Lease Case Privacy Policy
- EFFECTIVE DATE
- November 1, 2026
- OPERATOR
- BeyondFoundry Labs Inc.
1. About this Policy
Lease Case is a product of BeyondFoundry Labs Inc. (“BeyondFoundry Labs”, “Lease Case”, “we”, “us”), which operates a technology platform that helps people understand and prepare for landlord–tenant matters, organise case information and, where available, connect with independent licensed legal professionals. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit leasecase.ca, use Lease Case web or mobile applications, create an account, upload evidence, or participate as a legal professional. It applies to landlords, tenants, licensed professionals, website visitors and people whose information appears in materials submitted to Lease Case.
Our privacy practices are intended to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable. This policy is not a substitute for the terms of a separate engagement between a consumer and a lawyer or paralegal.
2. Information We Collect
2.1 Account and identity information
We may collect your name, email address, contact information, account role, login identifiers, account preferences, consent records, support correspondence and information provided through supported sign-in services such as Google, Apple or Facebook. We do not need your social-login password.
2.2 Tenancy and case information
Information you choose to provide may include property or rental-unit addresses, landlord and tenant names and contact details, lease terms, rent amounts, arrears and payment histories, notices, applications, deadlines, communications, documents, photographs, correspondence, evidence files and notes. Some files can contain sensitive financial information or personal information about other people.
2.3 Information obtained from documents and email forwarding
When you upload a document or forward evidence to an approved Lease Case address, we may process the file, email body, sender and recipient details, headers, attachments and extracted document fields to associate evidence with the intended account or case. Automated document-processing tools may identify proposed fields; users must review and correct them. Do not forward third-party information unless you have a lawful basis to do so.
2.4 Professional marketplace information
For applicants and participating legal professionals we may collect licence or registration details, regulator status, practice name, professional contact information, areas of practice, service descriptions, offered fees, verification documents, availability, profile data, responses to service requests and transaction or payout administration records.
2.5 Payments and technical data
We may process transaction amounts, service selections, payment status, receipts, refund records, tax information and relevant payment or payout details. A payment provider may directly collect payment-card details according to its own privacy notice. Our systems may collect IP addresses, device/browser type, session and login events, security logs, page interactions, diagnostics, cookie identifiers and performance data.
3. Why We Use Personal Information
We use information as reasonably necessary to operate the service: create and secure accounts; authenticate users; associate evidence with cases; extract and present draft document details for review; support case organisation and relevant workflows; provide customer support; administer purchases and refunds; verify professionals; operate permitted marketplace matching and notifications; detect misuse, fraud and security threats; maintain business and legal records; improve reliability and usability; and comply with lawful requirements.
We may analyse aggregated or appropriately de-identified usage patterns. We will not claim that sensitive case content is anonymous merely because identifiers were removed. Any use of case materials to train or fine-tune AI models requires a separately documented assessment and, where required, appropriate consent.
4. Consent and Choices
We seek meaningful consent where required, explain the purpose of collection and permit applicable withdrawal of consent, subject to legal, contractual and technical limits. Certain information is necessary to provide core case services; refusing or withdrawing that use may mean we cannot provide a feature. Where supported, you can review and correct your information, choose what case material to share with a professional, manage marketing preferences and request account closure.
Transactional and security emails, account notices and case-related notifications are distinct from promotional messages. Marketing email or SMS will be sent only where we have the required lawful consent or other authority under Canada's Anti-Spam Legislation; promotional messages will include required sender details and an unsubscribe option. Unsubscribing from marketing does not stop necessary transactional messages.
5. Sharing with Legal Professionals and Other Users
We do not make private case records public. Where a professional marketplace feature is available, a consumer may choose to submit a service request or authorise information to be shared with eligible professionals. The amount and timing of any disclosure depend on the particular workflow and permissions shown to the user. Service requests may be notified to more than one eligible professional; only information authorised for that stage may be included. Further case documents should not be disclosed merely because a professional receives an initial notification.
Professionals may independently collect and use information in the course of an engagement. Their legal and professional privacy/confidentiality obligations and separate agreements may apply. Lease Case is not automatically a party to a consumer–professional retainer, and use of the platform does not itself establish solicitor–client privilege.
6. Service Providers and Cross-Border Processing
We may engage vetted hosting, database, identity, email, document-processing, analytics, monitoring and payment vendors to perform services on our behalf, subject to contractual and organisational safeguards. The platform uses cloud infrastructure and document-processing services, including Microsoft Azure. Personal information may be processed outside Ontario or Canada if our hosting or a service provider requires it and may then be accessible under applicable foreign laws.
7. Security
We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of information, including access controls, secure transmission, account protections, service logging and procedures for responding to incidents. No online system is risk-free, and we cannot guarantee absolute security. Users should protect account credentials, avoid uploading unrelated sensitive documents and promptly report suspected account compromise.
8. Retention, Deletion and Backups
We retain personal information only for as long as reasonably required for the identified purposes, applicable laws, dispute resolution, legitimate business needs and security. Case files, uploaded evidence, logs, support records, transaction information, professional-verification materials and backups may have different schedules. Account closure or deletion requests may not immediately remove records subject to legal holds, professional recordkeeping, transaction retention or backup cycles. We will explain applicable exceptions when responding.
9. Cookies and Analytics
Essential cookies or equivalent storage may maintain sessions, account security and service operation. We use Google Analytics, through Google Tag Manager, to understand how visitors use our website and app, such as which pages are visited and which steps are completed. We send page types and step names, not your case details, documents, name or email. Analytics cookies are set when you visit. You can turn analytics off at any time with the “Analytics choice” link at the bottom of every page.
10. Access, Correction and Privacy Requests
You may request access to personal information we hold about you, seek corrections or raise concerns about our handling of information. We may need to verify identity and may withhold or redact information where permitted or required by law, including to protect others' privacy or legal rights. Submit requests to privacy@leasecase.ca. Our privacy officer/contact is the Privacy Officer, BeyondFoundry Labs Inc. You may also raise concerns with the Office of the Privacy Commissioner of Canada or another applicable regulator.
11. Privacy Incidents
We maintain procedures to investigate suspected breaches and, where required by applicable law, notify affected individuals and regulators and preserve required records. We do not promise a specific notification deadline unless verified against applicable law and our incident-response process.
12. Children and Third-Party Information
Lease Case is intended for adults able to enter into binding agreements. Information about minors or other third parties may appear within case evidence; users should submit only information relevant and lawful to provide, and avoid unnecessary sensitive information.
13. Changes to this Policy
We may update this policy to reflect changes in services, technology, providers or legal requirements. We will publish the updated version and provide additional notice or seek consent when required for material changes.
14. Contact
Privacy Officer, BeyondFoundry Labs Inc.
Email: privacy@leasecase.ca