Privacy Policy

1. INTRODUCTION

RealEasy Technologies Inc. ("RealEasy," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our technology platform, website, mobile applications, and services (collectively, the "Platform").

This Policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), and other applicable Canadian privacy laws.

2. DEFINITIONS

• Personal Information: Information about an identifiable individual, excluding business contact information
• Sensitive Personal Information: Information requiring higher protection, including financial data, government identifiers, and identity verification data
• Platform Data: Aggregated, anonymized data derived from Platform usage
• Third-Party Services: External services integrated with our Platform

3. INFORMATION WE COLLECT

3.1 Information You Provide Directly

Account Information:

• Name, email address, phone number
• Username and password
• Mailing address
• Date of birth, used to confirm you are at least 18 and not retained

Identity Verification Information:

• The name and address as attested by your government-issued identification
• The type, issuing country and expiry date of that identification
• The outcome of the verification, the reasons for any failure, and the confirmation that you are at least 18
• The identifier of the verification session with our provider

What We Do Not Keep From Identity Verification:

Identity verification is performed by Didit. You present your identification and a selfie to Didit; those images, the document number and your date of birth are processed by Didit and are not stored by RealEasy. We do not retain the provider's raw verification payload. Where the underlying evidence is required for a dispute or a legal obligation, it is retrieved from Didit using the session identifier.

Biometric Data:

Our identity verification provider (Didit) may collect biometric identifiers including facial geometry data derived from photos you submit. This data is used solely to verify your identity by comparing your selfie to your government-issued ID. Didit processes this data in accordance with their privacy policy and applicable biometric privacy laws. We do not store biometric templates or the photos themselves.

Property Information:

• Property addresses and descriptions
• Photos and virtual tours
• Listing details and pricing
• Property documents

Transaction Information:

• Offer details and terms
• Negotiation history
• Electronic signatures
• Closing information

Payment Information:

• Payment card details (processed by Stripe)
• Banking information for payments
• Billing address
• Transaction history

Communications:

• Messages between buyers and sellers
• Support requests and correspondence
• Feedback and reviews

3.2 Information Collected Automatically

Technical Information:

• IP address and device identifiers
• Browser type and version
• Operating system
• Time zone settings
• Location data (if permitted)

Usage Information:

• Pages visited and features used
• Click paths and interaction data
• Search queries
• Session duration and frequency

Cookies and Tracking Technologies:

• Session cookies for authentication
• Preference cookies for settings
• Analytics cookies for improvement
• Marketing cookies (with consent)

3.3 Information from Third Parties

• Public property records
• Market data and comparables
• Credit and identity verification results
• Social media profiles (if connected)
• Information from partner services

4. HOW WE USE YOUR INFORMATION

4.1 Primary Purposes

We use your personal information to:

Provide Platform Services:

• Create and manage user accounts
• Facilitate property listings and searches
• Enable communication between parties
• Process offers and negotiations
• Generate documents and contracts
• Process payments and fees

Verification and Security:

• Verify user identities
• Prevent fraud and illegal activities
• Maintain Platform security
• Enforce Terms of Use

Legal and Compliance:

• Comply with legal obligations
• Respond to legal requests
• Protect rights and safety
• Maintain transaction records

4.2 Secondary Purposes

With your consent, we may use information for:

Communications:

• Service updates and notifications
• Marketing communications (opt-in)
• Newsletters and market insights
• Customer surveys

Improvement and Analytics:

• Analyze Platform usage patterns
• Improve features and functionality
• Develop new services
• Create aggregated statistics

5. HOW WE SHARE YOUR INFORMATION

5.1 Sharing with Other Users

Public Listings: Property listings are publicly visible and include information you provide about the property (but not your personal contact information until you choose to share it).

Transaction Parties: When you enter a transaction, we share necessary information with the other party to facilitate the transaction.

5.2 Service Providers

We share information with trusted service providers who assist us in operating the Platform:

• Payment Processing: Stripe for payment processing
• Authentication: Auth0 for sign-in
• Identity Verification: Didit for identity verification services
• Electronic Signatures: DocuSign for document signing
• Cloud Infrastructure: Render, Vercel and Supabase for hosting, storage and infrastructure
• Transactional Email: Brevo
• Analytics: PostHog and Vercel Analytics for product and performance analytics
• Maps: Mapbox for map display and location search

5.3 Professional Services

With your consent, we may share information with:

• Real estate lawyers
• Home inspectors
• Mortgage brokers
• Other professionals you choose

5.4 Legal Disclosures

We may disclose information when required to:

• Comply with law or legal process
• Respond to government requests
• Protect our rights or property
• Prevent fraud or illegal activities
• Protect personal safety

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

5.6 Aggregated Data

We may share aggregated, anonymized data that cannot identify you for research, marketing, or other purposes.

6. DATA RETENTION

We retain personal information for as long as necessary to:

• Provide services you've requested
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Specific Retention Periods:

• Account information: Duration of account plus 7 years
• Transaction records: 7 years (legal requirement)
• Communications: 3 years
• Technical logs: 1 year
• Marketing data: Until consent withdrawn

7. YOUR PRIVACY RIGHTS

Under Canadian privacy law, you have the right to:

7.1 Access Your Information

Request a copy of personal information we hold about you.

7.2 Correct Your Information

Request corrections to inaccurate or incomplete information.

7.3 Delete Your Information

Request deletion of your personal information (subject to legal retention requirements).

7.4 Data Portability

Receive your information in a structured, commonly used format.

7.5 Withdraw Consent

Withdraw consent for uses of your information where consent is the legal basis.

7.6 Object to Processing

Object to certain uses of your information, including marketing.

7.7 Lodge a Complaint

File a complaint with the Office of the Privacy Commissioner of Canada or Alberta's Information and Privacy Commissioner.

To exercise these rights, contact us at privacy@getrealeasy.ca.

8. DATA SECURITY

8.1 Security Measures

We implement industry-standard security measures including:

• Encryption: TLS/SSL for data in transit, AES-256 for data at rest
• Access Controls: Role-based access, multi-factor authentication
• Infrastructure: Secure cloud hosting with Render
• Monitoring: 24/7 security monitoring and intrusion detection
• Testing: Regular security audits and penetration testing
• Training: Employee privacy and security training

8.2 Incident Response

In the event of a data breach affecting your personal information, we will:

• Notify you as required by law
• Notify relevant authorities
• Take steps to mitigate harm
• Investigate and remediate the cause

8.3 Your Security Responsibilities

You are responsible for:

• Maintaining password confidentiality
• Using strong, unique passwords
• Logging out of shared devices
• Reporting suspicious activity

9. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than Canada, including the United States. We ensure appropriate safeguards are in place, including:

• Contractual clauses with service providers
• Ensuring adequate privacy protections
• Limiting transfers to necessary purposes

10. CHILDREN'S PRIVACY

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

11. COOKIES AND TRACKING TECHNOLOGIES

11.1 Types of Cookies We Use

• Essential Cookies: Required for Platform functionality
• Performance Cookies: Help improve Platform performance
• Functionality Cookies: Remember your preferences
• Marketing Cookies: Used for advertising (with consent)

11.2 Managing Cookies

You can manage cookie preferences through:

• Browser Settings: Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for specific websites
• Platform Preferences: You can update your cookie preferences in your account settings when logged in
• Marketing Cookies: Marketing and analytics cookies (PostHog, Google Analytics) require your consent. You may withdraw consent at any time through your account settings

Please note that disabling essential cookies may prevent core Platform functionality such as login and session management.

11.3 Do Not Track

We respect Do Not Track signals and do not track users across third-party websites when DNT is enabled.

12. THIRD-PARTY LINKS

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing personal information.

13. MARKETING COMMUNICATIONS

13.1 Opt-In/Opt-Out

Marketing communications are sent only with your consent. You can opt-out at any time by:

• Clicking unsubscribe links in emails
• Updating account preferences
• Contacting us at privacy@getrealeasy.ca

13.2 Transactional Communications

We may send non-marketing communications necessary for service delivery regardless of marketing preferences.

14. INTERNATIONAL USERS

RealEasy primarily operates in Alberta, Canada and is designed for Canadian users. If you access the Platform from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada where our servers are located. By using the Platform, you consent to this transfer. We will honor privacy requests from users in other jurisdictions to the extent required by applicable law.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Material changes will be notified via:

• Email notification
• Platform notification
• Prominent website notice

Continued use after changes indicates acceptance of the updated Policy.

16. ACCOUNTABILITY

16.1 Privacy Officer

We have designated a Privacy Officer responsible for:

• Privacy policy compliance
• Handling privacy inquiries
• Managing privacy complaints
• Conducting privacy assessments

16.2 Privacy Training

All employees receive privacy training and are bound by confidentiality obligations.

16.3 Privacy by Design

We incorporate privacy considerations into:

• New feature development
• System design
• Business practices
• Data handling procedures

17. CONSENT

17.1 Forms of Consent

We obtain consent through:

• Express consent for sensitive information
• Implied consent for necessary services
• Opt-in consent for marketing

17.2 Withdrawal of Consent

You may withdraw consent at any time, subject to legal or contractual restrictions. Withdrawal may limit our ability to provide services.

18. ACCURACY

We strive to maintain accurate, complete, and up-to-date information. You are responsible for informing us of changes to your personal information.

19. SAFEGUARDS FOR SENSITIVE INFORMATION

Enhanced protections apply to sensitive information including:

• Financial information
• Government identifiers
• Identity verification data
• Transaction details

Access to sensitive information is limited to authorized personnel on a need-to-know basis.

20. CONTACT INFORMATION

For privacy-related questions, concerns, or to exercise your rights, contact:

21. REGULATORY AUTHORITIES

You may also contact: