Privacy policy

1. Who we are

MostlyPassive is software for landlords in British Columbia, operated by [CONFIRM: company name], [CONFIRM: address]. Questions about privacy go to our privacy contact at [CONFIRM: privacy@mostlypassive.com].

2. Two kinds of personal information, two roles

Landlords' own details (your name, email, business details, login and billing records): we collect these to provide the service to you, and we're responsible for them.

Your tenants', applicants' and other people's details that you put into MostlyPassive, or that reach you through your MostlyPassive website (for example a rental application): we hold these on your behalf, as your service provider. You decide what's collected and why, and you're responsible for having the right to collect it and for answering your tenants' and applicants' privacy requests. We only use it to provide the service to you.

3. What we collect from landlords

Account details: name, email, business name and address for service, phone, and the people you add to your team.

Records of agreements: which version of our terms you accepted, when, and from what IP address and browser.

Billing: your plan and payment status. Card details are entered on our payment processor's page (Stripe) and never reach us.

Usage: sign-in times and basic technical logs (IP address, browser, pages requested) used for security and to keep the service working.

4. How we use it

To run your account; to send you the emails the service depends on (sign-in links, alerts, receipts, important notices about the service or these policies); to keep the service secure; to help you when you ask; and to understand, in aggregate, which features are used so we can improve them.

We don't sell personal information, and we don't use your records or your tenants' details for advertising.

5. Who we share it with

Only the service providers we need to run MostlyPassive, each under its own confidentiality and security obligations: database and file storage (Supabase), hosting (Cloudflare), email delivery (Resend), payments (Stripe), and, only if you connect a bank account, the bank connection service (Plaid).

We may also disclose information where the law requires it, or to protect someone's safety.

[CONFIRM: where each provider stores data. Some store data outside Canada (for example in the United States), where it may be accessible to authorities under local law. State the actual regions here.]

6. How long we keep it

While your account is open. After you close it, you can download everything for 30 days; then we delete your records and documents. Off-site backups expire within 90 days after that. We keep billing and tax records for as long as tax law requires.

7. Security

Data is encrypted in transit and at rest, each landlord's records are kept separate from every other landlord's, sign-ins can use two-step login, and access by our own people is limited to what's needed to help you or keep the service running.

If a breach puts personal information at real risk of significant harm, we'll tell the affected landlords without unreasonable delay, so they can meet their own obligations to their tenants and applicants, and we'll report it as the law requires.

8. Your choices and rights

You can see and correct your account details in your account, download all your records at any time (Settings → Backup & export), and close your account.

You can ask us what personal information we hold about you and how it's been used, and ask us to correct it. Write to our privacy contact. For information about tenants or applicants, they should ask the landlord, who controls it; we'll help the landlord respond.

If you're not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia.

9. Changes

We'll email account owners at least 30 days before a change that affects how we use personal information, and show the date of the current version at the top of this page.