// legal

Privacy Policy

Effective date: June 14, 2026  ·  Governed by PIPEDA (Canada)

We do not sell, rent, or trade your personal information. Ever. This policy explains what we collect, why we collect it, and how you can control it.


01

Who We Are

Investors IQ ("we", "us", "our") operates the Investors IQ platform, a real estate investment analysis tool available at this domain. We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy legislation, and recognized privacy principles of accountability, transparency, and limited collection.

This Privacy Policy applies to all personal information collected through the Platform, including via the website, application, and any agent enrichment forms sent on your behalf.

02

Information We Collect

We collect only what is necessary to provide and improve the Service.

Account Information

When you register, we collect your name and email address. No password is stored — authentication is handled via one-time magic links sent to your email.

Property and Analysis Data

We collect property addresses, financial assumptions, notes, and any other information you voluntarily enter into the Platform in connection with your property analyses. This data is stored per property and associated with your account.

Uploaded Documents

If you upload documents (inspection reports, rent rolls, financial statements, etc.), those files are stored securely and associated with your account and the relevant property record.

Agent-Submitted Data

When you send a data request to a listing agent via the agent enrichment feature, the agent's responses — which may include property details and contact information they voluntarily provide — are stored in your property profile. See Section 5 for more detail.

Usage and Technical Data

We automatically collect limited technical information to operate and secure the Service, including:

  • IP address and approximate geographic region
  • Browser type and version
  • Pages visited and actions taken within the Platform
  • Session timestamps and duration
  • Error logs and performance data

This data is used solely for security, fraud prevention, and service improvement. It is not used for advertising or sold to third parties.

Payment Information

Payment card details are collected and processed entirely by Stripe, Inc. We do not receive or store full card numbers, CVV codes, or other sensitive payment credentials. We retain only transaction records (amount, date, credit balance changes) necessary for account management and legal compliance.

CategoryExamplesWhy collected
AccountName, emailAuthentication, communication
Property dataAddresses, assumptions, notesDeliver analysis features
DocumentsUploaded filesProperty due-diligence storage
Agent dataForm responsesProperty profile enrichment
TechnicalIP, browser, logsSecurity, fraud prevention
PaymentsTransaction recordsBilling, legal compliance
03

How We Use Your Information

We use your personal information only for the following purposes:

  • Providing the Service: operating your account, processing property analyses, storing your data, and delivering platform features
  • Authentication: verifying your identity via passwordless magic-link emails
  • Billing: processing credit purchases and maintaining transaction records
  • Transactional communications: sending sign-in links, agent request notifications, and service-related notices — not marketing unless you opt in separately
  • Security and fraud prevention: monitoring for abuse, unauthorized access, and bot activity; enforcing rate limits and bot-detection measures
  • Service improvement: analysing aggregated, de-identified usage patterns to improve platform features
  • Legal compliance: meeting obligations under applicable Canadian law

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you, nor for profiling, advertising, or resale.

04

How We Share Your Information

We do not sell, rent, trade, or broker your personal information to any third party.

We share information only in the following limited and necessary circumstances:

Service Providers

We engage trusted third-party service providers who process data on our behalf under contractual obligations that restrict their use of your data to the provision of services to us. These include payment processing, AI-assisted data extraction, and email delivery. See Section 6 for specifics.

Legal Requirements

We may disclose personal information if required to do so by law, court order, regulatory authority, or to protect the rights, property, or safety of Investors IQ, its users, or others.

Business Transfer

In the event of a merger, acquisition, financing, or sale of all or part of our business assets, personal information may be transferred as part of that transaction. We will provide notice by email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a materially different privacy policy.

With Your Consent

We may share your information for any other purpose with your explicit consent.

05

Agent Enrichment Feature

The Platform allows you to send a secure, one-time data request form to a listing agent's email address you provide. The agent receives a unique link and can voluntarily submit property information (unit details, financials, documents, etc.) through a public form that does not require an account.

Agents are informed at the point of form submission that:

  • Their responses will be stored in connection with a property record on the Investors IQ platform
  • The investor who sent the request will be able to view their submission
  • Contact information they provide will be stored and may be used to follow up on the property

You are responsible for ensuring that any email address you use to contact an agent is one the agent has made publicly available in connection with the listing, and that your use of this feature complies with applicable anti-spam legislation, including Canada's Anti-Spam Legislation (CASL).

Investors IQ does not verify agent-submitted data and accepts no liability for its accuracy or completeness.

06

Third-Party Services

The Platform relies on the following key third-party service providers. Each has its own privacy policy, which we encourage you to review:

ProviderPurposeData shared
Stripe, Inc. Payment processing Payment card details (processed directly by Stripe); email for receipts
Google LLC (Gemini API) AI-assisted extraction of property data from listing text Listing text content only — no account or personal data is sent to the Gemini API
Email delivery provider Transactional emails (sign-in links, agent notifications) Recipient email address and email content
Cloudflare Bot detection (Turnstile) and DDoS protection IP address and browser signals for bot scoring

We do not integrate advertising networks, data brokers, analytics platforms that track you across sites, or social media tracking pixels.

07

Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods:

  • Account and property data: retained while your account is active and for up to 2 years following account closure or last activity
  • Transaction records: retained for a minimum of 7 years as required by Canadian tax and financial record-keeping obligations
  • Technical logs: retained for up to 90 days for security and fraud investigation purposes
  • Uploaded documents: retained while your account is active; deleted upon account deletion request

You may request earlier deletion of your account and associated data (see Section 10). Some data may be retained beyond your deletion request where required by law or to protect our legitimate legal interests.

08

Security

We implement industry-standard technical and organizational security measures designed to protect your personal information against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

  • Encrypted data transmission (HTTPS/TLS) for all Platform communications
  • Hashed and salted authentication tokens — we do not store plaintext passwords or magic-link tokens after use
  • Access controls limiting employee and system access to personal data on a need-to-know basis
  • Rate limiting, bot detection, and IP-based abuse controls
  • Encrypted file storage for uploaded documents

No method of electronic transmission or storage is 100% secure. While we take the protection of your information seriously, we cannot guarantee absolute security. In the event of a breach affecting your personal information, we will notify you and the applicable privacy authority as required by PIPEDA's breach notification obligations.

09

Cookies & Tracking

The Platform uses a minimal set of cookies strictly necessary for operation:

  • Session cookies: required for authentication and maintaining your logged-in state. These expire when you close your browser or after a set inactivity period.
  • Preference cookies: stores your column display preferences, sort settings, and other in-app UI choices. These persist across sessions.

We do not use advertising cookies, third-party tracking cookies, or any cross-site tracking technology. We do not participate in advertising networks or retargeting programs.

You may configure your browser to block or delete cookies. Blocking session cookies will prevent you from logging in and using authenticated features of the Platform.

10

Your Rights (PIPEDA)

Under PIPEDA and applicable provincial privacy legislation, you have the following rights with respect to your personal information:

  • Access: request a copy of the personal information we hold about you and information about how it is used
  • Correction: request that we correct inaccurate or incomplete personal information
  • Withdrawal of consent: withdraw your consent to our collection or use of your personal information, subject to legal and contractual obligations. Withdrawal of consent may limit or prevent your ability to use the Service.
  • Deletion: request deletion of your account and associated personal data, subject to our legal retention obligations
  • Portability: request your personal data in a structured, commonly used format where technically feasible

To exercise any of these rights, please contact us at legal@investorsiq.ca. We will acknowledge your request within 10 business days and respond substantively within 30 days. We may require verification of your identity before processing a request.

11

Children's Privacy

The Service is not directed at, and we do not knowingly collect personal information from, individuals under the age of 18. If you are a parent or guardian and believe we have inadvertently collected information from a minor in your care, please contact us immediately at legal@investorsiq.ca and we will promptly delete that information.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will provide notice of material changes by email to your registered address and/or by posting a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Service after changes take effect constitutes your acceptance of the revised Policy.

13

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or your personal information, contact our privacy team at:

Investors IQ — Privacy
Email: legal@investorsiq.ca

We will do our best to address your concern promptly and fairly. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada:

Ontario residents may also contact the Information and Privacy Commissioner of Ontario at www.ipc.on.ca.

Also see: Terms of Service