Legal · Privacy Policy

Your privacy
is our commitment

We are transparent about how we handle your data. Read how TinyBloc collects, uses, and protects the personal information you share with us.

Effective Date June 1, 2026
Last Updated June 22, 2026
Jurisdiction Canada · PIPEDA · Québec Law 25
Privacy Contact privacy@tinybloc.ca
01

Introduction

TinyBloc Inc. ("TinyBloc", "we", "our", or "us") is committed to protecting the privacy and security of the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in connection with your use of the TinyBloc platform, website, and related services (collectively, the "Services").

This policy applies to all users of our Services, including developers, municipalities, housing organizations, and individuals accessing the platform. TinyBloc operates in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Québec's Law 25, and other applicable privacy legislation.

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of our Services and contact us with any questions.

02

Information We Collect

We collect information in three primary ways:

Directly From You
  • Account registration details (name, email, organization, role)
  • Project and property data (addresses, parcel IDs, zoning queries)
  • Financial inputs (development budgets, rent targets, funding sources)
  • Communications with our team (support, demo requests, feedback)
  • Documents you upload (permit applications, site plans, agreements)
Collected Automatically
  • Usage data (pages visited, features used, session duration)
  • Device and browser information (IP address, device type, OS)
  • Cookies and similar tracking technologies
  • API access logs and technical diagnostics
From Third Parties
  • Municipal GIS and land registry data (via platform integrations)
  • Government housing authority data (for eligibility analysis)
  • Payment processor data (where applicable)
03

How We Use Your Information

We use the personal information we collect to:

  • Provide, operate, and continuously improve the TinyBloc platform and Services
  • Authenticate users and manage secure account access
  • Process zoning analyses, site assessments, and development modelling requests
  • Facilitate permit application workflows and municipal integrations
  • Match residents to available units via our waitlist tools
  • Communicate about your account, platform updates, and relevant features
  • Comply with legal obligations, including applicable privacy and regulatory requirements
  • Detect, prevent, and address technical issues, fraud, or abuse
  • Conduct research and analytics to improve affordability outcomes across our network

We do not use your personal information for automated decision-making that produces significant legal effects without human review, in accordance with Québec Law 25 and applicable regulations.

04

Information Sharing & Disclosure

TinyBloc does not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

Service Providers

We work with trusted third-party vendors to operate our platform, including cloud hosting, analytics, and customer support tools. These vendors are contractually bound to process data only on our behalf and in accordance with this policy.

Municipal & Housing Authority Integrations

Where your use of the platform involves submitting permit applications or housing eligibility data, relevant information is shared with the applicable government bodies as directed by you.

Legal Requirements

We may disclose information if required to do so by law, court order, or regulatory process, or when necessary to protect the rights, property, or safety of TinyBloc, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in advance.

05

Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including applicable legal and regulatory requirements:

Active Accounts
Account + 7 yr
Post-termination retention
Project Data
Project lifetime
Plus legal reporting periods
Usage Logs
24 months
Analytics and diagnostics
Support Records
3 years
Communications and tickets

You may request deletion of your personal information at any time by contacting privacy@tinybloc.ca, subject to any applicable legal retention obligations.

06

Your Privacy Rights

PIPEDA
Canada

You have the right to access your personal information, request corrections, withdraw consent for certain uses, and file a complaint with the Office of the Privacy Commissioner of Canada.

Loi 25
Québec

Québec residents have additional rights: data portability, de-indexation (right to be forgotten online), and the right to be informed of any automated decisions affecting them.

GDPR
EEA / UK Users

If you access our Services from the European Economic Area or UK, you have rights under GDPR: access, rectification, erasure, restriction, portability, and the right to object to processing.

To exercise any of these rights, please contact us at privacy@tinybloc.ca. We will respond to verified requests within 30 days, as required under applicable law.

07

Cookies & Tracking Technologies

TinyBloc uses cookies and similar technologies to:

  • Maintain your session and authentication state across the platform
  • Remember your language preference (EN/FR) and interface settings
  • Analyse usage patterns to improve platform performance and features
  • Detect and prevent security issues and unauthorized access attempts

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. We do not deploy advertising-based or cross-site tracking cookies.

08

Data Security

We implement industry-standard security practices to protect your personal information:

  • TLS/HTTPS encryption for all data transmitted between you and our platform
  • Encryption at rest for sensitive project, document, and user data
  • Role-based access controls and least-privilege permissions within our platform
  • Regular third-party security audits and penetration testing
  • Incident response procedures in compliance with PIPEDA breach reporting requirements

Despite our efforts, no method of electronic transmission is completely secure. We encourage you to use strong, unique passwords and to report any suspicious activity to security@tinybloc.ca.

09

Children's Privacy

Our Services are designed for professional use — by developers, municipalities, and housing organizations — and are not directed at children under 14 years of age. We do not knowingly collect, use, or disclose personal information from children. If you believe we have inadvertently collected such information, please contact us immediately at privacy@tinybloc.ca and we will take prompt action to delete it.

10

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, platform features, or legal and regulatory requirements. We will notify you of any material changes by email or by posting a prominent notice on our platform at least 30 days before the change takes effect.

The "Last Updated" date at the top of this page reflects when the policy was most recently revised. Your continued use of our Services after notification constitutes your acceptance of the revised policy.

11

Contact Us

For privacy-related questions, requests, or complaints, please reach out to our Privacy Officer:

Privacy Officer

TinyBloc Inc. — Montréal, QC, Canada

privacy@tinybloc.ca
General Inquiries

For non-privacy questions, our team is available at:

hello@tinybloc.ca

For complaints that cannot be resolved with us directly, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.