Privacy
Ontario tenancy information. Educational drafts, not legal advice.
Draft pending founder and legal review
This is a source-based draft for review. It is not an approved privacy notice. Publisher identity, a contact channel, provider arrangements and retention decisions must be confirmed before publication.
A question or pasted notice
The home question is sent to the NestIQ server for deterministic matching. The app does not send it to an external AI model. Raw question and notice text are not written to the application database. Detected personal details cause refusal. Detection is not a guarantee that every personal detail can be recognised, so remove names, addresses, email addresses and phone numbers before submitting.
The case workspace on your device
Notice text entered in the case workspace is parsed in that browser. Facts and draft documents are processed there. Printing, calendar export and copying a draft are actions you choose. Do not include unnecessary personal details in a shared device or an exported file.
Accounts and saved cases
Email sign-in is handled through Supabase. A saved case stores a scenario identifier and a short label, rather than the original notice. Usage records contain the account identifier, matched scenario, match flag and time. Paid entitlement records contain subscription or purchase identifiers, status and access dates. The application schema uses row-level access controls; their production deployment must be verified separately.
Anonymous usage cookie
A signed, HTTP-only cookie records the anonymous question count and the original expiry of a 30-day window. It is an access counter, not a stored copy of the notice. Removing or replaying a cookie can affect anonymous counting; it is not an identity system.
Aggregate information
The aggregate event schema excludes raw questions, notices, addresses, postal codes and exact money values. It records coarse issue and rule metadata. This does not establish an approved public data product or a reviewed privacy programme.
Before this draft can be published
Confirm the publisher and contact channel, the provider terms and data locations, retention and deletion periods, the account-access process and the privacy review. This page makes no claim of legal or regulatory compliance.