Privacy Policy.
Effective date: 2026-10-28. Closr is operated by Closr Technologies Inc., incorporated in Alberta, Canada. Closr Technologies Inc. is the accountable organization under PIPEDA for the personal information described below. This Policy explains what personal information we collect, why, how we share it, and your rights under PIPEDA (federal) and Alberta PIPA.
1. Information we collect
- Waitlist (closr.ca sign-up): first and last name, email, whether you plan to buy, sell or both, and the area you’re looking in if you give one. We also record which closr.ca page you signed up from. We use it to follow up with you about early access and to tell you when Closr opens in your area, and we send one confirmation email when you join. Joining the waitlist does not create an account.
- Account: name, email, phone, password hash, the IP your requests originate from.
- Buyer brief: free-text search criteria, structured filters (bedrooms, area, budget), saved searches, pre-approved amount if you tell us.
- Seller listing: address, photos, square footage, year built, condition, asking price, features, description.
- Identity verification (KYC): full legal name, date of birth, government-issued ID image, and selfie — collected by our identity vendor before you can publish a listing or sign a binding offer. We keep your legal name, the verification result and your declarations (whether you are a politically exposed person, and whether you act for someone else) for 5 years as required by FINTRAC.
- Location: if you allow it, your device’s approximate location, used to pick your area and to favour homes near you. It is saved with your profile until you change your area.
- Voice: if you describe your search out loud, the recording is sent for transcription and the text is kept as your brief.
- Documents you upload: listing documents, closing documents, message attachments, and a Certificate of Title if you ask us to read one.
- Feedback you send from the app, including any screenshot you attach.
- Activity: swipes, watches, offers, messages, in-app notifications, push tokens for delivery.
- Device: model, OS version, app version, locale, reports when something fails.
2. How we use it
We use your information to (a) operate Closr — matching, messaging, offers, showings and closing documents; (b) verify identity under FINTRAC and detect fraud; (c) send you transactional alerts (new match, offer status, document signing); (d) with your consent, send marketing or feature announcements; (e) improve the product through aggregated, de-identified analytics. We do not sell your personal information.
3. Sub-processors we share with
- Supabase Inc. (database + storage; United States, AWS us-east-2) — all personal data.
- OpenAI (AI features) — listing details and descriptions, search briefs, voice recordings for transcription, a Certificate of Title you ask us to read, and the offer terms and history of a deal when you ask a question about it. We do not send your government ID or selfie to OpenAI.
- Stripe Identity (KYC) — government ID image, selfie, name, date of birth. Stripe Identity is the data processor for verification; we receive only a verified / not-verified result and a session ID.
- Resend (transactional email) — recipient email, subject, body, and unsubscribe token.
- Expo Application Services, Apple Push Notification Service and Google Firebase Cloud Messaging (push delivery) — opaque push token and notification body.
- Sentry — error and crash reports: what failed, the screen, device model and app version. No account ID, name or email is attached.
- Google — address suggestions and map locations (the address text you type), and Google sign-in if you choose it.
- Apple — Apple sign-in if you choose it.
- PostHog — product analytics: which screens and pages are used and which steps (such as signing up or requesting a showing) are completed, tied to your account ID or a random device ID. No names, emails or messages are sent, and sessions are not recorded.
- Cloudflare Turnstile (bot check) — when you sign up, sign in, reset your password or start as a guest in the app: your IP address and browser or device signals, used only to tell people from automated traffic.
- GitHub — stores our encrypted database backups.
- Netlify — hosts closr.ca and the web app; OpenStreetMap provides map tiles in the web app.
When you request a service such as an inspection, a lawyer or an appraisal, the professional who takes the request sees your name, email, phone and the property address so they can reach you.
4. Where it lives
Your personal data is stored in the United States, in Supabase's AWS us-east-2 (Ohio) region. Most of the sub-processors above (including OpenAI, Resend, Sentry, PostHog, Cloudflare, Google, Netlify, Expo and Apple) also process data in the United States, where it may be accessible to authorities under US law. Cross-border transfers rely on standard contractual safeguards under PIPEDA Schedule 1, Section 4.1.3.
5. Mortgage broker introductions
When you tap "Get pre-approved," we share your name, email, phone, the listing you tapped on, and what you entered in the form (annual income, down payment, employment status, self-estimated credit and any notes) with the assigned mortgage broker. Closr does not receive any payment from the broker for this introduction. You can opt out of these introductions by not tapping the CTA.
6. Your choices and rights
You can: access your data at any time (Account → Export data); update inaccurate data from your profile; delete your account (Account → Delete account) — we will erase your personal data within thirty days, subject to FINTRAC retention; unsubscribe from marketing email from the email footer or from Account → Notification preferences. Transactional messages (password reset, account deletion confirmation) will continue.
To exercise any right not surfaced in the app, email deal@closr.ca. Under PIPEDA you may also lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Alberta residents, the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).
7. Privacy by design
- Sellers see only aggregate match counts. Buyer identity is never revealed unless both parties opt in to connect, or the buyer asks to see the home, when the seller sees their name.
- Buyers can browse anonymously; their saved searches stay private until they create a profile.
- Offer ledgers shown to sellers use hashed buyer references (the buyer's actual user ID is never exposed).
- Listing photos and videos are stored privately and shown through short-lived links.
8. Cookies and tracking
The Closr mobile app does not use cookies. The closr.ca website uses PostHog's first-party cookie to count visits and see which pages are used; it is not used for advertising. The web app at closr.ca/app keeps your sign-in session and an analytics ID in your browser's storage. We do not run third-party advertising SDKs and do not include cross-app tracking.
9. Sample homes
Homes marked as samples are owned by the Closr team. During the beta, offers, showing requests and messages you send on a sample home reach our team, who may reply.
10. Children
Closr is not directed at children under 18. We do not knowingly collect data from minors. If we learn we have collected personal data from a minor, we will delete it.
11. Changes to this Policy
We may update this Policy. Material changes will be surfaced in the app with at least thirty days notice before they take effect.
12. Contact
Privacy questions or requests: deal@closr.ca.