Privacy policy

What we collect from you

When you use the comparator we collect:

• The bylaw PDF you upload, and the text we extract from it. This may contain references to your condominium corporation, board, owners, or units.
• Technical metadata about your upload: file size and timestamps. We use your IP address and browser user-agent transiently to enforce rate limits and to record your cross-border consent (see below), but we do not store them — or your file name — alongside the bylaw in our library.
• Your cross-border consent record: a hash of the consent text and the time you acknowledged it. Stored in your browser's session storage (cleared when you close the tab) AND, on each analysis call, recorded server-side with a truncated IP (last octet zeroed), browser user-agent, consent version, and hash. The server-side record is kept for 90 days so we can answer any access or complaint request about whether and when you granted consent.

The comparison library does not attach your billing name or email to the retained bylaw. Paid checkout collects billing details, and we keep the payment confirmation and delivery email for fulfilment and recovery. The report email field can use the checkout address if left blank. Consent logs and contact messages are separate records described below.

Service providers outside Canada

This is the written information about our service providers outside Canada that we are required to make available under Alberta's Personal Information Protection Act (PIPA) s.13.1(3)(a).

Anthropic, PBC

• Jurisdiction: United States (data processed primarily in US regions).
• What we send: the extracted text of your bylaw document and the structured clauses we identify in it.
• Purpose: running our clause-extraction and analysis model on your bylaws.
• Retention by Anthropic: Anthropic does not use API inputs to train its models by default, and retains inputs only for the limited trust-and-safety window described in its commercial terms of service.
• Contract: we are bound by Anthropic's commercial terms of service, which include a data processing addendum applicable to non-US customers.

Vercel Inc.

• Jurisdiction: United States (hosting infrastructure).
• What we send: any HTTP request you make to this site, including your IP address, browser user-agent, and any data you submit through forms.
• Purpose: running the application and serving it to your browser.
• Retention: Vercel retains application logs for up to 30 days.

Sentry (Functional Software, Inc.)

• Jurisdiction: United States (error monitoring and product measurement).
• What we send: error reports from the application, and the aggregate counters described under Product measurement: the event category and, if you read one of our articles in the previous seven days, that article's name. Cookies and request headers are excluded from error reports, and we do not send your email, document text, filename, payment session or report link.
• Purpose: finding and fixing faults, and learning which of our articles lead readers to try the product.
• Retention: Sentry keeps error reports and counters for its standard retention window (90 days at the time of writing).

Supabase, Inc.

• Jurisdiction: United States (storage region for this product).
• What we send: a copy of the uploaded bylaw document and the clauses extracted from it. We do not store your IP address, browser identity, name, or email alongside it — nothing that identifies you as the person who uploaded it.
• Purpose: building and improving our comparison library of Alberta condominium bylaws, plus quality assurance and engine calibration. A registered bylaw is a public document about a corporation, filed at Land Titles.
• Retention: we retain the bylaw document and its extracted clauses as part of this library. Because it is stored without information identifying you as the uploader, we do not treat it as your personal information. A bylaw may itself name individuals such as board members; we do not index or search the library by any person's name. You can ask us to remove a specific document at any time (see below).

Resend (resend.com)

• Jurisdiction: United States (email delivery).
• What we send (report delivery): only if you choose to enter your email to receive your report — your email address and the report summary we email to you. For a paid report, a blank delivery field uses your checkout email. For an unpaid analysis, leaving it blank skips report delivery.
• What we send (contact form): if you use the contact form on the home page, the name, email address, role, and message you type are relayed through Resend to deliver your message to our inbox. Do not include details in a contact message that you would not put in an ordinary email to us.
• Purpose: delivering the report summary you requested to your inbox.
• Retention: Resend retains delivery logs (including recipient address) for a limited operational window per its own policies. We do not add you to any mailing list from this — that only happens if you separately tick the marketing opt-in.

Stripe, Inc.

• Jurisdiction: United States (payment processing).
• What we send: nothing. Stripe's hosted checkout page collects your billing name, email address, and card details directly from you — they never pass through our servers. We receive back only your billing email, the amount charged, and confirmation that payment succeeded.
• What we do not receive: your card number, expiry date, or CVC. Condo Bylaw Check never sees them; Stripe's hosted checkout page is PCI-compliant by design.
• Purpose: processing payment for a report.
• Retention: we keep the billing email and payment confirmation tied to your session so a completed payment unlocks exactly one report. Stripe retains its own transaction records under its own retention policy, including for chargeback and fraud-prevention purposes.
• Contract: we are bound by Stripe's services agreement, which includes data-processing terms applicable to non-US customers. Using the payment page also means accepting Stripe's own terms for that transaction.

If you ask us to email your report, we also save a copy of that report so the link in the email can open it. The link contains a long random token (it is not listed, indexed, or guessable), and the saved copy is automatically deleted after 30 days.

We do not sell, rent, or otherwise share your bylaw text with any other party.

Our marketing list (only if you ask to join)

There are two ways to join, and both are optional: tick the box under the email field on the analyzer page, or tick the optional box on the contact form at the bottom of the home page. We record which one you used.

• Jurisdiction: Canada. The list is stored in our own database, hosted in the Canadian region (ca-central-1). It is not sent to Anthropic, and it is separate from the report delivery described above.
• What we store: your email address, the fact that you asked to join and which form you used, the version of the wording you were shown, when you first opted in, and the summary figures from the analysis you had on screen at the time (your coverage score and the number of red flags and gaps). Also: how many times you have signed up and when you last did, whether you have unsubscribed and when, and a pipeline label our staff set (for example: new, contacted), and any notes we make if we correspond with you. We do not store your name, IP address, or the bylaw document alongside it.
• Purpose: sending you occasional condo bylaw resources, and being able to show that you asked us to.
• Retention: until you unsubscribe. If you unsubscribe we stop sending and mark the record accordingly, but we keep the record of your original consent — anti-spam law puts the burden of proving consent on the sender, so deleting it outright would destroy the only evidence that we had permission. You can ask us to erase it entirely at the address below.
• If you do neither: nothing goes on the list. Entering your email on the analyzer to receive your report does not add you — that is a one-off delivery, and the box beside it is what joins the list.
• If you unsubscribe: we stop sending immediately and keep the record of your original consent. Signing up again through the site does not put you back on the list — because that form does not verify the address belongs to you, we will not act on it to undo someone's opt-out. To rejoin, email info@condobylawcheck.ca and we will confirm with you first.
• Who is sending it: Home Health Solutions Ltd, 10101 Southport Rd SW, Calgary, AB T2W 3N2, info@condobylawcheck.ca. Canada's anti-spam law requires us to identify ourselves this way when we ask for your consent and in every message we send you.

Cross-border consent

Before any of your bylaw text leaves your browser, the analyzer requires you to read and acknowledge a cross-border-transfer notice that names Anthropic and the United States explicitly. This notice provides the cross-border notification required by PIPA s.13.1(3) and forms part of the basis on which you give your consent to our collection and use of your bylaw text under PIPA s.7.

This notice is separate from payment. If the Service charges for a report, you pay through Stripe's own hosted checkout page before any bylaw text is ever involved — see the Stripe entry above for what that transaction sends.

You may withdraw your consent at any time by clicking "withdraw" in the footer of the analyzer page. Withdrawal clears the consent record stored in your browser, prevents any further uploads from that browser session, and stops future analysis. Withdrawal does not recall information already sent to Anthropic, which is outside our control once transmitted. If you would like the copy of the bylaw document that we retain in our library removed, email info@condobylawcheck.ca with the approximate timestamp of your upload and we will delete it manually.

Cookies and tracking

We do not use third-party advertising cookies. We use first-party analytics provided by Vercel to count visits and measure error rates; this telemetry is aggregated and does not identify individual users.

If you read one of our articles, a first-party cookie remembers which article for seven days so we can tell which resources are useful. It holds only the article's name. That name is included in the aggregate counters described under Product measurement above; it does not identify you on its own, and we do not sell it or give it to advertisers.

Your rights under PIPA

You have the right to:

• Know what personal information we hold about you;
• Ask us to correct any inaccurate personal information;
• Withdraw your cross-border consent at any time;
• Complain to the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) if you believe we have mishandled your information.

To make an access or correction request under PIPA s.27, email info@condobylawcheck.ca. We will respond within 45 days as required by PIPA s.28.

Contact for questions about cross-border collection, use, disclosure, or storage

Privacy Officer, Home Health Solutions Ltd
info@condobylawcheck.ca

This person is the "person who is able to answer on behalf of the organization" for purposes of PIPA s.13.1(3)(b).

Changes to this policy

We may update this policy from time to time. The effective date at the top of the page reflects the most recent change. Material changes to the cross-border-transfer arrangements will invalidate any stored consent record, prompting you to acknowledge the new notice the next time you use the analyzer.