How we collect, use, and protect your personal data.
Respect for privacy is important to dwellup. We have drafted this Privacy Policy in a clear and accessible manner to help you understand who we are, what personal data we collect about you, and why we collect it.
At dwellup, we take the protection of your personal data extremely seriously. Unlike many online platforms, we have made the deliberate choice to:
This user-centered privacy approach is at the heart of our company philosophy and represents a firm commitment to respecting your privacy.
The purpose of this privacy policy (the "Privacy Policy") is to inform users of our Site of the following:
This Privacy Policy applies in addition to the terms and conditions of our Site.
Users agree that by using our Site, they consent to:
You may withdraw your consent at any time. If you withdraw your consent, it will not make the processing we have done before you withdrew your consent unlawful.
You can withdraw your consent by contacting our data protection officer.
We only collect data that helps us achieve the purpose stated in this Privacy Policy. We will not collect additional data without informing you first.
When you visit and use our Site, we may automatically collect and store the following information:
This data is used to improve your search experience and to help us understand how users interact with our site.
We may also collect data when you perform certain functions on our Site, especially when you:
This data may include:
The personal data collected on our Site will be used only for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.
dwellup commits to never transferring your personal data outside of Canada. All our servers are located in Canada and are subject to Canadian data protection laws. We do not use any subcontractors or service providers that would store or process your personal data abroad.
This strict policy of data localization in Canada allows us to:
If our policy regarding data localization were to change in the future, we would inform you beforehand and obtain your explicit consent before any international transfer of your personal data.
To protect our site against bots and fraudulent activities, we use Cloudflare Turnstile, a service that verifies if the user is human without using a traditional CAPTCHA. This service:
This usage constitutes a limited exception to our general policy of non-transfer of data, justified by the necessity to protect our platform and our users. The data processed by Cloudflare Turnstile is also subject to Cloudflare's privacy policy.
We may disclose user data to any member of our organization who reasonably needs access to user data to achieve the purposes stated in this Privacy Policy.
We will not sell or share your data with any third party, except in the following cases:
If you follow hyperlinks from our Site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.
For paid services, we use Stripe as our payment processor. When you make a purchase:
User data will not be kept longer than necessary for the purposes for which it was collected.
Generally, we retain your personal data as long as your account remains active or as necessary to provide you with our services. We will also retain your personal data for the period necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
We will ensure to notify you if your data is kept for a longer period than initially anticipated.
To protect your security, we use the strongest encryption available in browsers and store all our data on servers in secure facilities. All data is only accessible to our employees. Our employees are bound by strict confidentiality agreements, and a breach of this agreement would result in termination of the employee's contract.
All data is anonymized to the extent possible to minimize risks in the event of a data breach.
While we take all reasonable precautions to ensure that our user data is secure and that users are protected, there always remains some risk of harm. The Internet as a whole can be, at times, insecure, and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.
To improve our services and develop a better understanding of the real estate market, dwellup uses aggregated and anonymized data. This section explains our approach:
We transform personal data into anonymous data through a rigorous process that:
Anonymized and aggregated data allow us to:
Even with anonymized data:
If we share aggregated data with selected partners, we:
The insights generated from this anonymized data help us improve the housing search experience for all users, while strictly respecting your privacy.
A cookie is a small file, stored on a user's hard drive by the Website. Its purpose is to collect data relating to the user's browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your Internet browser, but this may decrease the quality of your user experience.
We use the following types of cookies on our Site:
Functional cookies
Functional cookies are used to remember the choices you make on our Site, so that your choices are saved for your next visits.
Analytical cookies
Analytical cookies allow us to improve the design and functionality of our Site by collecting data on how you access our Site, such as data on the content you access, the duration of your visit on our Site, etc.
If you wish to know whether we have collected your personal data, how we have used it, if we have disclosed it and to whom we have disclosed it, if you wish your data to be deleted or modified in any way, or if you wish to exercise any of your other rights regarding your personal data, please contact us.
This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy, we will update the "Effective Date" at the top of this Privacy Policy. We recommend that our users periodically check our Privacy Policy to ensure they are informed of any updates. As needed, we may notify users by email of changes to this Privacy Policy.
If you have any complaints about how we process your personal data, please contact us so that we can, where possible, resolve the issue.
If you feel that we have not adequately addressed your concern, you can contact the competent data protection authorities.
If you have any questions about this Privacy Policy or our data protection practices, please feel free to contact us.
Effective Date: January 6, 2026