Privacy Policy

Last updated: March 26, 2026

Condo Advisors (“we,” “us,” or “our”) operates the website condoadvisors.ca and provides AI-powered condominium document analysis services for Alberta condo buyers. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

By using our Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Account Information

• Email address — collected when you sign up via magic link authentication or Google OAuth.
• Google account information — name, email, and profile picture if you choose to sign in with Google.

1.2 Uploaded Documents

When you submit condominium documents for analysis (bylaws, reserve fund studies, financial statements, insurance certificates, meeting minutes, etc.), we store the original files and the text extracted from them via optical character recognition (OCR).

1.3 Payment Information

Payments are processed by Stripe, Inc. We do not collect, store, or have access to your credit or debit card numbers. Stripe receives your email address and payment method details to process transactions. Stripe's handling of your data is governed by the Stripe Privacy Policy.

1.4 Automatically Collected Information

• IP address — used solely for rate limiting and abuse prevention. We store a hashed (non-reversible) representation; we do not log your raw IP.
• Session data — a secure, HTTP-only session cookie keeps you signed in.

1.5 Analysis Metadata

We store metadata related to your analyses, including status, scores, timestamps, and the generated reports.

2. Information We Do NOT Collect

• Passwords. We use passwordless magic link authentication; no passwords are created or stored.
• Credit or debit card numbers. All payment card data is handled exclusively by Stripe.
• Analytics or advertising data. We do not use Google Analytics, tracking pixels, advertising cookies, or any third-party trackers.

3. How We Use Your Information

• Providing the Service — to process your uploaded documents, generate analysis reports, and deliver results.
• Authentication — to verify your identity and manage your account.
• Payment processing — to complete transactions for paid tiers.
• Rate limiting and security — to prevent abuse.
• Transactional emails — to send magic link sign-in emails, payment receipts, and analysis status notifications.
• Legal compliance — to comply with applicable laws and regulations.

We do not use your personal information for marketing, advertising, profiling, or automated decision-making unrelated to the Service.

4. AI Processing & Third-Party AI Providers

Our Service uses artificial intelligence (provided by OpenAI) to analyse the text extracted from your uploaded condominium documents. Before any text is sent to OpenAI:

• Personally identifiable information — including names, addresses, and unit numbers — is automatically redacted.
• We use OpenAI's commercial API tier exclusively. Under OpenAI's API data usage policy, data submitted through the API is not used by OpenAI to train or improve their models.
• OpenAI may retain API inputs for up to 30 days for abuse monitoring, after which they are deleted.

While our automated PII redaction is designed to be thorough, no automated system is perfect. Residual personal information may occasionally remain in the text sent for analysis.

5. Third-Party Service Providers

We use trusted third-party service providers for hosting, database storage, document storage and OCR, AI-powered analysis, payment processing, email delivery, and error monitoring. Each provider receives only the minimum data necessary to perform its function. Some of these providers are located in the United States and Canada.

Payments are processed by Stripe — we never store your card details. AI analysis is performed by OpenAI using their commercial API (see Section 4 above).

6. Cross-Border Data Transfers

Some of our sub-processors operate in the United States. By using the Service, you acknowledge that your personal information may be transferred to, stored, and processed in the United States and Canada. We require all sub-processors to maintain appropriate data protection standards through contractual commitments.

7. How We Protect Your Information

• Encryption at rest. OCR-extracted text is encrypted using AES-256-GCM before being stored in our database.
• Encryption in transit. All data transmitted between your browser and our servers uses TLS encryption.
• PII redaction before AI processing. Names, addresses, and unit numbers are removed before text is sent to OpenAI.
• Secure authentication. Session tokens and OAuth tokens are encrypted. Session cookies use HttpOnly and Secure flags.
• Access controls. Access to production systems and data is restricted to authorized personnel only.

8. Cookies and Tracking Technologies

We use a single, strictly necessary session cookie to maintain your authenticated session. This cookie is HttpOnly (not accessible to client-side JavaScript) and Secure (transmitted only over HTTPS).

We do not use any analytics cookies, advertising cookies, or third-party tracking technologies.

9. Data Retention

• Uploaded documents, OCR text, AI analysis results, and reports are retained for as long as your account is active. All such data is deleted when you delete your account.
• Payment history is retained by Stripe in accordance with Stripe's policies and applicable tax record-keeping requirements.
• Server logs on Vercel are retained according to Vercel's standard retention periods.

10. Your Rights

Under PIPEDA and Alberta PIPA, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete personal information.
• Deletion — request deletion of your account and all associated data.
• Withdraw consent — withdraw your consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions. Withdrawal may result in our inability to provide the Service.

To exercise any of these rights, contact us at support@condoadvisors.ca. We will respond within 30 days.

11. Account Deletion

You may request deletion of your account at any time by contacting us at support@condoadvisors.ca. Upon deletion, we will:

• Delete your uploaded documents from Google Cloud Storage.
• Delete all encrypted OCR text, AI analysis results, and reports from our database.
• Remove your user record from our database.

Stripe may retain payment transaction records as required by law.

12. Third-Party Personal Information in Documents

Condominium documents may contain personal information of third parties (e.g., board members, unit owners, or other individuals named in meeting minutes or financial statements). We process this information only incidentally and solely for the purpose of document analysis. We do not extract, index, or use third-party personal information for any other purpose. PII redaction is applied before AI processing to minimise exposure of such information.

13. Children and Minors

The Service is intended for individuals aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

15. Complaints

If you are not satisfied with our response to a privacy concern, you may file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Condo Advisors
Calgary, Alberta, Canada
support@condoadvisors.ca