Privacy Policy

1. Who is responsible

OfferingStack is responsible for personal information under our control. Our privacy officer is the person responsible for this policy and can be reached at hello@offeringstack.com or at the address in the Contact section.

2. Information we collect

• Account information: your email address and sign-in details. Passwords are handled by our authentication provider and are never visible to us.
• Listing information you provide: property details, rent rolls, financials, notes, uploaded fact sheets, photos, plans and logos.
• Information about other people in your documents, such as broker names, phone numbers, email addresses, headshots and tenant names.
• Generated documents and their history, including preview images.
• Payment information: payments are processed by Square. We receive the payment status, amount, and Square reference numbers, not your full card number.
• Usage information: our built-in analytics records the page visited, the referring page, browser type, language, an approximate country derived from your time zone and a random session ID. It does not record your IP address, the page’s query string or form contents.
• Information stored in your browser: your sign-in session, unsaved drafts and your cookie choices. See our Cookie Policy.

3. Personal information about others

If your documents include personal information about other people (for example, co-listing agents or tenants), you confirm that you are allowed to share it with us and to publish it in your marketing.

4. How we use information

• To provide the Service: extract facts, research locations, render maps and pages, and deliver your documents.
• To manage your account, your free preview, purchases and subscriptions.
• To answer your questions and send service messages, such as receipts and notices about changes.
• To keep the Service secure and to prevent misuse.
• To understand how the Service is used, in aggregate, so we can improve it.
• To meet legal, tax and accounting obligations.

5. AI processing

Some features send content to third-party AI model providers through our hosting platform: extracting facts from your fact sheet, web research about a property address, drafting copy, and suggesting how to place photos. Only the content needed for the feature you use is sent. We do not use your content to train our own models. Avoid uploading personal information that your documents do not need.

6. Service providers

We share personal information with service providers that process it on our behalf, under contracts or terms that limit their use of it:

• Floot: application hosting, accounts and sign-in, database, file storage, email delivery and analytics.
• Google: optional "Continue with Google" sign-in (your name and email address).
• Square: payment processing and subscriptions.
• AI model providers, reached through our hosting platform: fact extraction, research, copy drafting and image suggestions.
• Mapbox: geocoding of property addresses, maps, drive times and directions.
• OpenStreetMap services (Overpass API): amenities, roads, transit and nearby businesses around a location.
• Web search providers used by the research feature: queries that include the property address.

We do not sell personal information.

7. Storage outside Canada

Our service providers may store and process information in the United States and other countries. Information held outside Canada is subject to the laws of those countries and may be accessible to their authorities.

8. Links to files

Uploaded images and generated PDFs are stored at long, hard-to-guess web addresses. Anyone who has the exact address of a file can open it, so share links with care. Deleting a listing deletes its stored PDFs.

9. Retention

• Account information: while your account is open, and afterwards only as long as needed for the purposes above.
• Listings and documents: until you delete them or close your account. For each listing we keep your most recent 20 generated PDFs; older ones are deleted automatically.
• Drafts started without signing in may be deleted after a period of inactivity.
• Payment and tax records: as long as tax law requires (in Canada, generally six years).

10. Your rights

You may ask to access the personal information we hold about you, ask us to correct it, withdraw consent (which may mean we can no longer provide some features), or ask us to delete it, subject to legal exceptions. Contact our privacy officer to make a request. We will respond within the time required by law.

From your account page you can also download a copy of your account data (your drafts, free preview, purchases and subscriptions) as a file, and request deletion of your account. We confirm a deletion request with you before anything is removed.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada, or, in Quebec, to the Commission d’accès à l’information.

If you are in the EU or UK: we rely on contract (to provide the Service), legitimate interests (security and improvement) and consent (analytics cookies). You also have rights to restrict or object to processing, to data portability, and to complain to your local data protection authority.

11. Security

We use reasonable administrative, technical and physical safeguards for the sensitivity of the information. Connections to the Service are encrypted in transit. No system is completely secure. If a breach creates a real risk of significant harm, we will notify affected people and regulators as the law requires. See also our Security & data page.

12. Children

The Service is for business use and is not directed to minors. We do not knowingly collect personal information from them.

13. Changes to this policy

We will post any changes here and update the effective date. If a change is significant we will tell you in advance.

14. Contact

• OfferingStack
• 1225 Kennedy Road South, Scarborough, Ontario, Canada
• Phone: (519) 400-4667
• Email: hello@offeringstack.com