Legal

Privacy Policy

Last updated: March 24, 2026

This policy explains what personal information x-ave collects, how we use it, and how we protect it. We comply with PIPEDA and applicable Ontario privacy regulations.

Introduction

x-ave Corporation ("we", "us", "our") operates x-ave.ai. This policy explains what personal information we collect, how we use it, and how we protect it. By using x-ave.ai you consent to the practices described in this policy. We comply with PIPEDA (Personal Information Protection and Electronic Documents Act) and applicable Ontario privacy regulations.

Information We Collect

Information you provide directly

Account registration: name, email address, phone number. For real estate professionals: brokerage affiliation and professional credentials. Profile information: service areas, property interests, specializations, and preferences. Property data: addresses and property details submitted for analysis. Service provider contacts: names and contact details you add to the platform. Lead data: contact information for leads you manage through the platform. Communications: messages sent to our support team.

Information collected automatically

Usage data: pages visited, features used, time spent on the platform. Device information: browser type, operating system, IP address. Cookies and similar technologies: session management, analytics, preferences. Log data: access times, error reports, referring URLs.

Information from third-party sources

Publicly available real estate data used to power platform features. We do not purchase personal data from third-party data brokers.

How We Use Your Information

To provide and operate the platform and its features. To generate reports, analysis, and intelligence outputs. To personalize your experience and improve the platform. To communicate with you about your account, updates, and new features. To provide customer support. To detect and prevent fraud, abuse, or security incidents. To comply with legal obligations. To generate anonymized and aggregated analytics to improve the platform.

We do NOT sell your personal information to third parties. We do NOT use your personal data for advertising purposes.

Proprietary Technology and Automated Processing

The platform uses proprietary technology to analyze real estate data and generate outputs. All outputs are informational tools provided for reference purposes only. They do not constitute professional advice of any kind - including real estate advice, property appraisals, financial advice, investment advice, legal advice, or mortgage advice. Outputs should be independently verified before being relied upon for any decision.

Consumer users should consult with licensed real estate professionals, appraisers, lawyers, mortgage brokers, and financial advisors before making real estate decisions based on any platform information.

We do not use your personal data to train models shared with third parties. Users can request human review of any platform output by contacting support.

How We Share Your Information

We may share information with:

- Service providers who help us operate the platform (infrastructure, analytics, communications) under strict data processing agreements. - Legal authorities when required by law, regulation, or legal process. - A successor entity in the event of a merger, acquisition, or sale of assets (users will be notified).

We do NOT sell personal information. We do NOT share personal information with advertisers. Reports and lead data are visible only to the user who created them unless explicitly shared.

Data Storage and Security

Data is stored on Amazon Web Services (AWS) infrastructure in the United States (us-east-1). By using the platform you consent to the transfer of your personal information to the United States, where it may be subject to US laws.

We use industry-standard encryption in transit and at rest. Access to personal data is restricted to authorized personnel on a need-to-know basis. We conduct regular security reviews. No system is 100% secure and we cannot guarantee absolute security. We may migrate data storage to Canadian servers in the future and will update this policy accordingly.

Data Retention

Account data is retained for as long as your account is active. After account termination, data is retained for 30 days then deleted. Anonymized and aggregated data may be retained indefinitely. Backup copies may persist for up to 90 days after deletion. Users can request earlier deletion by contacting support.

Your Rights Under PIPEDA

You have the right to:

- Access the personal information we hold about you. - Request correction of inaccurate information. - Withdraw consent to the collection or use of your information (which may limit your ability to use the platform). - Request deletion of your personal information. - Request an export of your data in a commonly used format. - File a complaint with the Office of the Privacy Commissioner of Canada.

To exercise these rights, contact us at [email protected]. We will respond to requests within 30 days.

Cookies

We use essential cookies for session management and authentication. We use analytics cookies to understand how the platform is used. You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the platform.

Third-Party Links

The platform may contain links to third-party websites. We are not responsible for the privacy practices of third-party sites. We encourage users to review the privacy policies of any third-party sites they visit.

Children's Privacy

The platform is not intended for use by individuals under 18. We do not knowingly collect personal information from minors.

Changes to This Policy

We may update this policy from time to time. Users will be notified of material changes via email or in-platform notification. Continued use after changes constitutes acceptance. The "Last updated" date at the top reflects the most recent revision.

Contact Us

Privacy inquiries: [email protected] x-ave Corporation, Toronto, Ontario, Canada

For complaints: Office of the Privacy Commissioner of Canada - www.priv.gc.ca