Privacy Policy

1. About this policy

This policy explains how THEKEY4YOU INC. ("we", "us", "evim.ca") collects, uses, discloses, and protects personal information through the evim.ca platform.

It applies to two groups of people:

• Real estate agents and agent teams who use evim.ca to run a professional website ("Agents", "you", "customers").
• Members of the public who visit an agent's website and submit information through a contact form.

evim.ca is operated by THEKEY4YOU INC., a corporation incorporated in Ontario, Canada. Our privacy officer can be reached at privacy@evim.ca or by mail at 16 Indigo St, Richmond Hill, ON L4S 1W2, Canada.

2. Personal information we collect

From Agents:

• Name, email address, and phone number.
• Billing information, processed through Stripe.
• Content you upload: photos, biography, brokerage name, property listings, and client testimonials.
• Login and account information.

From members of the public who use a contact form on an agent's site:

• Name, email address, phone number, and the message submitted.
• The enquiry reason selected from a preset list: buying a home, selling a home, both buying and selling, property valuation, or general question.
• IP address, collected by our spam protection tool. See Section 5.

3. Why we collect it

We use personal information to:

• Provide and operate your website and the evim.ca platform.
• Process payments and send billing receipts.
• Send password reset emails.
• Send notices about photo storage on unpublished accounts.
• Deliver contact form submissions to the agent who owns the site.
• Respond to support requests.
• Detect and prevent fraud and misuse of the platform.
• Meet our legal obligations.

4. Contact form submissions from members of the public

When someone submits a contact form on an agent's website, we store that submission and email it to the agent. We collect this information on the agent's behalf, and the agent is responsible for what they do with it afterward, including obtaining any consent needed to collect it in the first place.

We remain responsible for safeguarding this information while it is in our systems, even though the person who submitted it has no direct relationship with us. If you submitted a contact form and want to know how the agent uses your information, contact that agent directly. If your question is about how we, as the platform, handled it, contact us using the details in Section 13.

If you want us to delete a submission you made through a contact form, email our privacy officer at privacy@evim.ca. We will act on your request within 30 days.

5. Who we share personal information with

We use service providers to run the platform. They process personal information on our behalf, under our instructions, and are not permitted to use it for their own purposes:

• Stripe – payment processing
• Resend – sending emails
• Supabase – database, authentication, and file storage
• Vercel – hosting
• Cloudflare Turnstile – spam protection on our contact forms; processes the visitor's IP address to check that a submission is not automated

Some of these providers process or store information outside Canada, including in the United States. When information is processed outside Canada, it may be accessible to courts, law enforcement, and national security authorities in that country under their laws. Transferring information to a service provider for processing does not change who is responsible for it: we remain accountable for personal information we transfer this way.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

6. How long we keep information

We keep account and content information for as long as an agent's account exists. If an account lapses or is cancelled, the agent's website goes offline, but we do not automatically delete the underlying data. We retain it in case the account is reactivated, or as required by law. You can ask us to delete information that we are no longer required to keep; contact us using the details in Section 13.

Contact form submissions from members of the public are kept while the agent's account is active, and for twelve months after the account ends, then deleted. An agent can delete an individual submission at any time from their dashboard.

7. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including access controls and encrypted connections. No system is completely secure, and we cannot guarantee that information will never be accessed without authorization.

8. If a breach happens

If we experience a breach of security safeguards involving personal information under our control, and the breach creates a real risk of significant harm to an individual, we will notify the affected individuals and report the breach to the Office of the Privacy Commissioner of Canada, as required by law. We keep an internal record of every breach, whether or not it meets that threshold, for at least 24 months.

9. Your rights

Under Canadian privacy law, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate information.
• Complain to the Office of the Privacy Commissioner of Canada if you believe we have not handled your personal information properly.

To make a request, contact privacy@evim.ca.

10. Quebec residents

If you are located in Quebec, Quebec's Law 25 also applies to how we handle your personal information. This applies regardless of how many people in Quebec use the platform. You have the rights described in Section 9, and you may also complain to the Commission d'accès à l'information du Québec.

11. Cookies and tracking

We do not currently use cookies or tracking technology for analytics or advertising. If this changes, we will update this policy before we start.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "last updated" date.

13. Contact us

Questions about this policy or about your personal information:

privacy@evim.ca 16 Indigo St, Richmond Hill, ON L4S 1W2, Canada