Privacy Policy
Une version française de ce document est disponible sur demande. / A French version of this document is available upon request.
Our Privacy Commitment
LeaseWit is committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), Quebec's Law 25, and applicable provincial privacy legislation including British Columbia's and Alberta's Personal Information Protection Acts (PIPA).
1. Introduction
LeaseWit (“Company,” “we,” “us,” or “our”) operates the LeaseWit website and mobile applications (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.
We are committed to protecting your privacy and handling your personal information responsibly. This policy applies to all users of our Service in Canada.
By using our Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with our practices, please do not use our Service.
2. Information We Collect
2.1 Information You Provide Directly
Account Information:
- Email address
- Full name
- Province of residence
- Password (stored in hashed form) for email signup
- Google account identifier (if using Google OAuth)
Property Information:
- Property address
- Property type (apartment, house, condo, townhouse)
- Property notes and descriptions
Inspection Information:
- Inspection date and time
- Inspection type (move-in, move-out, routine)
- Inspection status and notes
Photo Information:
- Photos you upload of property conditions
- Photo captions and descriptions
- Room categorization
- Photo metadata (EXIF data including timestamp, and GPS location if available on your device)
2.2 Information Collected Automatically
Technical Information:
- Device type and operating system
- Browser type and version
- IP address
- Access times and dates
- Pages viewed and features used
- App crash reports and error logs
2.3 Payment Information
Payment card details are collected and processed exclusively by Stripe, our PCI-DSS compliant payment processor. LeaseWit does not store complete credit card numbers on our servers. We receive only:
- Last four digits of your card
- Card brand (Visa, Mastercard, etc.)
- Billing address (for fraud prevention)
- Transaction history and subscription status
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Providing the Service
- Creating and managing your account
- Storing your property and inspection documentation
- Generating PDF inspection reports
- Enabling move-in vs move-out comparisons
- Providing province-specific tenancy information
3.2 Communication
- Sending transactional emails (account confirmation, password reset, subscription receipts)
- Responding to your inquiries and support requests
- Notifying you of Service updates and changes
- Sending marketing communications (with your consent)
3.3 Business Operations
- Processing payments and managing subscriptions
- Analyzing Service usage to improve features
- Ensuring Service security and preventing fraud
- Complying with legal obligations
4. Legal Basis for Processing
Under PIPEDA, we process your personal information based on the following legal grounds:
Consent:
When you create an account, upload content, or opt-in to marketing communications, you provide express consent for us to process your information for those purposes.
Contract Performance:
Processing necessary to provide the Service you requested and fulfill our contractual obligations under the Terms of Service.
Legitimate Business Interests:
Processing for fraud prevention, security, Service improvement, and analytics, balanced against your privacy interests.
Legal Compliance:
Processing required to comply with applicable laws, regulations, or legal processes.
5. Information Sharing
We do not sell your personal information. We share your information only in the following circumstances:
5.1 Service Providers
We share information with trusted third-party service providers who assist us in operating the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, file storage | Account data, photos, inspection data |
| Stripe | Payment processing | Payment card details, billing info |
| Resend | Transactional emails | Email address, name |
| OAuth authentication | Google account identifier |
These providers are contractually bound to protect your information and may only use it to provide services to us.
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Court orders, subpoenas, or legal process
- Requests from law enforcement or government authorities
- Protection of our legal rights or defense against legal claims
- Prevention of fraud, security threats, or illegal activities
5.3 Business Transfers
If LeaseWit is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
5.4 With Your Consent
We may share your information for other purposes with your explicit consent.
6. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 30 days after deletion request |
| Property & inspection data | Duration of account + 30 days after deletion request |
| Photos | Duration of account + 30 days after deletion request |
| Payment records | 7 years (as required for tax/legal purposes) |
| Technical logs | 90 days |
| Marketing preferences | Until consent is withdrawn |
After the retention period, data is securely deleted or anonymized. You may request earlier deletion of your data (see Section 9).
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
7.1 Technical Safeguards
- Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
- Encryption at rest: Stored data is encrypted using AES-256 encryption
- Password security: Passwords are hashed using industry-standard algorithms and never stored in plain text
- Access controls: Strict access controls limit who can access your data
- Regular security audits: We conduct regular security assessments and vulnerability testing
7.2 Organizational Safeguards
- Privacy training for employees
- Data minimization practices
- Incident response procedures
- Vendor security assessments
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Cross-Border Data Transfers
Important Notice:
Your personal information may be stored and processed on servers located in Canada and the United States. Our service providers, including Supabase and Stripe, may process your data in the United States.
When your data is transferred to the United States, it may be subject to U.S. laws, which may differ from Canadian privacy laws. However, we ensure that:
- Our service providers are contractually obligated to protect your data
- Appropriate safeguards are in place to ensure a level of protection consistent with PIPEDA
- Transfers comply with applicable Canadian privacy law requirements
By using our Service, you consent to the transfer of your information to Canada and the United States as described in this policy.
9. Your Privacy Rights
Under PIPEDA and provincial privacy laws, you have the following rights regarding your personal information:
Right to Access
Request a copy of the personal information we hold about you.
Right to Correction
Request correction of inaccurate or incomplete personal information.
Right to Withdraw Consent
Withdraw your consent to certain processing activities, subject to legal or contractual restrictions.
Right to Challenge Compliance
Challenge our compliance with PIPEDA by contacting the Office of the Privacy Commissioner of Canada.
9.1 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- Email: privacy@leasewit.ca
We will respond to your request within 30 days, as required by PIPEDA. We may need to verify your identity before processing your request.
9.2 Account Data Export
You can export your data at any time through your account settings. This includes your property information, inspection records, and photos.
9.3 Account Deletion
You can request deletion of your account and personal data by contacting us at privacy@leasewit.ca or through your account settings. We will process deletion requests within 30 days.
10. Quebec Residents' Rights (Law 25)
Additional Rights for Quebec Residents
If you are a resident of Quebec, you have additional rights under the Act respecting the protection of personal information in the private sector (Law 25).
Right to Data Portability
You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to have it transferred to another organization where technically feasible.
Right to Be Forgotten (Erasure)
You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
Right to Cease Dissemination
You have the right to request that we stop disseminating your personal information or de-index any hyperlink attached to your name if dissemination causes harm.
Right to Know Automated Decision-Making
You have the right to be informed if we use automated decision-making to make decisions about you, and to request human review of such decisions.
10.1 Privacy Impact Assessments
In accordance with Law 25, we conduct privacy impact assessments when implementing new systems or processes that involve personal information of Quebec residents.
10.2 Person Responsible for Privacy
For Quebec residents, our person responsible for the protection of personal information can be contacted at:
Email: privacy@leasewit.ca
12. Marketing Communications (CASL Compliance)
We comply with Canada's Anti-Spam Legislation (CASL) for all commercial electronic messages.
12.1 Consent
We will only send you marketing emails if you have provided express opt-in consent. This consent is separate from your agreement to receive transactional emails related to your account.
12.2 Transactional Emails
We may send transactional emails without additional consent, including:
- Account confirmation and password reset
- Subscription receipts and billing notifications
- Service updates and security alerts
- Responses to your inquiries
12.3 Unsubscribe
Every marketing email includes an unsubscribe link. You can opt out at any time, and we will process your request within 10 business days as required by CASL.
12.4 Sender Identification
All emails from LeaseWit will clearly identify us as the sender and include:
- Our business name: LeaseWit
- Contact email: support@leasewit.ca
- Unsubscribe mechanism (for marketing emails)
13. Children's Privacy
Our Service is not intended for individuals under 18 years of age (or the age of majority in their province, whichever is greater). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@leasewit.ca. We will promptly delete such information from our records.
14. Data Breach Procedures
In accordance with PIPEDA and provincial requirements, we have established data breach response procedures:
14.1 Breach Assessment
We will promptly assess any security incident to determine if it constitutes a breach of safeguards involving personal information.
14.2 Notification
If a breach creates a real risk of significant harm to individuals, we will:
- Notify the Office of the Privacy Commissioner of Canada as soon as feasible
- Notify affected individuals as soon as feasible
- For Quebec residents, notify the Commission d'accès à l'information du Québec
14.3 Record Keeping
We maintain records of all breaches of security safeguards for at least 24 months, as required by law.
15. PIPEDA Fair Information Principles
We adhere to the 10 Fair Information Principles outlined in Schedule 1 of PIPEDA:
1. Accountability
We are responsible for personal information under our control and have designated a Privacy Officer.
2. Identifying Purposes
We identify the purposes for collecting personal information at or before the time of collection.
3. Consent
We obtain meaningful consent for the collection, use, and disclosure of personal information.
4. Limiting Collection
We limit collection to what is necessary for identified purposes and collect information by fair and lawful means.
5. Limiting Use, Disclosure, and Retention
We only use or disclose information for the purposes it was collected, and retain it only as long as necessary.
6. Accuracy
We keep personal information accurate, complete, and up-to-date as necessary for its purposes.
7. Safeguards
We protect personal information with security safeguards appropriate to the sensitivity of the information.
8. Openness
We make information about our privacy policies and practices readily available.
9. Individual Access
Upon request, we inform individuals of the existence, use, and disclosure of their personal information and provide access.
10. Challenging Compliance
Individuals can challenge our compliance by contacting our Privacy Officer or the Office of the Privacy Commissioner.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make changes, we will:
- Post the updated policy on our website with a new “Last Updated” date
- Send an email notification to account holders
- Display a notice within the Service
Material changes will take effect 30 days after notice. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
We encourage you to review this policy periodically. Previous versions of this policy are available upon request.
17. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:
For Quebec Residents
Person responsible for the protection of personal information:
Email: privacy@leasewit.ca
17.1 Regulatory Contacts
If you are not satisfied with our response, you may contact:
Office of the Privacy Commissioner of Canada
Website: www.priv.gc.ca
Phone: 1-800-282-1376
Commission d'accès à l'information du Québec (Quebec residents)
Website: www.cai.gouv.qc.ca
Phone: 1-888-528-7741
Office of the Information and Privacy Commissioner (BC residents)
Website: www.oipc.bc.ca
Phone: 250-387-5629
Office of the Information and Privacy Commissioner (Alberta residents)
Website: www.oipc.ab.ca
Phone: 780-422-6860
This document was last updated on January 30, 2026. A history of changes is maintained and available upon request.
By using LeaseWit, you acknowledge that you have read and understood this document.
© 2026 LeaseWit. All rights reserved.
Downloaded from leasewit.ca on 2026-10-18