Privacy Policy
Version v2026-10-06 · Quebec framework — Law 25
In one sentence: your data builds your application, you choose whom to share it with, and you may delete the application and its associated information whenever you want.
Who is responsible
TurboLease (turbolease.ca) operates in Quebec, run by 9575-9171 Québec inc. (Québec enterprise number 1182554858), 842, rue Notre-Dame, Lachine (Québec) H8S 2B7. Our privacy officer handles questions and requests for access, rectification, consent withdrawal, and deletion at [email protected]. Email the privacy officer
What we collect, and why
We collect only what builds YOUR application: identity (name, email, phone), situation (salaried, self-employed, student), income, current and target rents, address history, and the documents you upload (pay stubs, bank statements, notices of assessment, employment letter, self-employment proof, enrollment proof, previous lease, reference letter, guarantor documents). In this English version, “application” means the dossier an applicant prepares and sends, whatever the path, and “rental file” means the Dossier Prêt, the application an applicant buys for themselves without a landlord's link.
Two categories make up the application: (1) application documents — never kept as-is: every page is automatically redacted (account numbers, SIN, date of birth, sensitive data) then flattened into an image, and that redacted image becomes the annex; (2) your declared profile (occupants, pets, smoker). TurboLease does not ask for marital status or immigration or residency status.
A page is kept only if redaction was technically possible on it. An identity document is the exception in both directions: its readable version is never retained, and by default nothing of it is kept at all. You may, separately and without any obligation, allow it to appear as an annex only as an irreversible full-page mosaic — no number, address, date of birth, signature or face survives it. Both agreements are recorded as separate consents, and refusing blocks nothing.
The application belongs to you. We never sell your data, we operate no tenant database, and your information is never used for ad profiling.
Bank connection (optional)
If you choose the bank connection, it runs through Plaid, read-only and encrypted. Your banking credentials never pass through TurboLease and are never stored, and no operation can be performed on your account.
We keep the results separate: your declared amount is never replaced by Plaid. A bank result is created only when the separate income verification is offered, authorized, started, and returns a usable report. Plaid then produces a 120-day view; our code retains only aggregate monthly net income, the number of complete calendar months, the observed period, requested-day count, generation date, and complete or partial technical status. Itemized deposits, transactions, the partial account number, account-holder details, and labels describing the source of money may be present in the provider response, but are neither read, displayed, nor retained. TurboLease does not enable Plaid Transactions and requests no balance, debt, asset, or account-tenure data.
The comparison covers what you have already given us: your name and, when we hold them, your address, phone number and email. We record only which of those agreed — never the bank's own value for them, and never a disagreement, which is neither retained nor displayed. A match is not an identity verification.
Income nature, category, payer, and frequency returned by Plaid Bank Income are never kept or shown to the landlord. The report may state the method supporting an amount — documents or an aggregate bank result — but never those details from the bank response.
The bank connection remains optional: you may support your income using only uploaded documents. The application always states the method supporting the displayed amount — an aggregate bank result, listed documents, or a declaration alone.
When bank-income verification is offered, it is off by default and requires separate authorization before Plaid creates the report. You may refuse and use documents instead. Closing the connection triggers cancellation; for an abandoned attempt, deletion is scheduled one hour after creation, with retry and a fallback sweep on technical failure.
Automated processing (AI)
Uploaded documents are sent temporarily to Claude AI (Anthropic) to extract information; TurboLease then applies its own software consistency rules. A social insurance number spotted in the text is masked before transmission. An uploaded bank statement is read for one aggregate only — the monthly amount of recurring deposits and the number of months observed — never for a balance, a spend, a transaction category or a payer's name; its pages are never transmitted to a landlord. Bank-connection responses are processed separately in code and are not sent to Claude. Displayed states — provided, verified, to complete, unreadable, off-topic, for your attention — are not official authentication. TurboLease does not score or rank applicants and makes no rental decision; any flag can be disputed with us.
Payment and subscriptions
Credit-score proof (a $5 CAD option, requested by the applicant only, after their rental file is paid for): the applicant records their own banking app on its credit-score page. Three still images are extracted on their device; the video is never sent to TurboLease. From those images the analysis extracts the displayed score, scale, provider, on-screen date and holder name, then redacts account numbers and balances before storage. The report shows the score as displayed, its date and its source, with no threshold or assessment. No landlord can request this option.
A rental file (Dossier Prêt), started on one's own, is paid once, $19.99 CAD, through Stripe. We never see your card number: it is entered at Stripe, which returns only the payment status to us. Stripe receives the amount, the currency and a technical identifier for your rental file; it receives none of your documents, your income, or the rental file's contents.
Three subscriptions exist, for landlords. Complet ($29 CAD per month) opens the applications received in full; Gestion ($79 CAD per month) adds active addresses and the bank connection offered to applicants. Both are handled by Stripe as subscriptions. To attach them to the right account we send Stripe the account's email address where it has a real one, plus technical account identifiers; no phone number is sent to it, and no advertising identifier is kept for these subscriptions. They can be cancelled at any time from the Account page, at the end of the paid month or immediately, with the refund of the days not supplied set out in the Terms. An applicant who applies through a landlord's link pays nothing and sends nothing to Stripe.
Compagnon (your first 7 days at $9.99 CAD, then $99 CAD per month), the third, includes what Gestion includes, with the bank connection offered to applicants up to 4 connections per calendar month from the 8th day, and is cancellable at any time: by texting STOP to the line, with immediate effect and a refund of the portion of the current period not supplied, with no indemnity, or from the Account page, at the end of the paid period or immediately, on the same terms. It is handled by Stripe as a subscription. To attach it to the right account we send Stripe the account's email address where it has a real one, plus a technical account identifier. The line's phone number accompanies the subscription at Stripe, because that number is what must be added to and then removed from the line on activation and cancellation. A line that receives no first message from its holder within five days is cancelled and refunded in full.
Stripe keeps its own transaction records under its applicable obligations, including after your application is deleted with us. A deletion request addressed to TurboLease cannot erase a record a payment provider is legally required to keep.
Sharing — you decide
For an application started from a landlord invitation, your submission consent makes the submitted report available to that landlord. Otherwise, it is accessible only through the turbolease.ca/v/… link you choose to send. The recipient sees the structured report and redacted annexes, never raw uploads or transactions. Our processors receive only the data necessary for the services listed below.
Your card in the market
You may choose to show a card in the market (turbolease.ca/feed). You are the one who publishes it, and it repeats nothing from your application: only your first name, the rent you are looking at, the sectors and the type of housing you are looking for, the move-in date, the number of occupants, whether you have an animal if you state it, and the publication date are visible to anyone who opens the page. No income amount, no document, no check and no share link appear on it. The « Dossier payé et organisé » mark appears on your card when your rental file is paid for and the documents it asks for are there, and it clears itself as soon as that stops being true. Cards are presented by publication date.
Your phone number and your e-mail never appear on the page or in its public responses. They are shown one card at a time, only to a landlord signed in to TurboLease, and only the ones you chose — the number, the e-mail, or both. Every showing is recorded against the account that asked for it (the account, the card, the moment); how many showings one account may ask for in 24 hours is capped, and that record serves only that cap and the handling of a report. The landlord writes to you themselves, from their own phone or their own mailbox: TurboLease sends nothing on your behalf and relays no message between you.
Showing a card asks for a consent separate from your application's, with its own text and its own version. You withdraw it by withdrawing the card; the record of the consent is kept, because it is the evidence of what was agreed and when. A card leaves the list as soon as you pause it or withdraw it, when your application expires, and at the latest 90 days after it was published. The “Permanently delete my data” button erases the card at the same time as the application; only the settlement record of a placement (transaction identifier, number of days, dates) is kept, with no name and no link to any card, so that a placement already served is not refunded twice. When the paid « Mise en avant » option is offered and you buy it ($4.99 CAD, 7 days), your card also appears in a separate band announced as such; inside the band as inside the list, the order stays the publication date.
If your rental file is paid for and submitted, you may attach its link to your card. The choice is yours, it starts off, and it asks for a separate consent with its own text and its own version. While it is on, a registered landlord who reveals your contact from your card also receives the turbolease.ca/v/… link to your rental file — and nothing else: no amount, no document and no check travel with the contact, and the link never appears on the market's public page. The showings register notes, for each showing, whether the link was passed and through which surface it was asked for; it is kept for 90 days like the rest of the register. You withdraw the choice at any time from « Ma fiche »: the link stops being passed at the very next showing. What has already been passed cannot be taken back, which is why the register keeps a record of it.
Landlord notifications
The landlord whose invite link you used is notified by email, at their account's verified address, when you submit an application through that link; they may also choose other channels. That notice contains only your first name and the property address — which is already theirs. Never your amounts, never your documents, never your profile details. It is sent at most once per application, and it is deleted at the same time as your application.
On the landlord side: every account receives by default, at the email address verified by the sign-in code, a notice when an application is submitted through one of its links; it is a notice about the use of their own account. Other channels (Compagnon line, web notifications, another email) require an explicit opt-in; we then keep their destination and the proof of consent — date, source and IP address, or the first message sent to the Compagnon line — as CASL requires. Every message identifies TurboLease and carries a working unsubscribe link (on the Compagnon line, the word STOP, which also cancels the Compagnon subscription with immediate effect); unsubscribing permanently stops delivery to that destination, and the proof of withdrawal is retained as CASL requires. Notices are only sent between 9 a.m. and 8 p.m. Eastern.
Landlord agenda: the viewings agenda has had no screen since 2 September 2026; since 3 September 2026 a subscribed landlord can ask Turbo, by text, to record a viewing in their own agenda (address, time, duration and, if given, the first name of the person expected). A viewing — address, time, and the contact name, number or e-mail the landlord collected themselves — belongs to that landlord, is never attached to an application unless they choose to, and is deleted 90 days after the viewing date. For a viewing recorded by text, TurboLease sends the landlord, and only the landlord, one reminder on their own line an hour before, between 9 a.m. and 8 p.m.; the person expected is never contacted by TurboLease. Since 11 September 2026, Turbo can also propose two to four viewing times by text as a poll; the address and the proposed times are kept for at most 90 days, then deleted. On your line, Turbo may apply a TurboLease conversation background, mark your messages as read and add a visual effect to the notice of your first application received; none of these gestures adds any personal information.
Landlord workspace: for each person on their team, we note whether they have already opened an application they received and whether they have filed it aside. These marks describe the reader, not you: they are specific to each person, reversible, absent from your application, never shown to you, and are neither a refusal, a grade, nor a ranking. They are deleted with your application.
Your conversation with Turbo
Turbo is TurboLease's written assistant. Until you sign in, the conversation stays on your device, in the open tab, and disappears with it: the text of your messages is never recorded on our servers — only anonymous usage counters are (see below). Language, theme, and certain interface preferences may remain in browser local storage until you clear them.
Once you are signed in, the conversation is kept in your account so you can pick up where you left off, on another device. We then record only your messages, Turbo's replies, the kind of card attached to a reply and the source of the reply. An account has a separate thread on each side — landlord and renter — and they are never merged.
When Turbo needs help to answer — in the written chat, at no charge, signed in or not — the most recent messages of the conversation, at most twelve, are sent to Anthropic (Claude AI) to produce the reply. Only the reply appears in the thread. Without an account, the conversation stays in your browser: our servers keep only anonymous usage counters — the number of exchanges per day and the volume of text processed, with no content of any kind — tied to a session identifier and a truncated hash of the IP address, or to the account when the person is signed in.
When you are signed in, or when you text Turbo from a number bound to your account, a short factual summary of your own account travels with the question as well: the name of your organisation, how many active addresses it holds, and whether your subscription and your text line are open. Nothing else. Never an applicant, never a document, never an amount, never anything about anyone but you. That summary exists only so that Turbo knows who it is answering without having to look into your space to find out.
Under Anthropic's published commercial API policy as of this version, inputs and outputs are normally deleted from its systems within 30 days. Anthropic provides exceptions where another period has been agreed, where law requires it, or to enforce its usage policy; flagged content may be retained longer. Avoid typing into Turbo an identity number or tax, banking or credit information the answer does not need: your application's documents follow a different path, described above. Anthropic retention policy
If you are signed in as a landlord, Turbo can look things up in your own space to answer your questions, and what it reads there travels with your question to Anthropic: your addresses; for each application received, the applicant's name, the date it was received, whether you have opened it, whether every piece that application requires is present, and the label of a verification discrepancy where one was actually detected on a document; and for each viewing in your agenda, the address, the time, and the received application you attached it to where you did so. That, and nothing else. Turbo neither reads nor transmits your documents or their images, any income amount, any bank finding, any credit data, or any Charter-protected information; the name, number, e-mail and note you recorded for the person expected at a viewing stay in your agenda and are never transmitted. These lookups are read-only: Turbo prepares a link or a message and you are the one who sends it. On your text line, and only when you ask it to, Turbo can record a viewing in your own agenda — nothing is sent to anyone, cancelled or decided on your behalf.
Voice with Turbo is planned; it is not offered today. If a closed pilot is made available, a separate notice and consent checkbox appear before microphone access: the conversation and the displayed context are then recorded, processed by ElevenLabs and may be shared with third-party language-model providers. TurboLease would retain neither audio nor transcript, only an audit event containing the provider conversation ID. The period configured at ElevenLabs would be stated in the pilot notice; its documentation lists a two-year default where no shorter period is configured. ElevenLabs retention
What is never recorded: the working steps shown under a reply, the facts looked up in your space to compose a reply, text still being typed in the field, voice transcripts, and the conversation held before you signed in — that one is carried into your account only if you sign in during the same session, and only at that moment.
A thread with no activity for 180 days is deleted automatically. The “Clear conversation” button erases it immediately, without touching your addresses, the applications you received or your viewings. Deleting your account takes the conversations with it. The thread is separate from your application: deleting an application does not delete the conversation, and the reverse holds too.
Turbo by text (paid option): if you enable the text conversation, your messages travel through Apple or your carrier, then through Photon, the line's provider, before reaching us — and replies travel the same road back. The most recent messages needed for the reply are processed as described above (Anthropic, at most twelve). Our servers keep your number as a keyed fingerprint to recognise your messages and, from your first message on, in the clear as the destination of the notices described above (removed on cancellation); they also keep daily exchange counters, the date the line opened, the date of your first message and, where applicable, the scheduled end date of the subscription. The messages exchanged by text are recorded in the same thread as your conversation on the site: it is one conversation whatever the screen, so Turbo takes account of what has already been said. Only the text you send and the reply sent back to you are recorded there, and the thread's retention rules stated above apply in full — 180 days without activity, the “Clear conversation” button, deletion with your account. If your number is tied to a landlord account, Turbo can look things up in your own space to answer, within the limits stated above, and what it reads there is never recorded in the thread. Replying STOP stops the replies and the notices and cancels the subscription with immediate effect; your number is then removed from the line. On request, Turbo texts you a single-use access link, valid ten minutes, to your dashboard; only a digest of that link is kept until it is used or expires.
Texting the founder
The “Text / iMessage” link opens your device's messaging app to +1 263-378-3888 with a short generic draft that you may edit or erase. TurboLease sends nothing automatically and appends no application, applicant information, chat content, or advertising identifier. Only your number as presented by your messaging service and the message you choose to send are received after you press Send. Text +1 263-378-3888
Use this channel for a general question or comment. Do not send any document, identity number, tax, banking, credit, or applicant information. A message to the founder is never consent to receive marketing, be added to a list, or receive automated messages. We follow up only where needed to answer your request.
The message may remain in your app, the founder's app, and telecommunications providers' systems under their own rules. TurboLease does not copy it into an applicant database or advertising tool; it is deleted from the founder's device when no longer needed to handle the exchange, subject to legal requirements. You may request deletion in the same thread.
Retention and deletion
Your application is valid for 90 days and is deleted no later than 30 days after expiry. Raw uploads are never retained: only redacted pages needed for the application are persisted, and a document whose holder-name check fails is never published to the landlord. An application started and then abandoned, which never reaches submission, is swept as well — the information in it does not live indefinitely because the flow was not finished.
A “Permanently delete my data” button is available on your result page; it immediately erases the application, its information, checks, redacted annexes, the notices concerning it and its share link, and also requests deletion of any active Plaid attempt with automatic retry if the provider is unavailable. A viewing already recorded in a landlord's agenda stays with them, but its link to your application is erased. An operational record containing no personal information confirms only that deletion occurred. Protected backups expire on their technical cycle and are not used to restore an application to service.
Technical information and other retention
Like any web service, TurboLease and its security layer process necessary technical data — IP address, time, requested path, browser type, response status, and anti-abuse signals. They are used to deliver the site, limit attacks, diagnose outages, and respond to incidents. They contain neither your application's contents nor the Turbo conversation, and are retained for the shortest configured period needed for those purposes; the window available at Cloudflare varies by service and plan.
TurboLease also keeps its own step counters: for each day, the total number of passages through certain steps of the site — a page served, a button tapped, a code sent, a payment —, with the campaign name written into the link followed when there is one, with no visitor identifier, no IP address, no cookie and no information about your browser, so that a counter can neither recognize you nor link two of your visits.
If you request priority access to an upcoming feature, we keep the email, language, and requested product until we notify you, you withdraw the request, or the list is no longer useful. That request permits the requested notice, not a general campaign. One-time sign-in codes expire within minutes and are swept the following day. Usage counters and audit events without transcripts are kept only as long as needed for security, usage limits, and account administration, then deleted or anonymized; a rights request covers them while they can still be linked to you.
Our providers
We use processors: Plaid (bank connection — United States), Stripe (rental file payment and subscriptions — we never see your card number — United States), Anthropic (AI document analysis, and Turbo's replies — written conversation, at most twelve recent messages at a time — United States), ElevenLabs (voice — planned, not active today), Fly.io (hosting — Toronto, Canada region), Supabase (database — Canadian region, Montréal), Cloudflare (bot protection and cookieless audience measurement), Resend (email — United States), Twilio (SMS codes and notices, where that channel is enabled — United States), Photon Spectrum (the Companion messaging line, where enabled: the messages of that texting conversation pass through it), and the Photon/OpenStreetMap geocoder (address suggestions — a separate service from the previous one; only text typed into that field is sent). Meta and TikTok are contacted only if you allow campaign measurement.
Google (advertising measurement) is contacted only if its advertising tag is configured and you allow campaign measurement on a choice that names Google; it then receives conversion events and the ad's click identifier, as the “Cookies” section describes.
Landlord notices travel, depending on the means they chose, through their own browser's notification service (Apple, Google or Mozilla depending on the device — the content is end-to-end encrypted and that service cannot read it), an email delivery service, or a text-messaging service. None of these channels receives your documents or your amounts.
Some providers may process data outside Quebec. TurboLease limits what is sent to them to the requested function. Before enabling a new purpose that requires a privacy-impact or transfer assessment, TurboLease must complete and document that assessment; the feature remains disabled until this control is complete.
Your rights
At any time you may access your information, have it corrected, withdraw consent, download your application (PDF), and permanently delete the application and its associated information (with the button on your result page or by emailing [email protected]). We respond within the applicable time and explain any refusal permitted by law. Request access or deletion
We do not ask for an identity-document copy to handle a request: we verify your control using the least intrusive available method — the email address used, the link or token for your application, and the minimum context already known. Do not attach any sensitive document to such a request.
You may also file a complaint with Quebec's Commission d'accès à l'information. Texting the founder never removes your right to use the formal privacy channel or contact the Commission. Commission d'accès à l'information
Messages to the team
A bubble used to let you write to the team from nearly every page about a bug, an idea or a question. It has been removed: we no longer collect new messages that way. For each message sent through the bubble, we collected what you wrote, the message type, the page it was sent from, your language and display theme, your window width, the technical line your browser announced (its name and version), and, if you wanted, an email address. The page was attached automatically. There was no name field and no phone field.
This information is used only to read your message and reply to you. It is never used for advertising, never sold, and never attached to any application. We also kept a salted fingerprint of your IP address — never the address itself — to limit automated sending; it is erased with the message.
No account was needed to write. If you had one with us and were signed in when you sent it, the message was attached to that account, so that we know who we are answering. If you have your account deleted, that link is removed: the message stays, with no account attached, until its own deletion after twelve months.
Messages already received are kept for twelve months after they were sent, then deleted automatically. You may ask for yours to be deleted sooner: write to [email protected] quoting the reference that was shown after sending. Request deletion
Sector alerts
On the market (turbolease.ca/feed), a landlord may ask for an email alert about a sector. We then collect their email address, the sector chosen, the unit type if they give one, their language, and a salted fingerprint of their IP address — never the IP address itself — to limit automated sending. There is no name field, no phone field and no account to create.
Nothing is sent until the address is confirmed by clicking a link received at that address. This information is used only for this alert: it is never used for advertising, never sold, and never attached to any application.
What an alert contains is always anonymous: a number of people, then at most five lines giving a unit size, a sector name, and how long ago the card was published. No first name, no card, no amount and no move-in date appear in it, and nothing in it is ranked or compared.
An alert lasts 180 days. A notice announces its end and lets it be restarted in one click. Every email carries a link that stops the alert immediately, with no sign-in. Thirty days after it stops or ends, the address is deleted.
Security and privacy incidents
TurboLease uses access controls, encryption in transit, request limits, logs without conversation content or application content, and features that default to closed. No system eliminates every risk. We keep an incident register and, if an incident presents a risk of serious injury, notify the Commission d'accès à l'information and affected individuals as Law 25 requires. You can report an incident to [email protected] without attaching the exposed data. Report an incident