Privacy Policy

Last updated: 2026-04-29

Lintel ("we", "us") provides AI-powered permit intelligence to Canadian real estate professionals. This policy explains what personal information we collect, why we collect it, how long we keep it, and the rights you have under Canadian privacy law.

Lintel operates under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you reside in British Columbia, the Personal Information Protection Act (BC PIPA) also applies to your information.

Information we collect

We collect the following categories of personal information when you use Lintel:

• Account information: email address, name, time zone, and password / magic-link credentials.
• Billing information: payment method tokens, billing address, and subscription tier. Card numbers are held by Stripe, not by Lintel.
• Onboarding information: business description, role, ICP focus, target neighborhoods, deal size, and monitoring frequency that you provide during onboarding or in Settings.
• Product activity: permit search queries, saved searches, alert preferences, chatbot conversations, generated lead briefs, and clicks on permits.
• Technical information: IP address, browser type, session timing, and crash reports collected via Sentry for diagnostic purposes.

How we use your information

• Operate the Lintel service: deliver permit data, score and rank permits against your business context, generate AI summaries and lead briefs.
• Send transactional and product communications: weekly digests, lead briefs, billing receipts, account notices.
• Improve product quality: aggregate usage analytics via PostHog to understand feature adoption and identify friction points.
• Detect and prevent abuse: rate-limiting, fraud detection on Stripe charges, security monitoring.

Sub-processors

We rely on the following sub-processors. Each has its own privacy policy that governs the data we share with them:

• Supabase (Amazon Web Services, us-east-2 region): account data, workspace configuration, permit data, chatbot history. Encrypted at rest and in transit.
• Stripe: payment method tokens, billing identity, charge history. Card data is held by Stripe and never touches our servers.
• Anthropic (Claude API): permit context and chat messages are sent to Anthropic for AI processing. Anthropic does not retain submitted content for model training under their commercial API terms.
• PostHog: product analytics events for funnel and engagement tracking. We disable session recording and PII capture by default.
• Mapbox: geocoding fallback for permits with missing coordinates. No personal information about users is sent to Mapbox.
• Resend: transactional email delivery for digests, lead briefs, billing notices, and issue reports.
• Vercel: web application hosting and edge function execution.
• BetterStack: public status page and uptime monitoring.
• Upstash Redis: rate-limit counters and session burst tracking.

Data location

Lintel stores customer data in Supabase's us-east-2 region (Ohio, United States). By using Lintel you consent to your information being processed and stored in the United States. We rely on contractual safeguards with our hosting providers consistent with PIPEDA cross-border transfer obligations.

Retention

• Account and workspace records: retained while your subscription is active and for up to 90 days after deletion to support reactivation and dispute resolution.
• Permit search history and chatbot conversations: retained for the lifetime of your account so you can refer back to past work. You may delete individual conversations from the chat sidebar.
• Billing records: retained for 7 years per Canadian tax record-keeping requirements.
• Diagnostic logs and Sentry crash reports: retained for 30 days, then auto-purged.

Your rights

Under PIPEDA and BC PIPA you have the right to access, correct, and request deletion of your personal information. Lintel offers self-serve controls for these rights:

• Access and export: Settings, Data and Privacy tab, "Export my data" downloads a JSON archive of your account, workspace, saved searches, and chat history.
• Correction: Settings, Profile and ICP, lets you edit onboarding answers and account fields.
• Deletion: Settings, Account, "Delete my account" removes your account, workspace, and all tenant-scoped data within 30 days. Billing records persist as required by tax law (see Retention).

For questions about your information or to file a complaint, email info@protexaservices.com. We respond to privacy inquiries within 1 business day.

Cookies and tracking

We use first-party cookies for authentication (Supabase session) and CSRF protection. We use PostHog analytics cookies to understand product usage. We do not use advertising cookies or sell personal information to third parties.

Children

Lintel is a B2B product for licensed real estate professionals. We do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy as the product evolves. Material changes will be notified by email and via an in-app banner at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Lintel is operated by Protexa Services. Privacy questions can be sent to info@protexaservices.com.

This document was drafted with AI assistance. It has not been reviewed by a lawyer. We recommend consulting legal counsel before relying on this policy.