Privacy notice

We collect only what the service needs to work. There are no accounts, no passwords, and no profiles.

Information you give us:

• The property address you enter. This is the input for your report, together with the coordinates and property records that resolve from it. When it refers to an identifiable person's home, we treat it as personal information.
• The email address you provide for report delivery and link recovery. We store it in protected form (keyed hashes and encrypted values), not as an open column anyone can browse.
• If you use the chat assistant (when available): the question you type, including any situation you describe in it. We treat it as personal information and protect it accordingly.
• Optional marketing consent. A separate, clearly optional checkbox. Leaving it unticked never affects your purchase or delivery.

Payment. Payments are handled by Stripe on Stripe-hosted pages. Your card number goes directly to Stripe; we never see or store it. We receive only the transaction outcome and the records Stripe provides (amount, time, a payment reference).

Records we create:

• Order records (what you bought, when, and the price shown to you).
• Consent and terms-acceptance records: the exact version of the wording you accepted, a cryptographic fingerprint (SHA-256) of that wording, the time, and a protected form of your IP address. This is the evidence that a contract was formed — we keep it so we can honour the contract, answer disputes, and prove what you were shown.
• Delivery and recovery logs keyed to a hashed form of your email address.
• Security logs used for rate-limiting and abuse prevention. Network addresses in these logs are stored as keyed hashes, not in raw form.

Cookies. We use only functional cookies — session, consent, and security cookies set by our infrastructure — never advertising or cross-site tracking cookies. Map tiles on report pages load from a mapping provider's servers, which, like any web request, see your browser's IP address.

What we do not collect: browsing profiles, advertising identifiers, or any personal information beyond what is listed above. Your report is built from public datasets (for example, City of Calgary open data and Statistics Canada publications); we do not send your personal information to those publishers — their data is loaded into our own systems on a schedule, and your address is matched against it there.

We collect and use personal information for a short list of purposes, identified at or before the time of collection:

1. To produce and deliver your report — the address is the subject of the assessment; the email is how the report and your contract copy reach you, and how you recover your link.
2. To answer questions you ask in the chat assistant, when that feature is available.
3. To process payment and prevent fraud — through Stripe.
4. To keep the service safe and reliable — rate-limiting, abuse prevention, security monitoring, and error monitoring with personal information scrubbed before error reports leave our systems.
5. To meet legal obligations — tax and accounting records, the emailed copy of your contract required by Alberta's consumer-protection rules, and journals of consent and terms acceptance.
6. To send occasional marketing email — only if you separately opted in. The marketing checkbox is optional, never a condition of purchase, and every email includes an unsubscribe link that works in one click.

We do not sell personal information, and we do not use it for advertising profiles.

Your information is stored primarily in Canada. Specific functions are performed by the service providers below. This list is deliberately complete in advance: it includes standby and failover providers we may switch to, and one planned provider, so that nothing appears here only after the fact.

We have data-processing agreements with providers that handle personal information on our behalf, requiring a comparable level of protection to our own (PIPEDA, Schedule 1, clause 4.1.3). Public open-data pipelines (City of Calgary, Statistics Canada, Bank of Canada) process public records about properties and the economy — they do not receive your personal information and are therefore not listed as processors.

Some of the providers above store or process personal information outside Canada — primarily in the United States, and in the European Union for error monitoring. Some Canada-region services are operated by US-headquartered companies, and traffic to our site passes through global network infrastructure. While information is outside Canada, it is subject to the laws of the country where it is held, and courts, law enforcement and regulators there may be able to compel access to it under those laws. That is true of any service that uses international providers; we say it plainly rather than bury it.

Our controls for this are four commitments:

1. Consent first. Before you submit personal information on a paid flow — and before the first chat exchange, when that feature is available — you are shown a click-through step that names these providers, including failover destinations. We do not process first and explain later.
2. This document. This page is the versioned, standing description of the data flows, the providers (including failover providers), the regions, the retention periods, and your rights. When it changes, its version changes.
3. Data-processing agreements. Contractual data-protection terms with each provider that handles personal information on our behalf.
4. Alberta notice. As required by Alberta's Personal Information Protection Act, section 13.1: some of our service providers are outside Canada; you may obtain written information about our policies and practices with respect to those providers by contacting us (see Contact below); and the person who can answer your questions about how those providers collect, use, disclose or store personal information on our behalf is our Privacy Officer, also named in Contact.

Access and correction. You may ask what personal information we hold about you, how it is used, and to whom it has been disclosed, and you may ask us to correct it (Alberta PIPA sections 24–25; PIPEDA Schedule 1, Principle 9 — Individual Access). We respond within the time limits PIPA sets — normally 45 days.

Withdrawing consent. You may withdraw consent at any time, subject to legal and contractual limits; we will tell you what the practical consequences are. Withdrawing marketing consent is one click — every marketing email carries an unsubscribe link, and unsubscribing never affects a report you have bought.

Deletion — how it actually works here, stated plainly. Our purchase and audit records are append-only by design: once written, they are never silently edited. That design is what lets us prove, years later, exactly what you bought, what you were shown, and what our systems did — protection that works in your favour in a dispute as much as ours. Because of it, deletion is engineered rather than pretended, in two layers:

• Redaction: the record is hidden from every reading path we operate — staff tools, analytics, exports — through an enforced redaction layer, and
• Key destruction: your personal details are stored encrypted with a per-record key; on a deletion request we destroy that key, which makes the encrypted copies — including those inside backups and disaster-recovery snapshots — permanently unreadable. Alberta's PIPA expressly recognizes rendering information non-identifying as a form of disposal (section 35(2)(b)).

You can start a deletion request at /delete-my-data or by writing to us. We act on our own systems promptly. Third-party providers hold short-lived operational copies (for example, delivery queues and model-provider caches); we do not control their deletion clocks and will not pretend otherwise: provider caches expire within their published windows — on their schedule, not ours. We tell you what we destroyed, and what expires on whose clock.

Honest limits. Some records must survive a deletion request for a time: records the law requires us to keep (tax records, consent evidence), records needed for an active dispute, and records under a legal hold. Alberta PIPA expressly permits retention needed for legal or business purposes even after consent is withdrawn (section 35(3)). When the retention reason ends, the same destruction discipline applies. We will tell you, in our response, which records we must keep and why.

Complaints. Contact our Privacy Officer first (see Contact). If you are not satisfied with our response, you may complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

We keep personal information only as long as we reasonably need it for legal or business purposes, then destroy it or render it non-identifying (Alberta PIPA section 35). Current periods:

When a retention period ends, destruction is a deliberate, logged operational act — never a silent background edit.

This notice is versioned, and the version is load-bearing: when you accept our terms at checkout, your consent record stores the version identifier and a SHA-256 fingerprint of the exact wording you saw — so there can never be a dispute about which text you accepted. We do not edit a published version in place: any change becomes a new version with a new effective date, and past orders keep pointing at the version they were made under. The wording behind any version you accepted can be reproduced on request.

The current version appears in the footer of every page of this site. The current text is a working draft (tos-v0-draft-2026-07-13+privacy-v0-draft-2026-07-13); version 1.0 · effective [DATE] will be published here following legal counsel review.

Write to the Privacy Officer to: request access to or correction of your personal information; obtain written information about our policies and practices regarding service providers outside Canada (Alberta PIPA sections 6(3) and 13.1(3)); ask questions about how those providers collect, use, disclose or store personal information for us; or make a deletion request if you prefer email to the /delete-my-data form.

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.