Privacy Policy

Moduleaf Technologies Inc. ("Moduleaf", "we", "us", or "our") operates the Makerleaf platform ("Makerleaf" or the "Service"), an online marketplace that connects customers with local makers for manufacturing services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law.

By creating an account or using the Service, you consent to the collection, use, and disclosure of your personal information as described in this policy. If you do not agree, please do not use the Service.

Moduleaf Technologies Inc. is an Ontario-incorporated company responsible for the Makerleaf platform. Our designated privacy contact can be reached at contact@moduleaf.ca.

Information you provide directly

• Account information: your name, email address, and password (stored as a one-way hash - we never see your plaintext password).
• Profile information: approximate location (city or neighbourhood - we do not collect precise GPS coordinates), profile photo, and role preferences (customer, maker, or both).
• Maker profile: business name, equipment list, materials, pricing information, and Stripe Connect account details for payout.
• Manufacturing requests: project descriptions, file uploads (STL, DXF, STEP, PDF, images), dimensions, and preferences you submit as a customer.
• Messages: text messages exchanged between you and other users through the Makerleaf messaging system.
• Reviews: ratings and written feedback you submit after completing an order.
• Payment information: billing details submitted through our payment processor, Stripe. We do not store full card numbers or bank account numbers on our servers.

Information collected automatically

• Session data: encrypted session tokens stored in browser cookies to keep you signed in.
• Log data: IP addresses, browser type, operating system, pages visited, and timestamps, for security monitoring and troubleshooting.
• Usage data: how you interact with the Service (e.g. which features you use), collected in aggregate to improve the platform.

Information from third parties

• Stripe: we receive confirmation of payment outcomes, payout status, and identity verification results from Stripe when you connect a Stripe account as a maker or make a payment as a customer.

We use your personal information to:

• Create and manage your account.
• Operate the marketplace: match customer requests with makers, facilitate quoting, order management, messaging, and reviews.
• Process payments and payouts through Stripe Connect.
• Communicate with you about your account, orders, and the Service.
• Detect and prevent fraud, abuse, and violations of our Terms of Use.
• Comply with legal obligations, including tax reporting requirements under the Income Tax Act (Canada).
• Improve and develop the Service based on aggregate, anonymised usage patterns.

We do not sell your personal information. We share it only as described below.

Between users

When you submit a manufacturing request, your project details (but not your precise address or contact information) are visible to makers in your area. When an order is placed, the maker receives pickup or delivery contact details as needed to fulfill the order. Your name and reviews are displayed publicly on the platform.

Service providers

• Stripe, Inc.: payment processing and maker identity verification. Stripe's privacy practices are described at stripe.com/privacy.
• Infrastructure providers: cloud hosting and storage providers used to operate the Service, bound by confidentiality obligations.

Legal requirements

We may disclose your information if required by law, court order, or government authority, or where we believe in good faith that disclosure is necessary to prevent harm or protect the rights, property, or safety of Moduleaf, our users, or the public.

Business transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained until you request deletion or we close your account.
• Transaction and financial records are retained for a minimum of seven (7) years after the transaction date, as required by the Income Tax Act (Canada).
• Messages are retained for the lifetime of the associated order and for a reasonable period thereafter for dispute resolution purposes.
• Log data is retained for up to 90 days.

We use session cookies - small encrypted files stored in your browser - to keep you signed in. These are strictly necessary for the Service to function. We do not use third-party advertising cookies or behavioural tracking technologies.

We use industry-standard security measures including encryption in transit (HTTPS/TLS), hashed password storage, and access controls to protect your personal information. No method of transmission over the Internet is 100% secure. In the event of a data breach that poses a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada (OPC) and affected individuals as required by PIPEDA.

Under PIPEDA, you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: request that inaccurate or incomplete information be corrected.
• Withdrawal of consent: withdraw consent to our use of your personal information (subject to legal and contractual restrictions).
• Deletion: request that your account and associated personal information be deleted, subject to our legal retention obligations.

To exercise these rights, contact us at contact@moduleaf.ca. We will respond within 30 days.

The Service is not directed at children under 13. Users between 13 and 17 may use the Service only with the consent and supervision of a parent or legal guardian. If you believe a child under 13 has provided us with personal information, contact us at contact@moduleaf.ca and we will delete it promptly.

Your information is processed on servers located in Canada and/or the United States. By using the Service, you consent to such transfers.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date.

Questions or concerns about this Privacy Policy? Contact our Privacy Officer at:

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC).