DealScore Privacy Policy

#1. About DealScore

DealScore Inc. is the data controller for the personal information collected through dealscore.ca. We provide automated property due diligence reports for properties located in Ontario, Canada.

#2. Information We Collect

We collect the following categories of personal information:

#3. How We Use Information

We use personal information for the following purposes:

• Service delivery: to generate, deliver, and provide access to property reports you purchase
• Account management: to create and maintain your account, authenticate logins, and process transactions
• Customer support: to respond to inquiries and resolve issues
• Service improvement: to analyze usage patterns, debug, and improve product quality and accuracy
• Communications: to send transactional emails (receipts, report delivery, account notices). We send marketing communications only with your separate consent
• Fraud prevention and security: to detect and prevent fraudulent transactions, unauthorized access, and abuse
• Legal compliance: to comply with applicable laws, regulations, and lawful requests

#4. Legal Basis for Processing

Under PIPEDA, we process personal information based on:

• Your consent (express for marketing, implied for service delivery you have requested)
• The performance of a contract (delivering the report you purchased)
• Our legitimate business interests (security, fraud prevention, service improvement) where balanced against your privacy interests
• Legal obligations (tax records, regulatory compliance)

#5. How We Share Information

We share information only as follows:

#6. Cross-Border Data Transfer

Some of our service providers are located outside Canada, including in the United States and other jurisdictions. By using the Service, you acknowledge that your personal information may be transferred, stored, and processed outside Canada, where it may be subject to the laws of those jurisdictions, including lawful access by foreign authorities.

We require all service providers to maintain protections substantially equivalent to those required under PIPEDA, including contractual safeguards.

#7. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit (TLS) and at rest where appropriate
• Access controls limiting personal information to authorized personnel
• Secure third-party payment processing (PCI-DSS compliant processors)
• Regular security reviews and updates
• Password hashing using industry-standard algorithms

#8. Data Retention

We retain personal information only as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law:

• Account information: for the duration of your account plus a reasonable period thereafter for record-keeping
• Transaction records: retained for the period required by tax and accounting laws (typically 7 years)
• Generated reports: retained for ongoing access by you and for service improvement
• Marketing data: until you withdraw consent
• Logs and analytics: typically 12-24 months in identifiable form, then aggregated or deleted

#9. Your Rights

Under PIPEDA you have the right to:

• Access your personal information that we hold
• Correct inaccurate or incomplete information
• Withdraw consent for processing (subject to legal and contractual restrictions)
• Request deletion of your information (subject to legal retention requirements)
• Receive an explanation of how your information is used and to whom it has been disclosed
• Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not complied with PIPEDA (priv.gc.ca)

#10. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze service usage and improve functionality
• Prevent fraud and enhance security

#11. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, contact privacy@dealscore.ca and we will delete it.

#12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by updating the "Last Updated" date and, where appropriate, by notice on the Service. Your continued use after changes constitutes acceptance of the updated Policy.

#13. Contact and Privacy Officer

For privacy-related inquiries, requests, or complaints, contact our Privacy Officer:

• Email: privacy@dealscore.ca
• General contact: partners@dealscore.ca