Last Updated: May 26, 2026
Real Property Concierge ("RPC", "we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly. We fully comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal privacy law for private-sector organizations.
This page explains how we address each of the 10 PIPEDA fair information principles in the operation of our AI-powered real estate lead generation platform.
The 10 PIPEDA Principles and How RPC Addresses Them
Principle 1: Accountability
RPC's Approach: We are fully accountable for all personal information under our control. We have designated a Privacy Officer who oversees our privacy practices and ensures compliance with PIPEDA. All employees and contractors are trained on privacy obligations and are contractually bound to protect personal information.
Contact our Privacy Officer: hello@rpacoders.cloud
Principle 2: Identifying Purposes
RPC's Approach: We identify and document the purposes for collecting personal information before or at the time of collection. Your data is collected for specific purposes only:
- Operating the AI-powered lead generation platform
- Capturing and managing real estate leads on your behalf
- Facilitating communication between real estate agents and potential clients
- Processing subscription payments and managing accounts
- Improving the Service through usage analysis
These purposes are clearly stated in our Privacy Policy and at the point of data collection.
Principle 3: Consent
RPC's Approach: We obtain meaningful consent before collecting, using, or disclosing personal information. Our consent mechanisms include:
- Account Registration: Express consent via checkbox during sign-up, with clear reference to our Privacy Policy.
- Chat Widget Consent Banner: Our AI chatbot displays a prominent consent banner to website visitors before collecting any information, explaining what data is collected and how it will be used. Visitors must actively acknowledge this banner to proceed with the conversation.
- Voice Agent Consent: Our AI voice agent verbally obtains consent at the start of each call, informing the caller that the conversation may be recorded and information will be used for lead generation purposes.
- Website Forms: Consent is obtained through clear disclosure and the user's voluntary submission of information.
- Withdrawal: Consent can be withdrawn at any time by contacting hello@rpacoders.cloud.
Principle 4: Limiting Collection
RPC's Approach: We limit the collection of personal information to what is necessary for the identified purposes. We only collect:
- Contact information (name, email, phone) — necessary for lead management and account administration
- Property preferences — necessary for matching leads with listings
- Billing information — necessary for subscription processing (processed through Stripe; we do not store full credit card numbers)
- Usage data — necessary for Service improvement and troubleshooting
We do not collect information indiscriminately. If we require information for a new purpose, we will identify that purpose and obtain fresh consent.
Principle 5: Limiting Use, Disclosure, and Retention
RPC's Approach: Personal information is used or disclosed only for the purposes for which it was collected, unless you provide additional consent or as required by law.
- Use: Limited to operating the Service, managing leads, processing billing, and improving our platform.
- Disclosure: We share data only with trusted service providers (Stripe for payments, Cal.com for scheduling, email/SMS delivery services) under contractual agreements that prohibit unauthorized use.
- Retention: Data is retained only as long as necessary — for the duration of your subscription plus 30 days. After cancellation, data is permanently deleted within 30 days. Billing records may be retained longer for tax compliance.
Principle 6: Accuracy
RPC's Approach: We take reasonable steps to ensure that personal information is accurate, complete, and up-to-date. We provide the following mechanisms:
- Account Dashboard: Users can review and update their profile information at any time.
- Client/Lead Records: Users can edit, update, or delete lead records directly from the platform.
- Correction Requests: Users can contact us at hello@rpacoders.cloud to request corrections to any information they cannot modify directly.
We rely on you to provide accurate information and to keep it current. Please notify us promptly of any changes.
Principle 7: Safeguards
RPC's Approach: We protect personal information with security safeguards appropriate to the sensitivity of the information. Our security measures include:
- Encryption: All data transmitted to and from our platform is encrypted using TLS/SSL protocols. Data stored on our servers is encrypted at rest using AES-256 encryption.
- Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal information. Access is granted on a need-to-know basis and logged for audit purposes.
- Canadian Data Centres: All data is stored in Tier III data centres located in Canada, ensuring your information remains under Canadian jurisdiction.
- Regular Audits: We conduct regular security assessments and vulnerability scans to identify and address potential risks.
- Employee Training: All staff receive mandatory privacy and security training, with annual refresher courses.
- Incident Response: We maintain a comprehensive incident response plan to promptly address any data breaches or security incidents, including notification to affected individuals and the Office of the Privacy Commissioner of Canada as required.
Principle 8: Openness
RPC's Approach: We make our privacy policies and practices readily available to you. This information is accessible through:
- This PIPEDA Compliance page
- Our Privacy Policy page
- Our Terms of Service
- Consent banners and notices displayed at points of data collection
- Direct inquiry to our Privacy Officer at hello@rpacoders.cloud
Our policies are written in clear, plain language and are reviewed and updated regularly to reflect current practices.
Principle 9: Individual Access
RPC's Approach: Upon request, we will inform you of the existence, use, and disclosure of your personal information and provide you with access to that information. You have the right to:
- Access Your Data: Request a copy of all personal information we hold about you. Most information is available directly through your account dashboard.
- Export Your Data: Export your data anytime from your account settings in a commonly used, machine-readable format (e.g., CSV).
- Correct Inaccuracies: Request corrections to any inaccurate or incomplete information.
- Delete Your Data: Request deletion of your personal information. We will respond within 30 days.
- Challenge Compliance: Challenge our compliance with PIPEDA principles (see Principle 10).
To exercise any of these rights, contact our Privacy Officer at hello@rpacoders.cloud. We will respond to all access requests within 30 days as required by PIPEDA.
Principle 10: Challenging Compliance
RPC's Approach: You have the right to challenge our compliance with PIPEDA principles by contacting our Privacy Officer. We have established a straightforward complaint process:
- Submit a Challenge: Contact our Privacy Officer at hello@rpacoders.cloud with details of your concern. You may also submit a written challenge to our business address.
- Investigation: Our Privacy Officer will acknowledge receipt within 5 business days and investigate your concern thoroughly. We will review relevant policies, practices, and records.
- Response: We will provide a written response within 30 days, explaining our findings and any actions taken or proposed to address your concern.
- Escalation: If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at 1-800-282-1376 or through their website at priv.gc.ca.
Our Commitment to Ongoing Compliance
PIPEDA compliance is not a one-time achievement but an ongoing commitment. RPC is dedicated to:
- Regular Policy Reviews: We review and update our privacy policies annually and whenever there are material changes to our practices or applicable laws.
- Continuous Improvement: We regularly assess our data handling practices and implement improvements to enhance privacy protection.
- Staff Training: All team members receive mandatory privacy training upon hire and annual refresher training to stay current with PIPEDA requirements.
- Privacy by Design: We incorporate privacy considerations into the design and development of all new features and services from the outset.
- Data Breach Preparedness: We maintain and regularly test our data breach response plan to ensure prompt and effective action in the event of a security incident.
Contact Our Privacy Officer
For any questions, concerns, or challenges regarding our PIPEDA compliance or privacy practices:
Privacy Officer: RPACoders.cloud
Email: hello@rpacoders.cloud
Website: rpacoders.cloud
We are committed to addressing your concerns promptly, transparently, and fairly.