Privacy Policy

1. Who We Are

Tenuriva ("we," "us," "our") is an online tenancy management platform based in Canada. We are responsible for the personal information we collect and use in the course of operating our service.

2. Information We Collect

We collect only the personal information necessary to provide our services:

• Account information: First name, last name, email address, password (hashed and never stored in plain text), phone number (optional), and user role (landlord or tenant).
• Payment-related information: For landlord accounts, we collect and store a reference to your saved payment method via our payment processor (Stripe). We store only non-sensitive identifiers — specifically, a Stripe customer ID, a payment method reference ID, card brand, and last four digits of your card. We do not store full card numbers, CVV codes, or other sensitive payment credentials on our servers.
• Tenancy information: Property addresses, lease terms, rent amounts, dates, and other tenancy-related data you voluntarily enter.
• Transaction records: Simulated payment records, notice logs, maintenance records, and timeline events you create within the platform.
• Documents: Files (such as lease PDFs) you upload to the platform.
• Usage data: Log data, IP addresses, browser type, and device information collected automatically when you use the platform.

We do not collect financial account numbers, SIN numbers, or government-issued identification documents.

2b. Payment and Billing Information

For landlord accounts, we may collect payment method information for billing readiness purposes. This information is processed and stored by Stripe, Inc., our third-party payment processor. Tenuriva does not receive, process, or store raw card numbers or sensitive financial credentials.

We store the following billing-related data:

• Stripe customer identifier (a unique reference, not sensitive financial data)
• Payment method reference identifier
• Card brand (e.g., Visa, Mastercard)
• Last four digits of your card (for display purposes only)
• Card expiry month and year
• Billing status and setup completion timestamp

This information is used to: (a) facilitate future billing if subscription pricing is activated; (b) display your payment method status in your account settings; and (c) process subscription charges once billing is activated, with prior notice.

Stripe's privacy policy applies to information processed by Stripe and is available at stripe.com/privacy.

3. How We Use Your Information

We use your information only for the following purposes:

• To create and manage your account
• To provide tenancy management features (notices, payments, maintenance, reports)
• To enable the shared workspace between landlords and tenants
• To send service-related emails (account verification, notices of policy changes)
• To improve and debug the platform
• To comply with applicable law

We do not sell, rent, or trade your personal information to third parties. We do not use your information for targeted advertising.

4. Consent

By registering for Tenuriva, you consent to the collection, use, and disclosure of your personal information as described in this Policy. You may withdraw consent at any time by deleting your account, though this may affect your ability to use the platform.

5. Shared Tenancy Data

Tenuriva is a shared workspace platform. When a landlord creates a tenancy and links a tenant, both parties have access to the shared tenancy workspace, including lease details, notices, payment records, maintenance requests, and timeline events. This sharing is inherent to the platform's purpose and function.

By using Tenuriva, you acknowledge and consent to this data sharing with the other party in your tenancy relationship.

6. Data Storage and Security

Your data is stored on servers located in Canada or the United States via our infrastructure providers. We use industry-standard security measures including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Hashed and salted passwords (bcrypt)
• Access controls limiting employee access to personal data
• Regular security reviews

No system is completely secure. In the event of a data breach that poses real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by law.

7. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

8. Your Rights (PIPEDA)

Under PIPEDA and applicable Canadian law, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal of consent: Withdraw consent for collection/use, subject to legal and contractual restrictions
• Deletion: Request deletion of your account and associated data
• Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise these rights, contact us at privacy@tenuriva.ca. We will respond within 30 days.

9. Cookies and Tracking

We use essential cookies required to operate the platform (session management, authentication). We do not use third-party tracking cookies or advertising cookies. You can disable cookies in your browser, but this may prevent you from logging in.

10. Third-Party Services

We use limited third-party services to operate the platform, including hosting providers and database services. These providers are contractually obligated to protect your information and use it only to provide services to us. We do not share your information with analytics companies, advertisers, or data brokers.

11. Children's Privacy

Tenuriva is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 30 days before changes take effect. The date at the top of this page indicates when this Policy was last revised.

13. Contact and Complaints

For privacy-related questions or to exercise your rights:

Email: privacy@tenuriva.ca

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

14. Governing Law

This Privacy Policy is governed by the laws of Canada, including PIPEDA and any successor legislation.