Privacy Policy

Last Updated: October 23, 2026

SoleToSold ("we," "our," or "the App") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information from real estate professionals ("you," "your," or "Agent") who use our door-knocking and prospecting application.

This Privacy Policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal privacy law, as well as Canada's Anti-Spam Legislation (CASL), and all applicable Ontario provincial privacy regulations.

Your Data Ownership

You own your data. All contact information, door knocking records, notes, GPS locations, and any other data you create or collect through SoleToSold remains your property. We act solely as a data processor to store and manage your information on your behalf. You have full control over your data and can export, modify, or delete it at any time.

No Third-Party Access

We do not sell, rent, share, or provide access to your data to any third parties. Your prospecting records, contact information, and business data are confidential and will never be disclosed to other real estate agents, brokerages, marketing companies, or any external entities without your explicit written consent.

The only exception is when required by law (such as a valid court order or subpoena), in which case we will notify you unless legally prohibited from doing so.

Your Professional Duty to Protect Client Data

As a licensed real estate professional, you have a legal and ethical obligation to protect the personal information of your clients and prospects. All personal data you collect through SoleToSold—including names, addresses, phone numbers, email addresses, and any notes about homeowners or potential clients—is protected under PIPEDA and CASL.

This data must be kept private and confidential. You are responsible for:

Obtaining proper consent before collecting personal information from homeowners during door knocking activities
Using the CASL compliance tracking features in SoleToSold to document consent type and date
Ensuring that personal information is used only for legitimate real estate business purposes
Maintaining the confidentiality of prospect and client information at all times
Not sharing, selling, or disclosing client data to unauthorized third parties
Complying with all applicable privacy laws and your brokerage's privacy policies
Properly securing your device and account credentials to prevent unauthorized access

Important: SoleToSold provides the tools to help you maintain compliance, but you remain legally responsible for how you collect, use, and protect the personal information of the individuals you contact. Failure to comply with PIPEDA and CASL can result in significant fines and professional disciplinary action.

1. Information We Collect

1.1 Account Information

Name, email address, and profile photo (via Google Sign-In)
Authentication credentials managed by Google Firebase
Account preferences and settings

1.2 Door Knocking Records

Property addresses of doors knocked
Date and time stamps of each visit
Homeowner contact information you collect (names, phone numbers, email addresses)
Outcome status (whether someone was home, interest level, meeting status)
Notes and conversation details you record
Custom tags and follow-up reminders

1.3 Location Data

GPS coordinates collected during door knocking activities (only when GPS tracking is enabled)
Location data is associated with specific door knock records
Real-time location tracking is only active when you explicitly enable it and can be turned off at any time

1.4 Technical Information

Device type, browser type, and operating system
IP address (for security and authentication purposes)
App usage analytics (page views, feature usage)

2. How We Use Your Information

We use your personal information solely to provide and improve the SoleToSold service:

To authenticate your account and provide secure access
To store and manage your door knocking records and contacts
To display GPS tracking and mapping features when enabled
To generate reports, analytics, and export files (CSV, Google Contacts)
To send you important service notifications (account security, feature updates)
To provide customer support and respond to your inquiries
To improve app functionality and user experience

3. Email Communications (CASL Compliance)

In compliance with Canada's Anti-Spam Legislation (CASL):

We will only send you commercial electronic messages (CEMs) if you have provided express or implied consent
All emails will include a clear and functioning unsubscribe mechanism
We will honor unsubscribe requests within 10 business days
Transactional emails (password resets, security alerts) are exempt from CASL and will continue to be sent
We will not send messages on behalf of third parties without proper consent

4. Data Storage and Security

4.1 Storage Location

Your data is stored using Google Firebase and Cloud Firestore, which store data in data centers located in Canada or other jurisdictions. We remain committed to PIPEDA compliance and ensure appropriate safeguards are in place.

4.2 Security Measures

Data is encrypted in transit using industry-standard TLS/SSL protocols
Data at rest is encrypted using Firebase's encryption standards
Authentication is managed through Google Sign-In with OAuth 2.0
Access controls ensure only you can view your door knocking records
Regular security updates and monitoring

4.3 Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you delete your account, your data will be permanently deleted within 30 days, except where we are required to retain certain information for legal or regulatory compliance.

5. Third-Party Services We Use

SoleToSold integrates with the following third-party services to provide core functionality. These services have their own privacy policies and data handling practices:

5.1 Google Services

Google Sign-In: for secure authentication.
Google Maps API: for displaying maps, geocoding addresses, and visualizing door-knock locations.
Gmail API (send only): when you connect your Gmail account, SoleToSold sends one-to-one emails that you compose to your own contacts, on your behalf and at your request. We use the gmail.send scope, which cannot read, list, or access any email in your mailbox — it can only send. Sent messages appear in your own Gmail "Sent" folder. We do not read your email, store message contents beyond what is needed to deliver and log the send, use them for advertising, or use them to train AI models.
Google Contacts API (People API): when you choose to sync, SoleToSold adds and updates contacts in your personal Google Contacts using information you entered in the app. The sync is one-way — from SoleToSold into Google — and we do not read or import your existing Google contacts.
Firebase / Firestore: for secure data storage and real-time synchronization.

Google API Services — Limited Use. SoleToSold's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we access your Google data only to provide features you explicitly initiate; we do not use it for advertising; we do not sell it; we do not allow humans to read it except with your explicit consent, for security, or as required by law; and we do not use it to train generalized AI or machine-learning models.

You can disconnect Google access at any time in Settings, or revoke it directly at myaccount.google.com/permissions. Revoking stops all future sending and syncing immediately.

6. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

With Your Consent: When you explicitly authorize us to share data (e.g., exporting to Google Contacts)
Service Providers: With trusted service providers (Google Firebase, Google Maps) who assist in operating the app, under strict confidentiality agreements
Legal Requirements: When required by Canadian law, court order, or government regulation
Safety and Security: To protect the rights, property, or safety of SoleToSold, our users, or the public

7. Your Rights Under PIPEDA

Under PIPEDA, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to know what personal information we hold about you. You can access all your data directly within the app, or request a complete copy by contacting us.

7.2 Right to Correction

You can update, modify, or correct your personal information at any time through the app's interface. If you encounter any issues, contact our support team.

7.3 Right to Withdraw Consent

You can withdraw consent for us to collect or use your information at any time, subject to legal or contractual restrictions. Note that withdrawing consent may limit your ability to use certain features.

7.4 Right to Data Portability

You can export your door knocking records and contact information in CSV format at any time using the Export feature in the app.

7.5 Right to Deletion

You can delete individual records, contacts, or your entire account at any time. Upon account deletion, all your data will be permanently removed within 30 days.

7.6 Right to Challenge Compliance

If you believe we are not complying with PIPEDA or this Privacy Policy, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

8. GPS and Location Tracking

GPS tracking is opt-in only and must be explicitly enabled by you
You can enable or disable location tracking at any time within the app
Location data is only collected when you are actively using the door knocking feature
GPS coordinates are used solely to log the location of door knocks and display them on your personal map
We do not track your location when the app is closed or GPS is disabled
You can review and delete any location-tagged records at any time

9. Cookies and Tracking Technologies

SoleToSold uses minimal cookies and local storage for essential functionality:

Authentication cookies: To keep you logged in securely
Preference storage: To remember your app settings and preferences
Session data: To maintain your active session

We do not use third-party advertising cookies or tracking pixels.

10. Children's Privacy

SoleToSold is intended for use by licensed real estate professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Accountability and Governance

SoleToSold is committed to privacy compliance and accountability:

We have designated a privacy officer responsible for PIPEDA compliance
We regularly review and update our privacy practices
We provide privacy training to our team members
We conduct privacy impact assessments for new features
We maintain records of consent and data processing activities

12. International Data Transfers

Your data may be processed and stored in Canada or other jurisdictions through our use of Google Cloud services. We ensure that appropriate safeguards are in place to protect your information in compliance with PIPEDA's requirements for cross-border data transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by:

Updating the "Last Updated" date at the top of this policy
Sending you an email notification (if the changes are significant)
Displaying an in-app notification when you next log in

Your continued use of SoleToSold after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SoleToSold Privacy Officer

Email: privacy@soletosold.com

Mail: SoleToSold Privacy Office, [Your Business Address], Ontario, Canada

Privacy Commissioner of Canada: If you are not satisfied with our response to your privacy concern, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376.

Your Consent

By creating an account and using SoleToSold, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. You consent to the collection, use, and disclosure of your personal information as described herein.

You may withdraw your consent at any time by deleting your account or contacting our privacy officer, subject to legal or contractual restrictions and reasonable notice.

This Privacy Policy is governed by the laws of Ontario and Canada, including PIPEDA and CASL.