Privacy policy

The short version

• What we collect: your account and billing details, the content you put into the product, support conversations, and product-usage data.
• Who it’s shared with: the service providers that run the platform (listed below, with locations) — never advertisers, and we never sell personal information.
• Why: to run the service you signed up for, bill you, support you, secure the platform, and meet our legal obligations.
• What you should know: data is stored with providers in the United States and other jurisdictions outside Canada, where it is subject to those jurisdictions’ laws; retention periods and your PIPEDA rights are set out below.

1. Who we are and what this covers

BrokerFold ("BrokerFold", "we", "us") is a Canadian company headquartered in Toronto, Ontario. This policy covers brokerfold.com, dashboard.brokerfold.com, and your use of the BrokerFold platform as a customer (the "Service").

If you are a home buyer, seller, or visitor using a website an agent runs on BrokerFold, the privacy policy published on that website governs — the agent is responsible for your information, and BrokerFold processes it as their service provider.

2. The two roles this policy describes

• Customer data: information you (an agent, team, or brokerage) provide as a customer. For this data, BrokerFold is the organization accountable under PIPEDA.
• Tenant-origin data: information the people you serve submit through your BrokerFold-powered site or CRM — leads, visitor accounts, saved searches, activity. For this data you are the accountable organization; BrokerFold processes it only on your instructions to run the Service, never for its own marketing. Your obligations to those people under PIPEDA and CASL are yours; the visitor privacy policy served on your site describes the arrangement to them.

3. What we collect about you

• Account: name, email, phone, brokerage, role, billing address.
• Content: website copy, media, contacts, CRM records, messages, custom configuration.
• Billing: handled by Stripe — we never store full card numbers.
• Usage: product pages visited, features used, browser and device, IP-derived approximate location for fraud prevention and product decisions, and anti-bot signals (Cloudflare Turnstile) on public forms.
• Support: what you write to us and what we write back.

4. How we use it

• To provide, operate, and support the Service.
• To send operational messages (account, billing, security, outage notices).
• To improve the Service — debugging, performance, feature decisions; analysis crossing tenant boundaries uses aggregate, de-identified data.
• To protect the Service and its users against abuse and fraud.
• To comply with law and respond to lawful requests.

We do not sell personal information, share it with advertisers, or use it to train AI models (§6).

5. Marketing and CASL

We send commercial electronic messages only with express consent or implied consent CASL recognizes (such as an existing business relationship). Every marketing email identifies us and includes an unsubscribe that we honour within 10 business days — in practice, immediately. Because the law puts the burden of proving consent on the sender, we retain a record of when and how you consented (including the exact consent text you saw) for as long as we rely on that consent and for a reasonable period afterward to demonstrate compliance.

6. AI processing

Where the Service uses AI models, content is sent to Anthropic over encrypted connections under commercial API terms that exclude training on your content. No content you or your leads submit is used to train any AI model — Anthropic’s or ours — and we do not aggregate content across tenants for model development. If you want AI features disabled for your workspace, contact support and we will turn them off.

7. Service providers (sub-processors)

These providers process data to run the Service:

• Supabase — database and authentication (United States, AWS us-east-1)
• Cloudflare — application hosting, CDN, object storage, DNS, bot protection (global network)
• Stripe — payments
• Resend — transactional email
• Anthropic — AI features (§6)
• Upstash — rate limiting and caching
• Datadog and Sentry — service telemetry and error monitoring (operational metadata; error reports are scrubbed of sold-data details)
• Google — maps, address services, and (only if you connect it) the Gmail integration for your CRM
• Geocodio and municipal open-data services — address geocoding (listing addresses, not personal information)

We update this list when providers change and notify active customers of material changes in advance.

8. Where your data lives (cross-border)

Your information is stored and processed with service providers in the United States and other jurisdictions outside Canada. While there, it is subject to the laws of those jurisdictions and may be accessible to their courts, law-enforcement, and national-security authorities. We use contractual and technical safeguards to require a level of protection comparable to Canadian requirements, and PIPEDA continues to govern our handling of your information wherever it is processed.

9. Retention

• Active account: retained while your account is active.
• After cancellation: held for 90 days (so you can come back or export), then deleted from production systems, followed by backup-cycle expiry — except records we must keep longer (for example, tax and billing records for seven years, CASL consent records per §5, and legally mandated audit records).
• MLS® media and data: retained and displayed only as each board’s rules allow, and purged on a scheduled cycle after that.
• Security and web logs: short rolling windows sized to abuse-defence and debugging needs.
• Breach records: maintained for at least 24 months as PIPEDA requires.

10. Your rights

Under PIPEDA you can, subject to limited legal exceptions:

• Access the personal information we hold about you — most is visible in the product; we answer written requests within 30 days.
• Correct inaccurate information.
• Delete your account and the personal information in it (records we are legally required to keep are the exception, and we will tell you what they are).
• Withdraw consent to marketing at any time.
• Complain — to us first, and to the Office of the Privacy Commissioner of Canada (priv.gc.ca · 1-800-282-1376) if we don’t resolve it.

We may need to verify your identity before acting on a request.

11. Safeguards

We protect personal information with safeguards appropriate to its sensitivity: encryption in transit and at rest, row-level tenant isolation in the database, least-privilege access, append-only audit logs on sensitive actions, and immutable off-site backups. No method of storage or transmission is perfectly secure, and we don’t claim otherwise — the security page describes the controls in operational detail. Good-faith security researchers can write to support@brokerfold.com.

12. If something goes wrong

If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and report to the Privacy Commissioner as soon as feasible, as PIPEDA requires, and we keep records of all breaches. Where tenant-origin data is involved we notify the responsible agent promptly so they can meet their own obligations.

13. Children

The Service is for real estate professionals and is not directed at children. We do not knowingly collect personal information from anyone under 16; if we learn we have, we delete it.

14. Changes to this policy

Material changes are posted here at least 30 days before they take effect, with email notice to active customers. Superseded versions are archived and available on request.

15. Contact

BrokerFold has designated a Privacy Officer accountable for compliance with this policy.
BrokerFold Privacy Officer · Toronto, Ontario, Canada · support@brokerfold.com (subject line "Privacy").