Privacy Policy
Last updated:
DeedWorth values the protection of your personal information and complies with Quebec's Act respecting the protection of personal information in the private sector (“Law 25”). This page explains, in plain terms, what information we collect, how, for what purposes, who it may be disclosed to, and what rights you have.
Information we collect, how, and why
Account information (email, name) — provided by you at sign-up and managed by our authentication provider. Purpose: creating and securing access to your account.
Data you enter for your analyses (address, price, a property's income and expenses, financial assumptions) — entered directly by you in the app's forms. Purpose: producing your analyses, calculations and reports.
Documents you upload (once the document vault launches — leases, tax bills, invoices) — uploaded directly by you. These documents may contain personal information about third parties (for example, a tenant's name on a lease). Purpose: storing these documents for you and, when you request it, extracting the information relevant to your analysis. See also the corresponding section of our terms of use.
Information about a person who is not our user — when you entrust us with the personal information of a person who is not our user, with or without a supporting document. Purpose: letting you keep this information as part of your use of the service. See the “Personal information about people who are not our users” section below.
Technical usage data (sign-in logs, device and browser type) — collected automatically as you use the service. Purpose: security, abuse prevention, and keeping the service running properly.
Steps completed in the service (creating your account, creating an analysis, an analysis being refused and why) — recorded automatically and tied to your account's internal identifier. These records contain neither your name, nor your email, nor the figures you enter. Purpose: to understand and improve the service's journey — how many people sign up, complete an analysis, or are prevented from doing so, and why. Retention: 12 months.
We do not sell your personal information.
Disclosure to third parties
We rely on providers that help us operate the service, contractually required to protect your information and to use it only for the purposes we assign them. Depending on the features you use, your information may be disclosed to the following categories of providers: authentication provider (account management), cloud hosting provider (technical operation of the service), geocoding service (to locate an address you enter), document analysis provider (if you upload a document to be analyzed), and, once the document vault launches, document hosting provider. We do not share your information for other purposes, except where required by law.
Sharing inside an organization
This section applies once our organization accounts launch. Everything is private by default: anything you create is visible to you alone, and stays that way until you have explicitly shared it with your organization.
When you share an item, the members of your organization access it according to the role assigned to them, and whatever is attached to it follows: a shared analysis gives access to its notes, to the entire conversation about it, and to the assumptions that produced it, including your marginal tax rate; a shared building gives access to the complete history of its tax bills; a shared document gives access to the file itself. Client dossiers are visible only to the organization's owner and administrators, never to other members.
Rental information is never shareable. Units, leases and named tenants remain visible only to the user who entered them, even when the building they belong to is shared. This limit does not depend on any setting.
A share can be withdrawn at any time. Withdrawal applies going forward: it ends access, but does not take back what a member has already viewed or downloaded.
Personal information about people who are not our users
Some features let a user — for example a landlord — entrust us with personal information about another person, such as a tenant named on a lease, with or without a supporting document. What we hold in that case may be limited to a name.
In every case, we hold this information on behalf of the user who entrusts it to us: they determine its purposes, and it is up to them — not us — to inform the person concerned and obtain their consent where the law requires it; our terms of use require this of them. We never use the name of a person who is not our user for a purpose of our own, nor to improve our products or train a model. Rent amounts tied to a unit, however, feed market statistics that we produce: they are stripped of anything that would directly identify a person or point to an address, and are only published as averages spanning multiple buildings.
A confidentiality incident involving this information follows the same process as any other incident. Because we generally have no direct link to the person concerned (a tenant, for example), the notice intended for them is relayed through the user who knows them — an obligation our terms of use place on them.
Hosting and disclosure outside Quebec
Your personal information may be hosted and disclosed outside Quebec. Before any such disclosure, we assess the safeguards in place and enter into written agreements with our providers to ensure adequate protection of this information.
Your rights (Law 25)
You have the right to know what personal information we hold about you and to access it. You may request the correction of information that is inaccurate, incomplete or equivocal, or the removal of information whose collection, disclosure or retention is not authorized by law. You may withdraw your consent at any time, subject to our legal and contractual obligations — doing so may limit your use of the service (for example, an account cannot function without authentication). Other rights under the law may apply depending on your situation. To exercise these rights, write to [email protected].
Your rights if you are not a DeedWorth user
If you are a person whose personal information was entered by one of our users — for example a tenant — you can write to us directly at [email protected] to find out what information we hold about you, access it, have it corrected, or request its removal. We verify your identity, then forward your request to the user who holds this information or respond to it directly, depending on the case. You receive a response within 30 days of your request; if you have not received a response by then, the request is deemed refused, which opens a right of recourse before Quebec's Commission d'accès à l'information. Like any personal information we hold, yours may be hosted and disclosed outside Quebec — see the “Hosting and disclosure outside Quebec” section above.
Privacy officer
DeedWorth's Privacy Officer (Responsable de la protection des renseignements personnels) oversees compliance with Law 25, including for people who are not DeedWorth users. You can reach the Privacy Officer at [email protected].
Retention periods
Your account information is kept for as long as your account remains active. You may request the permanent deletion of your information at any time by writing to [email protected]; as with your other rights above, we act on that request within 30 days. Closing an account is not, today, an automated action in our product: it happens through that same written request. A technical backup copy may nonetheless persist for up to 12 months after deletion, until it is itself overwritten by the normal rotation of our backups.
Technical logs (sign-in, device, browser) are kept for 12 months. As a concrete example: when you delete a note you wrote in the app, it is permanently deleted from our systems, without delay. The same rule applies to information about people who are not our users that you entrust to us: it follows the same deletion schedule as the rest of your account information.
On request, we can tell you the retention period that applies to your information, as well as the categories of people who have internal access to it in the course of their duties.
Handling complaints
To file a complaint about how your personal information is handled, write to the Privacy Officer at [email protected]. You will receive an acknowledgment of receipt, after which the Privacy Officer reviews your complaint and sends you a reasoned response. You may also file a complaint with Quebec's Commission d'accès à l'information.
Cookies
We use cookies strictly necessary for the service to function (session and authentication).
Changes
We may update this policy; the update date appears at the top of the page. For any significant change, we will post a notice on this page before it takes effect.
Contact us
For any privacy question: [email protected]. See also our terms of use and our security page.