Privacy Policy for OntLease AI
Last Updated: November 2026
OntLease AI ("we", "us", "our") is committed to protecting the privacy of individuals using our automated real estate translation micro-SaaS platform. This Privacy Policy details how we govern personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario consumer protection frameworks.
1. Accountability & Data Location
We collect personal information directly when you register an account or interact with our system. This includes:
- Identity Data: Name, Email Address, and Account Passwords (stored exclusively via irreversible one-way cryptographic hashing).
- Operational Usage Data: Real estate listing messy notes, structural form parameters, and generated bilingual outputs.
Data Location: All user records and historical listings are stored and processed on secure, encrypted database environments hosted via Supabase infrastructure in the Oregon region (US-West). Industry-standard transport-layer security (TLS) is maintained across all international data transfers.
2. Purpose of Processing
Your data is processed strictly for the following operational needs:
- To authenticate and maintain your active logged-in user profile session across devices.
- To execute secure API calls to generative translation engines (Google Gemini API) to clean and transform your inputs.
- To maintain your personal historical record archive so you can access, download, or edit past listings.
- To send periodic system notifications, updates, and product marketing materials (which you may opt out of at any time).
3. Safety & Third-Party Recipients
- We do not sell, rent, lease, or barter user registration logs, property inputs, or email databases to third-party data brokers.
- Inputs are transmitted securely via TLS encryption to the Google Gemini API solely for linguistic parsing and structural processing. No identifying personal strings are archived permanently by the pipeline processors.
- Data Safeguards: Our hosting environments utilize advanced administrative, physical, and technical firewalls.
4. Individual Access & Control
Under PIPEDA, you hold absolute rights regarding your personal information, including:
- The right to access a comprehensive record of your data assets.
- The right to modify inaccurate parameters.
- The right to request absolute account erasure ("Right to be Forgotten"). If you delete your account, your profile records and listing histories are permanently dropped from the live database rows immediately.
For questions, compliance concerns, or data access requests, please contact our Data Privacy Desk directly at: