Privacy Policy | easemint

1. Information We Collect

When you use easemint, we collect information to provide and improve our services:

Account Information: Name, email address, phone number, and password when you create an account.
Property Information: Property addresses, parcel data, and details you provide to analyze offers.
Offer Details: Information about construction encroachment and access agreements, compensation amounts, terms, and related documents.
Identity Verification: Name, date of birth, and partial identification numbers provided during the agreement signing process.
Payment Information: Billing details processed through our payment provider (Stripe). We do not store full credit card numbers on our servers.
Communications: Messages you send through our contact forms, AI-powered Q&A, and consultation requests.
Usage Data: How you interact with our platform, pages visited, features used, and engagement with offer materials.
Mailing Address: Physical addresses used for direct mail correspondence when applicable.

2. How We Use Your Information

We use your information to:

Provide offer analysis, comparable agreement data, and compensation assessments for your property.
Create and maintain your account.
Facilitate the creation, delivery, and digital signing of encroachment and access agreements.
Process payments for subscriptions, assessments, and platform services.
Send transactional emails (offer notifications, signature confirmations, status updates) and SMS messages when enabled.
Send physical mail for outreach campaigns when applicable.
Power AI-driven features including offer Q&A, homeowner guidance, and persona-based recommendations.
Enrich contact information to facilitate communication between parties.
Improve our platform and develop new features.
Ensure security, prevent fraud, and enforce rate limits.

3. Third-Party Service Providers

We do not sell your personal information. We share data with the following categories of service providers to operate our platform:

Hosting & Infrastructure: Vercel (application hosting), Supabase (database and authentication).
Digital Signatures: DocuSign processes agreement documents and collects signature data on our behalf. DocuSign's privacy policy applies to data processed through their service.
Payments: Stripe processes all payment transactions. We do not store full payment card details. Stripe's privacy policy applies to payment data.
Email: Resend delivers transactional emails on our behalf.
SMS: Twilio delivers text messages when SMS features are enabled.
Direct Mail: Lob prints and delivers physical mail when direct mail campaigns are used.
AI Processing: Anthropic processes anonymized queries to power our AI Q&A and assessment features. Your questions may be sent to Anthropic's API but are not used to train their models.
Contact Enrichment: People Data Labs may be used to look up publicly available contact information for outreach purposes.
Maps: Mapbox provides map visualization and parcel boundary data.
Analytics: Vercel Analytics collects anonymous, aggregated usage statistics (no personal data).
Legal Requirements: When required by law, court order, or to protect our rights.

4. Data Security

We use industry-standard security measures to protect your information, including:

Encryption in transit (TLS/HTTPS) and at rest.
Row-level security policies on all database tables.
Rate limiting on sensitive endpoints.
Secure, httpOnly authentication cookies.
Service role key isolation (never exposed to browsers).

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data for the following periods:

Account Data: Retained while your account is active and for 30 days after deletion request.
Agreement Records: Retained for 7 years after agreement execution, as required for legal and compliance purposes.
Payment Records: Retained for 7 years as required by tax and financial regulations.
Engagement & Analytics Data: Aggregated data retained indefinitely; personally identifiable engagement data retained for 2 years.
AI Q&A History: Retained for 1 year, then anonymized.

6. Your Rights

Under applicable privacy laws (including PIPEDA and GDPR where applicable), you have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your account and personal data (subject to legal retention requirements).
Withdraw consent for non-essential data processing.
Opt out of marketing communications and outreach campaigns.
Request a portable copy of your data.
Lodge a complaint with the Office of the Privacy Commissioner of Canada or your local data protection authority.

To exercise any of these rights, contact us at privacy@easemint.ca. We will respond within 30 days.

7. Cookies and Analytics

We use the following cookies and tracking technologies:

Essential Cookies: Authentication session cookies required for the platform to function. These cannot be disabled.
Analytics: Vercel Analytics collects anonymous usage statistics to help us improve the platform. Loaded only with your consent.
Map Services: Mapbox may set cookies when map features are used. Loaded only with your consent.

You can manage your cookie preferences using the consent banner displayed on your first visit, or through your browser settings.

8. International Data Transfers

easemint is operated from Canada. Your data may be processed by our service providers in the United States and other jurisdictions. We ensure appropriate safeguards are in place for any international transfers of personal data.

9. Children's Privacy

easemint is not intended for users under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also notify you by email if you have an account.

11. Contact Us

If you have questions about this privacy policy or our data practices, please contact us at privacy@easemint.ca