PRIVACY POLICY

1. Introduction

Plazio Solutions Inc. (“Plazio”, “we”, “us”, or “our”) respects your right to privacy and the protection of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use:

• Our student housing and apartment search platform
• Our roommate matching services
• Our landlord CRM and property management workflows
• Our digital lease and document management features (whether powered by Plazio or third parties)
• Our tenant insurance partnerships
• Our partner services (including movers, plumbers, internet providers and similar services)
• Our websites, applications, and related online services (collectively, the “Services”).

This Privacy Policy is governed in particular by:

• Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25; and
• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Person in Charge of the Protection of Personal Information

In accordance with Québec law, Plazio has designated a person responsible for the protection of personal information (the “Privacy Officer”). If you have any questions, requests, or complaints regarding this Privacy Policy or our privacy practices, you may contact:

If no specific delegate is identified, the person holding the highest authority within Plazio (its chief executive) is deemed to act as Privacy Officer.

3. Scope and Application

This Privacy Policy applies to personal information that we collect about identifiable individuals in connection with our Services, including:

• Tenants, prospective tenants and users searching for apartments or roommates
• Roommates and housing applicants
• Landlords and property managers
• Partners and service providers using our platform
• Visitors to our website and applications

This Privacy Policy does not apply to information about anonymized or aggregated data that cannot reasonably identify an individual.

4. What Personal Information We Collect

We only collect personal information that is necessary for the purposes described below.

4.1 Information You Provide Directly

Depending on how you use the Services, we may collect:

4.2 Information Collected Automatically

When you use our Services, we may automatically collect:

• Device information (device type, operating system, browser)
• IP address and approximate geolocation (city / region)
• Log data (pages visited, timestamps, actions taken in the app)
• Cookies and similar technologies (see Section 10 – Cookies and Tracking)

4.3 Information from Third Parties

We may receive information from:

• Payment processors (e.g., Stripe) regarding payment status and transaction identifiers
• Email and communication tools (e.g., Google Workspace)
• Cloud infrastructure (e.g., Supabase, Google Cloud Platform) supporting storage and authentication
• Insurance partners and other service providers, when you choose to use their services through Plazio
• Landlords and property managers, such as notes or updates on your application or lease

We treat any such information in accordance with this Privacy Policy and applicable laws.

5. Purposes for Which We Use Personal Information

We use your personal information for the following purposes:

We do not use your personal information for purposes that are incompatible with those described above, except as required or permitted by law and with appropriate notice where required.

6. Legal Basis and Consent

Where required by law, particularly in Québec, we collect, use and disclose personal information with your consent, except in circumstances where the law authorizes or requires us to do so without consent.

Consent may be:

• Explicit, for example where you click “I agree”, check a box, or sign electronically; or
• Implied, where it is reasonably apparent from your actions that you consent to a particular use of your information.

You may withdraw your consent to the use or disclosure of your personal information, subject to legal and contractual restrictions. For example, withdrawing consent may limit our ability to provide certain Services (such as landlord introductions, lease processing or insurance referrals).

7. Automated Decision-Making and Profiling

Plazio may use automated systems and algorithms to:

• Recommend apartments, roommates or services based on your profile, preferences and activity
• Assist landlords in prioritizing or organizing applications
• Detect unusual patterns to help identify potential fraud or misuse

These automated processes may have an impact on the offers or matches presented to you.

In accordance with applicable law, you have the right to:

• Be informed when a decision about you is made predominantly through automated processing, and
• Request additional information about the factors and main parameters behind such decisions, and
• Request a review of such decisions by a human, where required by law.

To exercise these rights, contact our Privacy Officer (see Section 2).

8. Disclosure of Personal Information

We may disclose your personal information to the following categories of recipients, only to the extent necessary for the purposes set out in this Policy:

We do not sell personal information in the sense prohibited by applicable privacy laws.

9. Your Rights

Subject to applicable law, you have the following rights with respect to your personal information:

• Right of Access: You may request confirmation of whether we hold personal information about you and, if so, obtain a copy of that information, along with information about how it has been used and disclosed.
• Right to Rectification (Correction): You may request correction of any incomplete, outdated or inaccurate personal information that we hold about you.
• Right to Withdraw Consent: Where we rely on consent, you may withdraw your consent to our use or disclosure of your personal information, subject to legal and contractual restrictions.
• Right to Deletion: You may request that we delete personal information we hold about you, subject to certain exceptions (e.g., legal retention requirements, ongoing contractual obligations).
• Right to Data Portability: In certain circumstances, you may request that your personal information be provided to you or transmitted to another organization in a structured, commonly used and machine-readable format.
• Right to Restrict or Object to Certain Processing: You may object to certain uses of your information, particularly for marketing or automated decision-making, where applicable.
• Right to File a Complaint: You may file a complaint with our Privacy Officer, and you also have the right to lodge a complaint with the Commission d’accès à l’information du Québec or any other competent privacy regulator.

To exercise any of these rights, please contact our Privacy Officer (see Section 2). We may need to confirm your identity before responding to your request. We will respond within the timeframes required by law.

10. Cookies and Tracking Technologies

We may use cookies and similar technologies (such as web beacons and local storage) to:

• Operate and secure our Services
• Remember your preferences and settings
• Measure usage and performance
• Improve user experience

You may configure your browser to block or delete cookies, but doing so may affect the availability or functionality of certain parts of our Services.

Where cookies are used for marketing or advertising purposes, we will obtain consent where required by law.

11. Retention of Personal Information

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy or as required by law. Without limiting the generality of the foregoing, and subject to applicable laws and ongoing contractual obligations, we generally apply the following guidelines:

• User accounts and profile information: retained for as long as your account is active and for a reasonable period after inactivity or account closure, to allow for reactivation or to comply with legal obligations.
• Application documents and identity verification materials: retained only for the period necessary to complete the evaluation and finalize the lease or related process, and deleted or anonymized thereafter unless a longer retention period is legally required or justified (e.g., in case of disputes).
• Lease and transaction records: retained for the duration of the lease and for a commercially reasonable period thereafter, particularly where required for tax, accounting or legal purposes.
• Logs and analytics data: retained for a period necessary to ensure security, maintain the integrity of our systems and improve our Services, then anonymized or deleted.

We maintain internal policies specifying detailed retention and deletion schedules and apply appropriate technical measures to carry out deletion or anonymization.

12. Security Measures

We take reasonable and appropriate administrative, technical and physical measures to protect your personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. These measures include, without limitation:

• Encryption of data in transit (e.g., HTTPS/TLS) and at rest, where appropriate
• Access controls and role-based permissions limiting access to personal information to those who need it
• Authentication and, where applicable, multi-factor authentication for access to administrative tools
• Secure development practices and regular updates to our systems
• Monitoring and logging of certain activities related to personal information

However, no method of transmission over the Internet or method of electronic storage is entirely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

13. International Transfers of Personal Information

Plazio Solutions Inc. is based in Québec, Canada, but we use service providers and infrastructure that may be located outside Québec and outside Canada, including in the United States (for example, Supabase, Google Cloud Platform, and certain functionalities of Stripe and Google Workspace).

As a result, your personal information may be transferred to and stored in jurisdictions where privacy laws may differ from those in Québec or Canada. In such cases, we ensure that appropriate measures are in place to provide a level of protection that is generally equivalent to that required by the laws applicable in Québec, including by:

• Conducting privacy impact assessments for cross-border transfers, as required by law; and
• Using contractual protections and safeguards with our service providers, such as data protection agreements and security commitments.

By using our Services, you understand that your personal information may be processed in these other jurisdictions, subject to their laws, and in accordance with this Privacy Policy.

14. Breach of Security Safeguards

In the event of a breach of security safeguards involving your personal information that presents a risk of serious injury, we will:

• Take reasonable steps to reduce the risk of harm and prevent further incidents
• Notify the competent authorities, including the Commission d’accès à l’information du Québec, when required by law
• Inform you, as required, of the nature of the breach, the information concerned, and the measures you can take to mitigate potential harm

We also maintain a register of such incidents, as required by law.

15. Third-Party Websites and Services

Our Services may contain links to third-party websites or services, including landlord sites, tenant insurance providers, and other service providers. This Privacy Policy does not apply to those third-party websites or services, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party site or service before providing your personal information.

16. Changes to this Privacy Policy

We may modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. When we make material changes, we will update the “Effective date” at the top of this Policy and, where required by law, notify you or seek your consent. Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the revised Policy.

17. Contact Us

If you have any questions, comments, requests, or complaints regarding this Privacy Policy or our handling of your personal information, please contact:

We will do our best to respond within the time limits prescribed by applicable laws.