YASNIFY

Legal

Privacy policy

Last updated: May 22, 2026.

Yasnify ("we", "us") is an Edmonton-based property intelligence service. This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

1. Who we are

Yasnify is a trade name operated from Alberta, Canada. We provide property intelligence reports for Edmonton addresses using publicly available municipal data.

Privacy contact. Email dmytro@lotgenix.com or use the feedback form on your settings page.

2. What we collect

Account data

Email address, hashed password (managed by Supabase Auth — we never see the plaintext), display name, and a flag indicating whether you use the product as an individual or for business.

Usage data

Addresses you search, reports you save, clients you create, and comparisons you run. We store these so you can return to them in your dashboard.

Payment data (paid plans only)

Processed by Stripe. We store only the Stripe customer and subscription session identifiers needed to manage your billing. We never receive or store full card numbers.

Technical data

Cloudflare access logs (IP address, user agent, timestamp) for abuse prevention and security monitoring.

What we do NOT collect

No third-party analytics SDKs, no advertising trackers, no social media pixels, no device fingerprinting, no session-replay tools.

3. Cookies & local storage

  • Supabase auth session token (localStorage) — persists until you sign out or clear browser data. Keeps you signed in across sessions.
  • UI preference cookie sidebar_state — expires after about one year. Remembers whether the sidebar is open or closed.
  • No advertising or analytics cookies are set. Because we set no tracking cookies, no consent banner is required under Canadian privacy law.

4. How we use your information

  • Generate property reports and save them to your account.
  • Authenticate you and keep your session secure.
  • Send transactional emails (sign-up confirmation, password reset, billing receipts).
  • Detect, investigate and prevent abuse, fraud and security incidents.
  • Comply with legal obligations (court orders, regulatory requests).

5. Legal basis

We process your personal information based on:

  • Performance of contract — delivering the reports and account features you signed up for.
  • Legitimate interest — keeping the service secure, preventing fraud, and improving product quality.
  • Consent — for any optional communications. You can withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing & sub-processors

We do not sell personal information. We share narrowly with the providers needed to run the service:

  • Supabase — database, authentication, storage. Receives all account and report data. Privacy.
  • Cloudflare — hosting, CDN and SSR runtime. Receives request metadata (IP, user agent). Privacy.
  • Mapbox — address autocomplete and geocoding. Receives the address fragments you type into the search box. Privacy.
  • Google (Gemini API) — AI report commentary. Receives only aggregated property statistics (crime counts, permit counts, zone type, Yasnify Score) for the address you searched — never your name, email, account identifiers, or search history. Google does not use this data to train AI models per our API agreement. Privacy.
  • Stripe — payment processing for paid plans. Receives billing information. Privacy.
  • Google Fonts — serves the Inter font CSS from Google's CDN. Your browser's IP is exposed to Google as part of the HTTP request. Privacy.

7. Where data is stored

Account and report data is stored in our Supabase project. Cloudflare serves traffic from globally distributed edge locations. Mapbox, Google and Stripe are US-headquartered. By using Yasnify you acknowledge that some sub-processors process data outside Canada.

8. Cross-border transfers

We rely on data-processing agreements and standard contractual clauses with US-based sub-processors (Supabase, Google, Stripe, Mapbox) to protect your information consistent with Canadian privacy expectations.

9. Retention

  • Account data: kept until you delete your account.
  • Saved reports, clients and comparisons: kept until you delete them or your account.
  • Dataset cache: rotates automatically (typically days to weeks).
  • Cloudflare access logs: under 30 days.

10. Your rights

Under PIPEDA and PIPA, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Delete your account and associated data.
  • Export a portable copy of your saved reports (JSON).
  • Withdraw consent for optional processing (e.g., marketing emails).
  • Object to processing based on legitimate interest.

To exercise these rights, use the feedback form on your settings page or email dmytro@lotgenix.com. We respond within 30 days.

You can also file a complaint with:

11. Security

We protect your information using industry-standard practices:

  • Encryption in transit — all traffic uses TLS (HTTPS).
  • Database security — Supabase Row-Level Security ensures users can only read their own rows.
  • Server-side keys — service-role API keys are held server-side only and never shipped to browsers.
  • No payment card storage — Stripe handles all payment processing; we never see or store credit card numbers.
  • Password hashing — passwords are stored using industry-standard hashing handled by Supabase Auth (we never see plaintext).

Data breach notification

If we experience a breach involving your personal information that poses a real risk of significant harm, we will notify you and the Privacy Commissioner of Canada as soon as feasible, in line with PIPEDA requirements.

12. Children

Yasnify is a B2B research tool designed for real estate professionals, investors and adult property buyers. The service is not directed at anyone under 18, and we do not knowingly collect personal information from children.

13. Public data about properties

Public data about properties (assessed values, permits, zoning, neighbourhood-level crime counts) is not personal information about you and is governed by the source providers' open-data licences. See our data sources page for the full list.

13.5. Automated decision-making

The Yasnify Score (0–100) is generated algorithmically from public datasets without human review. The score does not make decisions about you personally — it is a research tool to help you assess properties for purchase or investment. You can request information about our scoring methodology by contacting us.

14. Changes to this policy

We will update the date at the top of this page when we change it. For material changes (e.g., new data sharing practices, significant retention changes) we will also notify signed-in users by email at least 30 days before the changes take effect.

15. Contact & complaints

Privacy inquiries

Email dmytro@lotgenix.com or use the feedback form on your settings page. For privacy requests under PIPEDA or PIPA (access, correction, deletion, export), email is our primary contact method. We respond within 30 days.

File a complaint