Who we are
BLACK DIAMOND FACILITY SERVICES (“Black Diamond”, “we”, “us”) operates the Black Diamond mobile app and the website blackdiamondfacility.ca (together, the “Service”). The Service lets you request and manage facility-service bookings for your properties.
Our privacy contact for every question, request, or complaint is privacy@blackdiamondfacility.ca.
Information we collect
Account information
When you create an account you sign in with Google or with Apple. We receive your name, email address, and — if your sign-in provider shares it — a profile photo. Apple users may choose a private relay email address. You may also add a phone number to your profile.
Booking information
When you request a booking — with or without an account — we collect your name, email address, phone number, the service address and its structured address details, the service requested, your preferred date and time, checkout and check-in times, property details such as bedrooms and bathrooms, access instructions, supply notes, preferences, an optional listing link, free-text notes, and up to eight photos you choose to attach.
Saved properties
If you save properties to your account, we store their label, address, property details, access instructions, preferences, and photos so repeat bookings are faster.
Push notification registration
If you enable notifications, we register your device platform (iOS or Android) and a push notification token so booking updates can reach your device.
We do not collect or store passwords — sign-in works exclusively through Google or Apple. We do not collect payment card data, and the app contains no analytics, advertising, or tracking software.
How we use your information
- To create and secure your account and sign you in
- To receive, schedule, confirm, and manage your bookings
- To email you booking confirmations and service updates, and to notify our team of new bookings
- To send push notifications about your bookings — you can turn these off in the app or in your device settings
- To provide address autocomplete while you enter a service address
- To fulfil data export and account deletion requests
- To keep security and audit logs that protect the Service from fraud and abuse
Third-party services we use
We share data only with the providers required to run the Service:
- Google Sign-In and Sign in with Apple — authentication. We never see your Google or Apple password, and your use of those services is governed by Google’s and Apple’s own privacy policies.
- Google Places API — address autocomplete. Address queries are sent from our server, not your device, and no account identity is attached to them.
- Resend — delivery of transactional email (booking confirmations and updates) from Black Diamond’s own verified domain, with Emergent’s managed email service as a fallback sender.
- Emergent (emergent.sh) — application hosting and managed infrastructure: the authentication session exchange, the push notification relay (device tokens are registered with this relay and delivered through Apple Push Notification service or Firebase Cloud Messaging; our own servers do not retain device tokens), and object storage for the photos you upload.
- MongoDB — the database, operated with the application, where account, booking, and property records are stored.
We do not sell your personal information.
Data export and account deletion
Export
You can download a copy of your records from within the app at any time, in PDF or JSON format. The export covers your account details, saved properties, and booking history; attached photos are listed by count rather than embedded.
Deletion
You can permanently delete your account in the app, confirmed by typing DELETE. Deletion removes your user record, your saved properties, and your active sign-in sessions. Your past booking and customer records are anonymized: your name, email address, phone number, and address are replaced with placeholder values, and for completed bookings the access instructions, notes, photos, and address details are erased. Uploaded photos that are no longer referenced by any record are purged from storage.
Limited, pseudonymous audit records of the deletion itself are kept for security and fraud-prevention purposes. You can also email privacy@blackdiamondfacility.ca to request access, correction, export, or deletion.
Data retention and backups
We keep your account and booking data while your account is active. When you delete your account, personal information is deleted or anonymized as described above, subject to records we must retain for legal, accounting, security, fraud-prevention, or dispute-resolution purposes.
We take a verified backup of the database every night. Backups are kept on a rotating schedule — nightly backups for 7 days, weekly backups for 8 weeks, and monthly backups for up to 12 months. Information you delete from the live app may therefore remain in backups until its rotation window passes. Backups are used only for disaster recovery and are not used to return deleted personal information to live systems.
Security
All traffic between the app and our servers uses HTTPS encryption. Sign-in sessions use server-side tokens that expire after 7 days, and no passwords are ever stored. Uploaded photos are validated by file type, and the credentials used for address lookup never leave our server. No method of transmission or storage is perfectly secure, but we work to protect your information with these measures and limit access to it.
Children
The Service is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact privacy@blackdiamondfacility.ca and we will remove it.
Where data is processed
Your information is processed by the providers listed in Chapter 04, in the regions where those providers operate. By using the Service, you understand that your information may be processed outside your home province, state, or country.
Changes to this policy
We may update this policy from time to time. The current version will always be posted at blackdiamondfacility.ca/privacy with its “Last updated” date, and material changes will be reflected there before they take effect.
Contact
The Service is operated by BLACK DIAMOND FACILITY SERVICES. For any privacy question, request, or complaint — including access, correction, export, or deletion of your personal information — write to us at privacy@blackdiamondfacility.ca.