Privacy Policy

Last updated:

Introduction

This Privacy Policy describes how TruCost ("we," "us," or "our") collects, uses, and protects your information when you use our real estate cost analysis service (the "Service"). We respect your privacy and are committed to protecting your personal information.

Information We Collect

We collect the following types of information:

  • Account Information: Email address and encrypted password when you create an account
  • Property Information: Property addresses, purchase prices, rental rates, and other real estate data that you manually provide and enter into our system
  • Financial Information: Income, expenses, and other financial data you provide for property analysis
  • Usage Data: Information about how you use the Service, including browser type, IP address, and device information

How We Use Your Information

We use the collected information for:

  • Providing and maintaining the Service
  • Calculating and analyzing real estate investment opportunities
  • Generating property cost breakdowns and financial projections
  • Sending verification emails and important notifications
  • Improving and optimizing the Service
  • Detecting and preventing fraud or abuse

Data Storage and Security

We implement appropriate security measures to protect your information. All communications between your device and our servers are protected by industry-standard encryption protocols (such as HTTPS/TLS). We maintain standard security practices and regularly update our systems to protect against unauthorized access.

Our service is designed to track real estate investments through manual data entry - we never request or store credentials for your external financial accounts or real estate platforms.

Data Sharing and Third Parties

We do not sell your personal information. We may share your information with third parties only in the following circumstances:

  • With your explicit consent
  • To comply with legal obligations
  • To protect our rights, privacy, safety, or property
  • In connection with a business transfer or acquisition

Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your information
  • Export your property and financial data
  • Opt-out of marketing communications

Third-Party Services

We utilize certain third-party services to operate and maintain our Service. These include partners for:

  • Infrastructure Hosting: To host our Service and store data securely
  • DNS and Security: To manage domain name resolution, enhance security, and handle secure data backups
  • Email Delivery: To send essential transactional emails, such as account verification and important notifications
  • Payment Processing: To handle subscription payments and billing securely

These service providers are bound by data processing agreements and are only permitted to use your data as necessary to provide their services to us. The specific providers we use may change over time as we strive to improve our Service.

Cookies and Tracking

We use only essential authentication cookies to maintain your secure login session. These cookies are small text files stored on your device that allow us to remember your login status and keep you securely authenticated while using the Service.

These cookies are strictly necessary because:

  • They maintain your secure login session across pages
  • They prevent unauthorized access to your account
  • They enable proper functioning of our subscription system

These cookies are automatically removed when you log out. We do not use any tracking, analytics, or advertising cookies.

Analytics and Tracking

Any analytics we implement are self-hosted on our own infrastructure, ensuring your usage data never leaves our secure environment. We do not share your usage data with third-party analytics providers.

Data Retention

We retain your personal information for as long as your account remains active or as needed to provide you with the Service. If you close your account, we will retain your data for up to 30 days after account closure, unless required by law to retain it longer.

During this retention period, your data is maintained to comply with legal obligations, resolve disputes, and prevent fraud. You can request deletion of your data at any time by contacting us, and we will process your request within this timeframe unless legal obligations require extended retention.

Security Incidents

In the event of a security breach affecting your personal information, we will notify you promptly via email or prominent notice on our Service within 72 hours of discovering the breach. We will provide information about the breach and steps we are taking to protect your information.

Regional Privacy Rights

As our Service is based in Canada and primarily serves Canadian users, we ensure compliance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Under Canadian privacy law, you have specific privacy rights, including:

  • The right to know what personal information we collect and how it is used
  • The right to access your personal information that we have collected
  • The right to request correction of inaccurate personal information
  • The right to request deletion of your personal information, subject to legal and business requirements
  • The right to withdraw consent for the collection, use, or disclosure of your personal information
  • The right to file a complaint with the Privacy Commissioner of Canada if you believe your privacy rights have been violated

If you wish to exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. For material changes that significantly impact your privacy rights or how we use your data, we will notify you by:

  • Displaying a prominent notice within the Service (e.g., on your dashboard or as a pop-up upon login)
  • Updating the "Last updated" date at the top of this policy

Where legally required, we will obtain your consent for changes before they take effect. We encourage you to review this Privacy Policy periodically to stay informed about our practices.

Contact Us

If you have questions about this Privacy Policy or need to exercise your privacy rights, please contact us:

  • Email: support@trucost.ca
  • Business Hours: Monday - Friday, 9:00 AM - 6:00 PM EST

For immediate assistance, please email us or use our contact form. We typically respond within 24 hours during business days.