Privacy Policy

Foyer is operated by Royal Merit Realty Inc. (“Foyer,” “we,” “us,” “our”), a corporation registered in Ontario, Canada with its principal office at:

101E-60 Granton Dr.
Richmond Hill, ON, L4B 2N6
Canada

For privacy questions or to exercise your rights, contact: privacy@getfoyernow.com

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through the Foyer platform (the “Service”). It applies to all users including realtors, landlords and property managers (“Subscribers”), team members, and renters (“Clients”).

We comply with the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

We collect personal information you provide directly, including:

• Account information: name, email, phone number, password (stored hashed), business name, role
• Rental application information: personal details, employment, income, assets, liabilities, properties (only when required), and similar information you submit through the application form
• Documents you upload: tax returns, NOAs, T4s, bank statements, identification, property documents, and other files required to support a rental application
• Communications: messages, comments, and other content you send through the Service
• Payment information (Subscribers only): billing details processed by our payment processor; we do not store full credit-card numbers ourselves
• Technical information: IP address, browser type, device identifiers, log data, and information about how you use the Service

We use personal information to:

• Provide, operate, and improve the Service
• Allow Clients to submit documents and applications to their assigned Subscriber
• Authenticate users and protect accounts from unauthorized access
• Send service-related notifications (uploads, reminders, alerts) by email, push notification and text message
• Process payments and manage subscriptions
• Comply with legal, regulatory, and tax obligations
• Investigate and prevent fraud, security incidents, or misuse
• Write the letter to the landlord from the answers a Client gives, and answer questions from website visitors, using an AI model run by Anthropic. That text is not used to train models. Foyer makes no automated decision about anyone’s tenancy.

We share personal information only as follows:

• With your realtor, landlord or property manager:Clients’ applications and uploaded documents are visible only to the Subscriber and team members of the Subscriber’s organization who are assigned to the file.
• With service providers: storage and sign in (Supabase on Amazon Web Services, in Canada), the application server (Vercel), email delivery (Resend), payment processing (Stripe), the letter to the landlord and the website assistant (Anthropic), push notifications (Apple, Google), text messages (Twilio), address suggestions (Google Maps), and OneDrive only when a Subscriber connects it. Each processes information on our behalf under contractual privacy obligations, and the security page lists what each one sees.
• With your consent: for example, when you direct us to share your information with a lender, insurer, or appraiser.
• For legal reasons: when required by law, court order, or to protect rights, safety, or property.

We do not sell personal information. We do not use personal information for advertising.

Your personal information, including uploaded documents, is stored on infrastructure operated by Supabase Inc. on Amazon Web Services in Canada (region: Canada Central, Montréal). It is not stored outside Canada.

Some of the providers that act for us process information outside Canada while doing their job: the application server (Vercel), email delivery (Resend), payment processing (Stripe), and the letter to the landlord and website assistant (Anthropic), in the United States. Information handled there may be subject to the laws of that country. By using the Service you consent to this. We use encryption in transit and at rest, and contractual safeguards with every provider, to protect your information wherever it is processed.

We use commercially reasonable technical and organizational safeguards to protect personal information, including:

• Encryption of data in transit (TLS) and at rest
• Row-level security on the database so users only access their own data
• Multi-factor authentication options for Subscribers
• Session timeout after 15 minutes of inactivity
• IP-based new-device login alerts
• Rate limiting on authentication endpoints
• An access log on every file, showing the Subscriber and the Client who opened which document and when, including any access from Foyer’s side
• Foyer has no customer service employees, and Foyer’s own administrator cannot open a Client’s file: the Service refuses it. When a Subscriber wants help with a file, they turn on support access for that file for up to seven days; only then can the administrator open it, every such access is recorded in the file’s access log, and the access ends by itself. The real estate agents of Royal Merit Realty Inc. are not Foyer staff and have no access to any Subscriber’s files. If Foyer adds support staff, they will work through the same switch, their access will be recorded the same way, and the security page will say so in advance

No system is perfectly secure. If we become aware of a breach of security safeguards affecting your information, we will tell the Subscriber within 72 hours of confirming it, and notify you and the appropriate regulator as the law requires.

Under PIPEDA and applicable provincial law, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent (subject to legal and contractual obligations)
• Request deletion of your account and associated data
• See who has opened your file, on your Account page
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, email privacy@getfoyernow.com. We will respond within 30 days.

We retain personal information for as long as your account is active, plus a period required to comply with our legal, accounting, and regulatory obligations (typically up to 7 years for financial records under Canadian tax law).

If you close your account, your active data is deactivated within 30 days; backup copies and records required by law are retained for the applicable retention period.

Documents uploaded to a rental file, and the answers in the application form, are deleted automatically once the file has been closed for the retention period set by the realtor, landlord or property manager who requested them (180 days unless they choose otherwise). They can delete a file’s documents sooner, and you can delete your own account, and everything in it, at any time.

We use cookies and similar technologies to keep you signed in and to operate the Service securely. See our Cookie Notice for details.

The Service is not intended for individuals under 18 years of age. We do not knowingly collect information from children.

We may update this Privacy Policy from time to time. If a change is material, we will notify you by email and ask you to review and accept the updated version when you next sign in. The “Effective” date at the top reflects the latest version.

Privacy questions, complaints, or requests can be sent to:
Royal Merit Realty Inc.
Attn: Privacy Officer
101E-60 Granton Dr., Richmond Hill, ON, L4B 2N6
Email: privacy@getfoyernow.com