Lease24

    Privacy Policy

    Last updated: December 13, 2024

    PIPEDA Compliant
    Ontario RTA
    Quebec Law 25 (Future)

    Table of Contents

    1. Who We Are

    Lease24 Inc. is a Canadian corporation operating a rental marketplace and property management platform currently serving Ontario only.

    We currently serve tenants, landlords, property managers, and service providers in Ontario. Expansion to other provinces (British Columbia, Alberta, Quebec) is on our future roadmap and will occur as legal and compliance frameworks are finalized.

    This Privacy Policy explains how we collect, use, share, and protect your personal information in accordance with:

    • Personal Information Protection and Electronic Documents Act (PIPEDA) - Federal
    • Ontario's Residential Tenancies Act privacy requirements
    • Quebec Law 25 - Will apply upon operational launch in Quebec
    • BC PIPA - Will apply upon operational launch in British Columbia
    • Alberta PIPA - Will apply upon operational launch in Alberta

    2. Privacy Officer Designation
    PIPEDA Best Practice

    We have designated a Privacy Officer responsible for ensuring compliance with privacy laws and handling your privacy requests.

    Privacy Officer

    Lease24

    Email: privacy@lease24.ca

    Response time: Within 30 days as required by law

    Note: Quebec Law 25 requires a designated Privacy Officer. We voluntarily maintain this role in preparation for future Quebec operations.

    3. Information We Collect

    4. How We Use Your Information

    Primary Purposes:

    • Facilitate rental applications and tenant-landlord matching
    • Process tenant screening (with your express consent)
    • Enable lease creation and electronic signing
    • Process rent payments and financial transactions
    • Coordinate maintenance requests and service dispatch
    • Connect property managers with qualified service providers through our vendor marketplace
    • Display vendor profiles and facilitate work order assignments
    • Process vendor-related communications and work orders
    • Collect and display vendor reviews and ratings
    • Send transactional communications about your account and services

    Secondary Purposes:

    • Improve our platform and develop new features
    • Analyze usage patterns and market trends (anonymized/aggregated)
    • Prevent fraud and ensure platform security
    • Comply with legal obligations and respond to legal requests
    • Send marketing communications (with your opt-in consent - CASL compliant)

    5. AI and Automated Decision-Making
    Important Disclosure

    Important Protections:

    • Human Review Required: AI does NOT make final tenancy decisions. All application decisions are made by humans (landlords/managers)
    • Right to Explanation: You may request an explanation of how AI was used in any decision affecting you
    • Right to Human Review: You may request human review of any automated decision
    • Opt-Out: Contact privacy@lease24.ca to opt out of AI processing where possible

    CASL Messaging Compliance:

    AI-powered messaging suggestions comply with Canada's Anti-Spam Legislation (CASL). No marketing content is sent without opt-in consent. Automated transactional content is limited to lease, rent, or maintenance workflows only.

    6. Information Sharing and Third Parties

    We share your personal information with the following parties:

    RecipientPurposeData Shared
    Landlords/ManagersRental applicationsApplication data, references, screening results
    Screening ProvidersBackground/credit checksIdentity info (with express consent)
    Payment ProcessorsProcess paymentsFinancial transaction data
    Email Service ProvidersCommunicationsEmail address, name
    Cloud Hosting ProvidersData storageAll platform data
    Vendors/Service ProvidersWork order fulfillmentProperty address, issue description, contact info, work order details
    Legal/RegulatoryComplianceAs legally required

    7. Cross-Border Data Transfers
    Critical Disclosure

    Service Providers:

    Lease24 uses trusted third-party service providers for hosting, data storage, payment processing, analytics, email delivery, and platform infrastructure. Some of these providers may be located outside of Canada, including in the United States or other jurisdictions. The specific providers used may change from time to time.

    What This Means for You:

    • Your information may be subject to the laws of those jurisdictions, including the U.S. CLOUD Act
    • Foreign authorities may be able to access your data under their laws
    • We ensure our service providers maintain appropriate security measures through contractual agreements
    • We transfer only the minimum data necessary to provide our services

    8. Your Privacy Rights

    9. Data Security

    We implement appropriate technical and organizational measures to protect your personal information:

    Technical Measures:

    • • Encryption in transit (TLS/SSL)
    • • Encryption at rest
    • • Secure authentication (multi-factor)
    • • Regular security audits
    • • Penetration testing
    • • Intrusion detection systems

    Organizational Measures:

    • • Role-based access controls
    • • Employee training on privacy
    • • Confidentiality agreements
    • • Incident response procedures
    • • Vendor security assessments
    • • Regular policy reviews

    Consent Tracking:

    Lease24 maintains an internal consent register to track opt-ins and privacy preferences across communication, AI usage, and marketing channels. Consent records are province-tagged to support evolving provincial privacy rules, including Ontario and anticipated compliance in BC, Alberta, and Quebec. This future-proofs our compliance with PIPEDA audit requirements and upcoming provincial regulations.

    10. Data Retention

    We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law:

    Data TypeRetention PeriodReason
    Active accountsDuration of accountService provision
    Inactive accounts2 years after last activityReactivation option
    Rental applications7 yearsLegal/tax requirements
    Lease documents7 years after lease endsLegal requirements (RTA)
    Payment records7 yearsCRA requirements
    Marketing consentUntil withdrawnCASL compliance
    Support tickets3 yearsQuality assurance
    Breach register (Law 25)Minimum 5 yearsRegulatory requirement
    Vendor profiles (active)Duration of accountService marketplace operation
    Vendor profiles (inactive)2 years after last loginReactivation option
    Vendor work orders7 years after completionLegal/warranty requirements
    Vendor ratings & reviewsDuration of vendor account + 1 yearMarketplace integrity & user safety

    Note: Some data may be retained longer if required by law or for legal proceedings. You may request deletion, subject to these legal obligations.

    11. Cookies and Tracking Technologies

    We use cookies and similar tracking technologies to enhance your experience and analyze platform usage.

    Essential Cookies

    Required for site functionality, security, and authentication. Duration: Session

    Analytics Cookies

    Help us understand usage patterns and improve the platform. Duration: 1 year

    Preference Cookies

    Remember your settings and preferences. Duration: 1 year

    Marketing Cookies (with consent)

    Used for targeted advertising. Duration: 1 year

    Managing Cookies:

    • • You can manage cookies through your browser settings
    • • You can opt out of analytics through our cookie preferences
    • • Essential cookies cannot be disabled as they're necessary for the platform to function

    12. Contact Information

    Lease24

    Lease24 is operated by Lease24 Inc., a federally registered Canadian corporation (in progress - registration expected by Q1 2026)

    Privacy Officer:

    privacy@lease24.ca

    General Support:

    support@lease24.ca

    Legal Inquiries:

    legal@lease24.ca

    Mailing Address:

    [To be updated upon business registration]

    Response Time:

    We respond to privacy requests within 30 days as required by law

    Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. Material changes will be communicated to you via email at least 30 days before they take effect.

    Non-material changes will be posted with an updated "Last Updated" date. Continued use of our services after changes take effect constitutes acceptance of the revised policy.

    Current Operational Region: Ontario Only

    Lease24 will notify users prior to entering any new province and will update this Privacy Policy accordingly.

    Policy Version: ON-2024-v1.0