

If you are located in a jurisdiction with a data protection authority (e.g., in Canada or the EU/UK), you may also have the right to lodge a complaint with that authority.

Change language

Change currency