Privacy Policy
Last updated: May 2026
Overview
ReviewRentals (“we,” “us” or “our”) is a Canadian rental intelligence platform. We are committed to protecting your personal information and being transparent about how we collect, use, and disclose data. This policy explains our practices in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).
By using ReviewRentals, you also agree to our Terms of Service.
Cross-Border Data Transfer Disclosure
Important: Your data is stored on servers located in the United States. By creating an account, you acknowledge and consent to the transfer of your personal information to the United States for storage and processing, where it will be protected under applicable US federal and state privacy laws, including contractual safeguards we maintain with our service providers.
Our cloud infrastructure providers (Supabase and Render) operate data centers in the United States. We use industry-standard encryption (AES-256) for data at rest and TLS 1.2+ for data in transit. We maintain Data Processing Agreements with all our service providers that require them to protect your data to a standard comparable to PIPEDA.
What We Collect
When you create an account and use ReviewRentals, we collect:
- •Account information (email address, password hash, first name)
- •Rental property reviews and ratings you submit
- •Saved/favorited properties
- •Email verification and authentication data
- •Last sign-in timestamp (most recent login only)
How We Use Your Data
- •To create and manage your account
- •To send you verification and authentication emails
- •To display your reviews and ratings on the platform
- •To notify you of replies to your reviews
- •To detect and prevent fraud or abuse
- •To improve our platform and services
Your Rights Under PIPEDA
As a Canadian user, you have the right to:
- •Access the personal information we hold about you
- •Request correction of inaccurate or incomplete information
- •Withdraw consent at any time (subject to legal obligations)
- •Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not handled your data appropriately
User-Generated Content and Personal Information
When you submit a review, you may reference individuals in their professional capacity (e.g., a property manager or landlord). Under PIPEDA, this content is considered an expression of personal opinion related to a commercial transaction and is generally not subject to access or correction requests by the named individual.
However, if a review contains personal information as defined by PIPEDA (such as someone\'s home address, personal phone number, or identifying details unrelated to the tenancy), we will review and may edit or remove that content upon request. You can report such content using the flagging feature on the review or by contacting us directly.
Our full content moderation guidelines, including rules about naming individuals, are described in our Terms of Service.
Data Retention
We retain your account information for as long as your account is active. You may delete your account at any time, which will remove your profile, reviews, and saved properties from the platform. Certain data may be retained for a reasonable period afterward for legal, security, or operational purposes.
Security
We use bcrypt to hash passwords, JWTs with short expiry for authentication, and SHA-256 for sensitive token storage. All data is transmitted over HTTPS. While no system is completely secure, we take reasonable measures to protect your data from unauthorized access, alteration, or destruction.
Contact Us
If you have questions about this policy, wish to access your data, or want to exercise any of your PIPEDA rights, contact us at hello@reviewrentals.ca.