Privacy Policy

[Registered business name] (“we”, “us”) runs SimpleDoor. This policy explains what personal information we collect, why, who sees it, and the choices you have. We follow Alberta's Personal Information Protection Act (PIPA) and, where it applies, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Two kinds of information

• About you, the landlord (account email, name, business details, sign-in security, feedback you send). We are responsible for this.
• About your tenants and contractors (names, emails, phone numbers, lease terms, rent records, inspection notes and photos). You decide what to enter and why. We store it and process it for you, only to run the service. You are responsible for having the right to collect it and for telling your tenants how you use it.

2. What we collect

• Account: email address (your username), display name, a password stored only as a one-way hash, optional authenticator-app secret (encrypted) and recovery code hashes.
• Business and rental records you enter: properties, units, tenants, leases, rent payments you record, inspections, photos, maintenance and work orders, reports.
• Security and technical data: sign-in times, the browser and approximate network address of each signed-in device, and failed sign-in counts, to protect accounts and show you where you are signed in.
• Feedback and support: the message you send, the page you were on and the app version.
• Support actions: if our support team helps with your account (for example a password reset link, turning off two-step sign-in, or changing a sign-in email), we keep a record of what was done, when, and the email address it was done to. You can see these under Security. We keep this record for security reasons even if the account is later deleted.
• Payment details will be handled by our payment provider. We do not store card numbers.

We do not use advertising or tracking cookies and we do not sell personal information.

3. Why we use it

• To provide the service, keep it secure and fix problems.
• To sign you in, remember you on a device, and let you reset a forgotten password.
• To send messages about your account (such as security or billing) and, if you turn it on, reminders and summaries.
• To respond to feedback and support requests and improve SimpleDoor.
• To meet legal duties.

4. Cookies

SimpleDoor uses one essential cookie to keep you signed in. It holds a random code, not your details. We don't use analytics or advertising cookies.

5. Who we share it with

Only with the services we need to run SimpleDoor, under their own privacy and security terms: hosting and storage, email delivery, and payment processing. We may disclose information if the law requires it or to protect people's safety or our rights. If our business is sold or reorganized, your information may transfer to the new owner under the same protections.

6. Where it is stored and how it is protected

• Your data is stored on servers in Canada.
• Connections are encrypted. Passwords are protected with Argon2id hashing. Two-step sign-in and recovery codes are available. Sessions end after a period of inactivity. Repeated failed sign-ins are locked out.
• Each business can see only its own data. Backups are kept for a limited time.
• No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell the people affected and the privacy commissioner as the law requires.

7. How long we keep it

We keep your data while your account is open. When you delete your account (Your data in Settings) your business data and files are deleted immediately and permanently. Copies in backups are removed as the backups expire, within about 30 days. Records we must keep for tax or legal reasons (such as billing records) are kept for the period required.

8. Your choices and rights

• Access, correct or export your information from within the app, including a full export under Your data in Settings.
• Delete your account at any time.
• Ask us a question about your information, or withdraw a consent, by writing to the contact below. We will answer within 30 days.
• If you are not satisfied, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

9. Children

SimpleDoor is for adults running a rental business. It is not meant for anyone under 18.

10. Changes

We may update this policy. For a material change we will give notice in the app or by email. The date at the top shows the latest version.

11. Contact

Privacy contact: [Registered business name]
[Business mailing address], Alberta, Canada
[support email address]