Plain language summary: Habipal stores two kinds of data — property data (the health record of a building) and personal data (information about people). Property data (the health record of a building) belongs to the building owner and can be deleted by them on request. Personal data (information about individuals) can be erased on request. Anonymised, aggregated statistics we derive from platform data are not deleted — they contain no information identifying your property. We store everything in Canada. We do not sell your data.
Habipal Inc. is a corporation operating under the trade name Habipal, based in Alberta, Canada. We operate the Habipal property health tracking platform at habipal.com and related services.
This Privacy Policy applies to all personal information collected by Habipal through our website, web application, and any associated services. It is written in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25 (Law 25).
Our privacy officer is responsible for our compliance with this policy. To reach the privacy officer, contact us at [email protected].
| Purpose | Legal basis (PIPEDA) |
|---|---|
| Providing the Habipal service — storing and displaying property health records | Performance of contract |
| Sending maintenance alerts, request notifications, and system emails | Performance of contract |
| Processing subscription payments via Stripe | Performance of contract |
| Responding to access, correction, and erasure requests | Legal obligation |
| Security monitoring and fraud prevention | Legitimate interest |
| Improving the product using aggregated, anonymised usage data | Legitimate interest |
| Sending waitlist and launch communications | Consent (given at signup) |
We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.
Habipal holds two fundamentally different categories of data. Understanding this distinction matters for understanding your rights.
Property data is a record of a physical asset — the building itself. It includes system health scores, equipment records, maintenance history, inspection imports, audit logs, and contractor work records. Property data belongs to the building owner. The building owner may request deletion of their property record at any time by contacting privacy@habipal.com. Deletion is processed within 30 days.
When property data is deleted, any anonymised or aggregated statistics Habipal has derived from that data (such as anonymised equipment lifespan statistics used for internal research) are not deleted — they contain no information that identifies your property, your equipment, or you.
Personal data is information about identifiable individuals. It includes resident names, email addresses, phone numbers, unit assignments, maintenance request content, and account credentials. Personal data is subject to full PIPEDA rights including access, correction, and erasure.
| Property data (owner-deletable) | Personal data (erasable) |
|---|---|
| System health scores | Resident name and email |
| Equipment records (model, serial, age) | Resident phone number |
| Maintenance history (dates, actions) | Maintenance request content |
| Inspection import records | Unit assignment |
| Contractor work records | Account login credentials |
| Alert history | PM name, email, company |
We do not sell your personal data to any third party. We share data only in the following circumstances.
We use the following third-party services to operate Habipal. Each is bound by contractual data processing obligations.
| Provider | Purpose | Data location |
|---|---|---|
| Supabase (PostgreSQL) | Database, authentication, file storage | Canada (Toronto) |
| Vercel | Web application hosting and CDN | Canada / Global CDN edge |
| Anthropic API (Claude) | AI-assisted equipment label reading and product lookup | United States — see note below |
| Stripe | Subscription billing and payment processing | United States |
| Resend | Transactional email delivery | United States |
| Railway | PDF report generation service | United States |
| Sentry | Error monitoring | United States |
Note on cross-border transfers (PIPEDA s.10.3): When you scan equipment labels, Habipal sends the label image to the Anthropic API for processing. This data is transmitted to servers in the United States. Anthropic processes this data solely to return product identification results and does not retain it for training purposes. By using the equipment scanning feature, you consent to this transfer. Habipal has entered into data processing agreements with all US-based providers to ensure contractual safeguards required under PIPEDA.
Property managers can see property data and resident maintenance requests for properties assigned to them. Building owners can see all data for properties they own. Residents can see only their own requests and building-level health information. Contractors can see only the system assigned to their specific job code.
We may disclose personal information if required to do so by law, court order, or a request from a government authority with appropriate jurisdiction, or where we believe disclosure is necessary to prevent harm.
All primary property and personal data is stored in Supabase's Toronto region (AWS ca-central-1), located in Canada. This satisfies PIPEDA's requirement for Canadian data residency for personal information in the primary database.
Certain processing operations involve transfers to the United States as described in Section 5. These transfers are governed by contractual safeguards in accordance with PIPEDA section 10.3.
Uploaded files (equipment label photos, inspection reports, generated PDF reports) are stored in Supabase Storage, also in the Toronto region.
Under PIPEDA and Quebec Law 25, you have the following rights regarding your personal data.
| Right | How to exercise it | Response time |
|---|---|---|
| Access — receive a copy of your personal data | Settings → Privacy → Download my data | 30 days |
| Correction — correct inaccurate personal data | Settings → Profile | Immediate |
| Erasure (personal data) — request deletion of your personal data | Settings → Privacy → Request data erasure | 30 days |
| Erasure (property data) — request deletion of your property record (building owners only) | Contact privacy@habipal.com | 30 days |
| Portability — export your data in a machine-readable format | Settings → Data & ownership → Export | Immediate |
| Withdraw consent — for processing based on consent | Contact [email protected] | 30 days |
| Complaint — lodge a complaint with the Privacy Commissioner | priv.gc.ca or [email protected] | — |
Quebec residents have additional rights under Law 25, including the right to request that personal information cease to be communicated to third parties and the right to data portability in a structured, commonly used technological format. These rights are honoured through the same channels listed above.
When a resident submits an erasure request, Habipal pseudonymises their personal data rather than deleting property records outright. This is because property records — including maintenance history — are required for warranty documentation, insurance purposes, and building audit trails that may be relied upon by building owners and future residents.
| Data field | Before erasure | After pseudonymisation |
|---|---|---|
| Name and email | Sarah Chen · [email protected] | Deleted |
| Phone number | Stored | Deleted |
| Account credentials | Active login | Account deleted — login disabled |
| Request attribution | Sarah Chen · Apt 4B | Former Resident · Apt 4B |
| Request content | "Kitchen faucet dripping — needs repair" | [Content removed on resident request] |
| Request date | Mar 8, 2026 | Mar 8, 2026 (retained) |
| Resolution note | Fixed by Dolan Mechanical Mar 13 | Fixed Mar 13 (retained) |
The outcome is that the property record shows maintenance occurred on a date, completed by a contractor, without identifying the resident who submitted the request. Your identity and the specific description you wrote are gone.
Under PIPEDA s.9(3), Habipal may retain pseudonymised records where deletion would frustrate performance of an ongoing contract (for example, an unresolved maintenance request) or where retention is required for legal proceedings. In such cases you will be notified of the exception and the expected retention period.
Your property data belongs to you. Habipal guarantees three export formats at all times from Settings → Data & ownership → Export, regardless of your subscription status.
The full data portability guarantee, including commitments covering shutdown and acquisition scenarios, is published at habipal.com/portability. That guarantee forms part of our Terms of Service and cannot be revoked without 90 days notice to all active account holders.
| Data category | Retention period |
|---|---|
| Property data (scores, equipment, history, audit log) | Retained until owner requests deletion. Deletion processed within 30 days of request. Anonymised aggregate statistics derived from the data are retained. |
| Personal data (active account) | Retained while account is active plus 90 days after closure |
| Personal data (after erasure request) | Pseudonymised within 30 days of request |
| Billing records | 7 years (required by Canadian tax law) |
| Waitlist data | Until launch or until you unsubscribe, whichever comes first |
| Error and security logs | 90 days rolling |
On subscription lapse, your account enters read-only mode for 90 days. After 90 days the account is archived. Export and data transfer remain available during the lapse period. Archiving does not delete your property data — a separate deletion request is required if you wish to delete it.
When Habipal uses property data to generate internal anonymised statistics (for example, anonymised equipment failure rates by category and region), those statistics do not identify any individual property or owner and are retained independently of the underlying property record. Deletion of your property record does not affect these anonymised statistics.
Habipal implements the following security measures to protect your data.
In the event of a breach that creates a real risk of significant harm, Habipal will notify the Office of the Privacy Commissioner of Canada within 72 hours of becoming aware of the breach, and will notify affected individuals as soon as reasonably practicable. Breach notifications will be sent to the email address on your account.
For any questions about this privacy policy, to exercise your rights, or to make a complaint about how Habipal has handled your personal information, contact our privacy officer.
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca, or with the Commission d'accès