Privacy Policy

SQRFT Passport is operated by 2669425 AB Inc. (“SQRFT”, “we”, “us”, or “our”), based in Calgary, Alberta, Canada. We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA).

Our Privacy Officer can be reached at privacy@sqrft.ca.

We collect information in the following ways:

Information you provide directly:

• Account information: name, email address, password
• Passport sections: personal details, employment history, rental history, references, preferences, credit information, and notes you choose to add
• Documents you upload (e.g., pay stubs, reference letters, identification)
• Access request details submitted by Landlords (name, email, phone, property address)

Information collected automatically:

• Log data: IP address, browser type, pages visited, timestamps
• Passport view events: when and how often your Passport link is accessed
• Device information: operating system, screen size, referrer URL

Information from third parties:

• If you sign in with Google, we receive your name and email address from Google as part of the OAuth flow

We use your information to:

• Create and manage your account and Passport
• Share your Passport with Landlords you have approved
• Send transactional emails (account confirmation, access request notifications, approvals)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Improve the platform (using aggregated, anonymized usage data)

We do not use your information for targeted advertising. We do not sell your personal information to any third party.

Your data is shared only in the following limited circumstances:

• With approved Landlords: When you approve an access request, the Landlord gains access to your Passport sections and any documents you have uploaded. You may revoke this access at any time.
• Service providers: We use a small number of trusted infrastructure providers to operate the platform, including Supabase (database and authentication, hosted in Canada), Vercel (hosting), and Sentry (error monitoring, hosted in the United States). Sentry captures only technical error context (stack traces, browser type, page URL) — no personal passport data is transmitted to Sentry. These providers process data only as directed by us and are bound by confidentiality obligations.
• Legal requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.

All data — including your Passport information, documents, and account details — is stored on servers located in Canada. We use Supabase with Canadian data residency to ensure your data does not leave Canada.

We protect your information using:

• Encryption in transit (TLS/HTTPS on all connections)
• Encryption at rest on all storage
• Row-level security policies ensuring users can only access their own data
• Secure, token-based sharing — access requires an explicit, revokable share link
• Access request gating — Landlords cannot view your data until you approve their request

No security system is perfect. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner of Canada as required by law.

As a user of SQRFT Passport, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information in your Passport at any time
• Deletion: Request deletion of your account and all associated data. You may do this through your account settings or by contacting privacy@sqrft.ca
• Withdrawal of consent: Withdraw your consent to data processing at any time (this may limit your ability to use the platform)
• Revoke Landlord access: Remove a Landlord’s access to your Passport at any time through your dashboard

To exercise any of these rights, contact us at privacy@sqrft.ca. We will respond within 30 days.

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account:

• Your Passport and all sections are permanently deleted
• Uploaded documents are removed from storage
• Access requests associated with your account are anonymized or deleted
• We may retain minimal records (e.g., billing history, legal compliance records) for up to 7 years as required by Canadian law

SQRFT Passport uses cookies and similar technologies to:

• Maintain your authentication session
• Remember your preferences
• Analyze platform usage to improve performance (using anonymized data)

We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this may affect your ability to log in and use the platform.

SQRFT Passport is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us at privacy@sqrft.ca and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by posting a notice on the platform. Continued use of SQRFT Passport after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or complaints about how we handle your personal information, please contact our Privacy Officer:

Privacy Officer, 2669425 AB Inc.
Calgary, Alberta, Canada
privacy@sqrft.ca

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.