Legal
Privacy Policy
Effective date: May 17, 2026
We built Tenur to help BC landlords stay organized and compliant — not to harvest data. This policy explains, in plain English, exactly what we collect, why, and how you can control it.
Who we are
Tenur is a property management SaaS operated from Vancouver, BC, Canada. When this policy says "Tenur," "we," or "us," it means the service and the people running it. Our privacy officer can be reached at privacy@tenur.ca.
What we collect
- Account information — your name and email address when you sign up.
- Property and tenant data — addresses, lease terms, rent amounts, and any other details you enter about your properties and tenants.
- Inspection records — photos, condition notes, and signatures you capture during inspections.
- Evidence log entries — notices, messages, incidents, and timestamps you record.
- Usage analytics — pages visited, features used, and session duration, collected in aggregate to help us improve the product.
- Payment information — billing details processed directly by Stripe. We never see or store your card number.
How we use your information
- Provide and operate the Tenur service.
- Send transactional emails — account confirmation, password reset, billing receipts.
- Respond to your support requests.
- Improve and develop the product, using aggregated, anonymized analytics.
- Comply with legal obligations if required.
We do not send marketing emails unless you explicitly opt in.
Third-party services
We use the following sub-processors to operate Tenur. Each is bound by their own privacy and security commitments.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | Canada (AWS ca-central-1) |
| Vercel | Web hosting and CDN | United States |
| Stripe | Payment processing | United States |
| Resend | Transactional email delivery | United States |
Data transfers outside Canada
Vercel, Stripe, and Resend are US-based companies. When we use these services, your data may be processed in the United States. We take reasonable steps to ensure these providers maintain appropriate safeguards, including their adherence to applicable data transfer frameworks. By using Tenur, you acknowledge that some data will be processed outside Canada.
Data retention
We keep your data for as long as your account is active. If you close your account and request deletion, we will permanently delete your data within 30 days — except where we are required to retain records for legal or regulatory reasons. Backups are purged on the same schedule.
Your rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and BC's Personal Information Protection Act (PIPA), you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your personal information.
- Withdraw consent, where consent is the basis for processing.
To exercise any of these rights, email privacy@tenur.ca. We will respond within 30 days.
Security
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Our database enforces row-level security so that one account can never access another account's data. We conduct periodic security reviews and follow responsible disclosure practices.
We will never sell your data
We do not sell, rent, or trade your personal information or your tenants' information to any third party, ever. Your data is used exclusively to provide Tenur to you.
Cookies
Tenur uses session cookies to keep you logged in and functional cookies required for the service to work. We do not use advertising or tracking cookies. You can disable cookies in your browser, but this will prevent you from logging in.
Changes to this policy
If we make material changes, we will email registered users at least 14 days before the changes take effect. The updated policy will always be available at tenur.ca/privacy with the effective date clearly shown.
Contact
Questions, access requests, or complaints about how we handle your information: