Privacy Policy

1. What we collect

• Account details: name, email, phone number, the city you're looking in, and whether you rent, host or both.
• Renter profile and checks: employment details, identity check results (from Stripe Identity), income documents you upload and our review of them, and your credit score and Landlord and Tenant Board records (from our screening partner).
• Landlord details: home address, listing information and photos, and payout status. Bank and identity details for payouts are collected and held by Stripe, not us.
• Bookings and tenancies: applications, offers, leases, notices, condition reports, rent payments and receipts.
• Messages you send through the app.
• Payment details: cards and bank accounts are stored by Stripe; we only keep a reference and the last four digits.
• Usage: pages visited, device and browser information, and error reports. Analytics only run if you accept them (see Cookies).

2. Why we use it

• To run the marketplace: accounts, listings, applications, leases, rent collection and payouts.
• To show landlords your check results for the homes you apply to, so they can decide.
• To send notifications and emails about your account (you can switch most emails off in Settings).
• To prevent fraud and abuse, keep the platform secure, and meet legal, tax and accounting duties.
• To improve the product, using analytics you've agreed to.

We don't sell your personal information.

3. Consent

We ask for your consent when you create an account and again, expressly, before running identity, income or credit checks. You can withdraw consent at any time, but some services (like applying for a home) need it to work.

4. Who we share it with

• Landlords you apply to: your name, profile and check results. Once a lease is signed, each side gets what the lease requires (such as the landlord's address for notices).
• Stripe: payments, payouts and identity verification.
• Our screening partner: credit and Landlord and Tenant Board checks.
• Service providers that host or run parts of the service: Supabase (database and storage), our web hosting provider, Resend (email), Sentry (error reports), PostHog (analytics, with consent) and Arcjet (security).
• Authorities, when the law requires it.

Some of these providers store data outside Canada, including in the United States, where it may be accessible to authorities under local law. We require them to protect it.

5. How long we keep it

Check results are valid for 90 days. Income documents are kept only as long as needed to review them and for any open applications. Records of tenancies, payments and fees are kept for six years for tax and accounting purposes, even after you delete your account.

6. Your choices and rights

• See and download your data: Settings → Your data.
• Correct your details: Settings → Profile.
• Turn emails off: Settings → Email notifications.
• Delete your account: Settings → Delete account. Your personal details are removed and you can't sign in again; records we must keep stay, without your name.
• Cookies and analytics: use Cookie settings at the bottom of any page.

You can also contact us at [email protected]. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

7. Security

Data is encrypted in transit and at rest, access is limited by role, and sensitive details like card and bank numbers never reach our servers. No system is perfect; if a breach creates a real risk of significant harm, we'll tell you and the Privacy Commissioner as the law requires.

8. Contact

Our privacy officer can be reached at [email protected], or Apegato Inc., Toronto, Ontario, Canada. We'll tell you about significant changes to this policy by email or in the app.