All uploaded documents, PDFs, and media are encrypted both at rest and in transit via TLS 1.3.
Your private eviction notices, leases, and dispute facts are strictly isolated and never fed into public LLMs.
Permanent one-click deletion of case files, memory stores, and evidentiary vaults at any time.
1.Information We Collect & Process
TenantAI collects only the minimal data necessary to assist tenants with dispute analysis, statutory notice audits, rent abatement calculations, and tribunal document generation under the Ontario Residential Tenancies Act, 2006.
- Evidentiary Exhibits: Photos of repair defects, inspection reports, PDF lease agreements, landlord notices (e.g. Forms N4, N5, N12, N13), direct messaging logs, and doorstep audio encounters uploaded directly by you.
- Dispute Metadata: Rental addresses, landlord names, tenancy start dates, agreed lawful rent, and Landlord and Tenant Board (LTB) file numbers entered into consultation forms or the Notice Auditor.
- Conversational Memory: Agentic consultation transcripts and inner monologue steps retained to provide long-term continuity across your hearings.
- Account & Auth Credentials: If authenticated via Google OAuth, we receive your email address and basic profile token solely to maintain isolated tenant tenancy partitions. We never access unconsented emails or personal contacts.
- Payment Information: Processed through Stripe. TenantAI never stores raw credit card numbers or CVV codes on our servers.
2.How Your Evidence Is Secured (Zero-Cloud Leak Protocol)
Under Ontario Landlord and Tenant Board Rule 5 and Rule 3, legal disclosure requires native attachments and strictly restricts public cloud storage links (such as unauthenticated Google Drive or Dropbox links) that can expose sensitive tenant files.
TenantAI enforces a Zero-Cloud Leak Protocol:
- AES-256 At-Rest Encryption: All evidentiary assets stored in isolated Supabase Postgres volumes are encrypted using military-grade AES-256 cipher blocks.
- TLS 1.3 In-Transit: Every WebSocket and HTTPS transmission between your browser, our reasoning models, and cloud storage uses mandatory TLS 1.3.
- Sequential Direct Packet Slicing: When transmitting evidence bundles via SMTP or Lob postal networks, files are sliced into native attachments (under 20MB) to ensure direct, uncompressed delivery with zero public hyperlink exposure.
3.Google API Services User Data Policy & Limited Use Disclosure
TenantAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. User emails and legal documents are encrypted, strictly isolated per tenant, and never used to train public foundation models.
TenantAI utilizes Google Gemini 2026 enterprise models (including gemini-3.1-pro-preview and gemini-3.8-flash) with strict Zero-Data Retention (ZDR) and customer data isolation agreements.
Our Enterprise Guarantee: Your dispute facts, uploaded landlord text messages, and audio transcripts are never used by Google, Anthropic, or TenantAI to train, fine-tune, or improve foundation AI models. Inputs are processed ephemerally in authenticated tenant sessions.
4.Canadian Statutory Compliance (PIPEDA & FIPPA)
TenantAI complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario provincial privacy principles. Under PIPEDA, tenants possess the statutory right to:
- Request a complete machine-readable export of all uploaded exhibits and chat transcripts.
- Rectify inaccurate records in their tenant profile or memory store.
- Revoke integration tokens for connected Google Drive, Gmail, or Slack accounts at any time.
- Demand immediate, unrecoverable purging of their entire account, evidentiary exhibits, and cryptographic hashes.
5.Audio Recording & Encounter Teleprompter Privacy
When utilizing the Pocket Wiretap or audio transcription tools:
- Recordings are initiated exclusively upon direct user action. TenantAI never activates microphones in the background without explicit permission.
- Audio files are processed strictly under Canadian Criminal Code s. 184(2)(b) one-party consent standards.
- Acoustic data is encrypted and sealed with SHA-256 cryptographic hashes to certify authenticity before tribunal adjudicators.
6.Data Retention & Permanent Account Purging
We retain your evidentiary files for as long as your dispute case is active in your dashboard. You may permanently delete any individual file, exhibit, or your entire account at any time. Upon deletion:
- All associated files in cloud storage are destroyed.
- Database chat history and tenant profiles are hard-deleted.
- Any active sleeping background execution threads are immediately terminated.
Privacy Officer & Inquiries
If you have any questions about this Privacy Policy, wish to exercise your PIPEDA rights, or request an immediate data purge, please contact our Data Protection Officer at: