Privacy policy

1. Who we are

BrokerFold is a product of SearchPod Inc. ("BrokerFold", "we", "us"), a Canadian company with its head office in Toronto, Ontario. We operate the platform available at brokerfold.com and all subdomains of brokerfold.com (collectively, the "Service").

2. The roles this policy describes

This policy covers two distinct relationships you may have with BrokerFold:

• Customer-facing data: information you (a realtor, team, or brokerage) provide to us as a customer of the Service. For this data, BrokerFold is the controller under PIPEDA.
• Tenant-origin data: information the people you serve (buyers, sellers, leads) submit through your BrokerFold-powered site or CRM. For this data, BrokerFold is the processor; you are the controller. Your relationship with those people — and your obligations to them under PIPEDA and CASL — is governed by your own privacy policy, not ours.

3. What we collect about you (customer-facing)

• Account: name, email, phone, brokerage, role, billing address.
• Content: website copy, listings, contacts, CRM records, messages you compose, custom fields.
• MLS credentials: the feed credentials you share with us so we can fetch your listings. Stored encrypted; retrievable by our engineers only with logged, two-person approval.
• Usage: the pages you visit inside the product, features you use, browser and device, approximate location derived from IP for fraud prevention and region-based product decisions.
• Support communications: what you write to us and what we write back.

4. What we collect through your site (tenant-origin)

• Information your website visitors voluntarily submit — contact forms, saved-search subscriptions, valuation requests.
• Standard web logs (IP, user agent, request URL) for a rolling 30-day window, used to operate the Service and defend against abuse.
• Cookies necessary to provide the Service (session, CSRF, language preference). We do not place advertising cookies or load third-party trackers on your behalf; you may configure analytics on your own tenant but that's your configuration, not ours.

5. How we use it

• To provide the Service you asked for.
• To send operational messages (account, billing, security notices, outages).
• To improve the Service — debugging, performance, feature decisions. Any analysis crossing tenant boundaries is on aggregate, anonymized data.
• To comply with legal obligations and respond to lawful requests.
• To protect the integrity of the Service against abuse and fraud.

We do not sell personal information. We do not share it with advertisers. We do not use it to train third-party AI models (see §7).

6. Marketing and CASL

As a Canadian company we take CASL seriously. We send commercial electronic messages only where we have express consent (opt-in) or implied consent that CASL recognizes (existing business relationship). Every marketing email includes an unsubscribe link that works the first time. You can also email support@brokerfold.com to unsubscribe from everything at once.

7. AI processing

Some features of the Service (lead response, listing copy, market reports) use AI models from third-party providers — currently Anthropic and OpenAI. When we send content to those providers:

• It is sent over TLS with the provider's business-tier contracts that prohibit training on the content.
• No content you or your leads submit is used to train a provider's public models, under any circumstance.
• We do not aggregate content across tenants for any model fine-tuning on our side.
• You can disable AI features for your tenant at any time from Settings → AI.

8. Data residency and sub-processors

Your primary database lives in Supabase Postgres. By default, new tenants are placed in us-east-1; Canadian residency (ca-central-1) is available on Team+ plans at no additional cost — ask during onboarding. Object storage (listing photos, uploads) is hosted on Cloudflare R2 with Canadian edge caching.

Our current sub-processors:

• Supabase (Postgres, authentication) — US or Canada regions
• Cloudflare (CDN, R2 object storage, DNS) — global edge
• Vercel (application hosting) — global edge
• Anthropic (Claude models, under business-tier agreement)
• OpenAI (models, under business-tier agreement)
• Resend (transactional email)
• Stripe (payments)
• Twilio (voice + SMS, for Team+ phone features)

If we add or remove a sub-processor, we update this list and notify customers with active Team+ plans in advance.

9. Retention

• Active account: we retain your data for as long as your account is active.
• After cancellation: read-only for 90 days, then permanent deletion (other than records we're legally required to retain — tax invoices for seven years, for example).
• Listing photos: held only as long as the underlying listing is active in the MLS plus a 30-day grace window.
• Web logs: 30 days.

10. Your rights

Under PIPEDA you can:

• Access your personal information. Most of it is visible in the product; for anything else, email support@brokerfold.com.
• Correct inaccurate information. You can edit most of it yourself; we handle the rest on request.
• Delete your account and the personal information it contains.
• Withdraw consent for marketing messages at any time.
• Complain to the Office of the Privacy Commissioner of Canada if you believe we've mishandled your information.

11. Security

The operational detail is on the security page. The short version: TLS 1.3 everywhere, AES-256 at rest, scrypt password hashing, MFA available, RBAC on Team+, SSO on Brokerage. If you identify a vulnerability, support@brokerfold.com is the right address — we don't threaten legal action against good-faith researchers.

12. Children

The Service is for real estate professionals and is not directed at children under 16. We do not knowingly collect personal information from children.

13. Changes to this policy

We post material changes here at least 30 days before they take effect, and notify active customers via email. A superseded version is archived and available on request.

14. Contact

BrokerFold Privacy Officer · SearchPod Inc. · Toronto, Ontario, Canada · support@brokerfold.com