Privacy Policy

When you register, we collect your name, email address, and a password credential (stored as a one-way hash). If you sign in through Google OAuth, we receive your name and email address from Google. You may optionally upload brand assets (logo, business name) to personalize reports — these are stored on your behalf and are not used for any other purpose.

All payment card data is collected and processed directly by Stripe, Inc. We do not store card numbers, CVVs, or full payment credentials on our systems. We retain only non-sensitive billing metadata returned by Stripe: your Stripe customer ID, subscription plan, billing status, and invoice history, which we require to manage your account and comply with tax obligations.

When you use the Service, we automatically collect technical data including your IP address, browser type and version, operating system, pages visited, features used, search queries you run within the platform (including listing IDs and geographic filters you interact with), and session timestamps. Listing IDs in this context refer to identifiers from publicly available real-estate databases and do not contain your personal financial decisions.

If you contact us by email or through support channels, we retain your messages and our responses to resolve your inquiry and improve the Service.

When you use Princeps Assistant, we collect and store your prompts, assistant responses, model and usage metadata, tool traces, generated artifacts, and related errors so we can provide support, debug issues, monitor abuse, and improve the Service.

We use your account information to authenticate you, personalize your dashboard, and deliver analytics and reports. This is the primary purpose for which information is collected and the reason you entered into a subscription agreement with us.

We use billing metadata to charge for your subscription, issue invoices, calculate applicable Canadian sales taxes (GST/QST/HST), and comply with our obligations as a Quebec-based business under the Taxation Act and the Excise Tax Act.

We analyze usage patterns and IP data to detect unauthorized account access, fraudulent subscription activity, and abuse of the platform. This is a legitimate interest that is proportionate to and does not override your privacy interests.

We use aggregated, de-identified usage statistics to understand how the platform is used, prioritize new features, and fix defects. Where we use individual-level data for this purpose, we will obtain your consent or rely on de-identification prior to analysis.

Under Quebec Law 25, we collect information only for explicit, defined purposes. We do not use personal information for any purpose incompatible with those stated here without seeking fresh, informed consent.

Stripe processes subscription payments. Stripe collects your payment card data directly and operates primarily in the United States. Stripe is PCI-DSS certified. See Stripe's privacy policy at stripe.com/privacy. We are accountable for Stripe's handling of data transferred under our arrangement.

Google provides OAuth sign-in ("Sign in with Google"). If you use this feature, Google processes your name and email address to authenticate you and returns an identity token to us. Google's processing is governed by its own privacy policy at policies.google.com/privacy.

Cloudflare hosts the Princeps web application and serves it via a global edge network. Cloudflare processes network traffic — including IP addresses and HTTP metadata — in data centers across the United States and other jurisdictions as part of normal content delivery and security functions (DDoS protection, DNS). See Cloudflare's privacy policy at cloudflare.com/privacypolicy.

We use a transactional email service to deliver account-related emails (welcome messages, receipts, security alerts). Your email address is transmitted to this provider solely for delivery purposes.

Your name, email, and subscription history are retained for the duration of your active subscription and for twelve (12) months after your account is closed or your subscription ends. This period covers potential billing disputes, tax record requirements, and any support inquiries arising after cancellation.

IP addresses, session data, and feature usage are retained for ninety (90) days, after which they are deleted or de-identified.

Non-sensitive billing metadata from Stripe is retained for seven (7) years as required by Canadian tax law.

After applicable retention periods expire, personal information is securely deleted or anonymized. You may request earlier deletion subject to the limitations described in Section 7.

Princeps Assistant transcripts and related metadata are retained indefinitely for support, debugging, abuse prevention, and product improvement unless we decide to delete or anonymize them earlier, or unless deletion is required by applicable law.

You have the right to know what personal information we hold about you and to receive a copy of it in an intelligible format.

You have the right to request correction of inaccurate or incomplete personal information. Account information such as your name can be corrected directly in your account settings.

You may request that we delete your personal information. We will fulfill deletion requests subject to legal obligations that require us to retain certain records (e.g., tax records). Deletion of your account will be processed upon request and confirmed by email.

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to have it transmitted to another organization where technically feasible. Submit portability requests to privacy@princep.org.

You may withdraw your consent to any non-essential data processing at any time, subject to legal or contractual restrictions. Withdrawal of consent to processing required to deliver the Service may result in termination of your subscription.

If you believe we have handled your personal information in a manner inconsistent with PIPEDA, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca. If you are a Quebec resident, you may also file a complaint with the Commission d'accès à l'information du Québec (CAI) at cai.gouv.qc.ca.

Princeps has designated a Privacy Officer responsible for compliance with Quebec Law 25 and PIPEDA. The Privacy Officer can be reached at privacy@princep.org. If you are a Quebec resident and wish to submit a privacy request or complaint, contact the Privacy Officer directly.

We conduct privacy impact assessments before implementing new personal information processing activities or acquiring third-party systems that handle personal data.

In the event of a confidentiality incident (data breach) that presents a risk of serious harm to an individual, we will promptly notify the CAI and affected individuals, as required by Law 25. Notice will describe the nature of the incident, the categories of personal information involved, the number of individuals affected, and the measures we have taken or plan to take in response.

Princeps's analytics engine produces market-intelligence outputs (price indices, absorption rates, days-on-market trends). These outputs are informational and are presented to you as one input among many in your professional decision-making. We do not make consequential automated decisions about individual Subscribers — such as creditworthiness determinations, eligibility decisions, or employment decisions — based solely on automated processing of your personal data.