Skip to content
DwellerBack to Home

Privacy Policy

Last updated: March 27, 2026

Dweller Property Management (“Dweller”, “we”, “us”) operates the dwellerpm.com website and the Dweller mobile application (collectively, the “Service”). This privacy policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

1. Information We Collect

We collect the following categories of information:

  • Account information: Name, email address, phone number, company name, province, and role (landlord or accountant).
  • Property data: Property addresses, building characteristics, asset inventories, expense records, rent payments, and tenant information you enter into the Service.
  • Device information: Device token and platform (iOS/Android) collected when you enable push notifications. We do not collect any other device identifiers.
  • Usage data: Pages visited, features used, and session information for improving the Service.
  • Tenant-submitted data: Maintenance tickets, observation reports, condition reports, and survey responses submitted by tenants through the tenant portal.

2. How We Use Your Information

We use your information to:

  • Provide property intelligence, health scoring, and capital forecasting services.
  • Generate CRA T776 tax reports and CCA schedules.
  • Power AI-assisted maintenance triage and asset risk analysis.
  • Send push notifications for maintenance updates, lease renewals, and rent reminders (only when you have enabled notifications).
  • Send transactional emails (account verification, invite notifications, payment reminders).
  • Track expenses with CRA-compliant categories for tax reporting.
  • Improve the Service and develop new features.

3. Third-Party Services

We use the following third-party services to operate the Service:

  • Supabase: Database and authentication, hosted in Canada (ca-central-1 region).
  • Stripe: Payment processing. We do not store payment card details — all payment data is handled directly by Stripe.
  • Anthropic Claude: AI-powered maintenance triage and analysis. Only maintenance ticket descriptions are sent — no personal data, financial records, or tenant information is transmitted to Anthropic.
  • Expo: Push notification delivery for iOS and Android devices.
  • Vercel: Web application hosting.
  • Resend: Transactional email delivery.

Each third-party service operates under its own privacy policy. We do not sell your personal data to any third party.

4. Data Storage and Security

Your data is stored securely in Canada using Supabase's ca-central-1 region. All data is encrypted at rest and in transit (HTTPS). Row-level security policies ensure users can only access their own data. We use industry-standard practices to protect your information from unauthorized access.

5. Data Sharing

We share data only in the following circumstances:

  • Accountant access: If you grant an accountant read-only access, they can view your financial data (expenses, rent, CCA schedules, T776 reports). You can revoke this access at any time.
  • Tenant access: Tenants you invite can submit tickets, observations, and condition reports through the tenant portal.
  • Legal requirements: We may disclose information if required by law or in response to valid legal process.

6. Data Retention

We retain your data for as long as your account is active. Upon account closure, your data will be deleted within 30 days upon request. Specific retention periods by document type:

  • Financial records & receipts: 6 years from end of tax year (CRA Income Tax Act s.230).
  • Lease agreements: 6 years after lease termination.
  • Inspection reports & photos: 6 years from inspection date.
  • Condition reports: Duration of tenancy plus 2 years.
  • Maintenance tickets: 3 years from resolution.
  • Insurance & compliance documents: 6 years.

You can customize retention periods (equal to or greater than legal minimums) in your account settings. Documents past their retention date are archived but remain downloadable. No data is automatically deleted — you maintain full control.

7. Your Rights Under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

  • Access your personal information held by us at any time using the built-in export features.
  • Correct inaccurate personal information through your account settings.
  • Delete your account and associated personal information (subject to legal retention minimums).
  • Withdraw consent for collection and use of your personal information at any time (note: withdrawal may prevent use of the Service).
  • File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca if you believe we have not handled your personal information appropriately.

To exercise any of these rights, contact us at privacy@dwellerpm.com. We will respond within 30 days.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at privacy@dwellerpm.com and we will take steps to delete that information.

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising, analytics, or third-party tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes via email at least 30 days before they take effect. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact

For privacy-related enquiries:

Need help? Visit our Support page →