This Privacy Policy explains how MyGTA Inc. (“MyGTA”, “we”, “us”) collects, uses, discloses and protects personal information in connection with CreativeRealtor.ca (the “Service”). We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.
1. Information we collect
Account information: name, email address, phone number, password (stored only as a salted bcrypt hash), real estate license/registration number, brokerage, and REALTOR.ca profile number if you provide it. Profile sources you supply: URLs of your public social profiles (Facebook, LinkedIn, Instagram, X), used to help generate your website content. Listing-data credentials: CREA DDF® client ID and secret, if you connect them. Content: the text, images and configuration of the websites you build. Billing: payments are handled by Stripe; we store subscription status and a Stripe customer reference, not your card number. Usage and log data: IP address, browser information and activity logs, including records of blocked duplicate-signup attempts, kept for security and abuse prevention. Electronic signatures: if you sign the MLS®/DDF®/VOW Data Authorization Agreement, we record the name you typed, the agreement version, the date and time, and your IP address.
2. How we use information
We use personal information to create and administer your account; build, host and publish your websites; generate website content with AI using the information and public profiles you provide; retrieve and display listing data using the credentials you supply; process payments; provide support; secure the Service and prevent abuse (including duplicate or fraudulent accounts); and comply with legal obligations. We do not sell personal information, and Anthropic/AI providers we use are not permitted to use your data to train their models where such controls are available.
3. AI processing
When you ask the Service to write your biography or similar content, the information you provided (name, brokerage, license number, public social profile URLs) may be sent to third-party AI providers to generate that content. Generated content is shown to you for review before it is published.
4. When we share information
We share personal information only with service providers who process it on our behalf (hosting and infrastructure providers, Stripe for payments, AI providers for content generation, email delivery providers), with CREA/DDF® systems when retrieving listing data using your credentials, when required by law or legal process, or in connection with a business transaction such as a merger or sale (with continued protection of your information). Service providers are bound by contractual confidentiality and security obligations.
5. Cookies and local storage
The Service uses browser local storage to keep you signed in (authentication tokens) and to remember interface preferences. We do not use third-party advertising cookies.
6. Retention
We keep personal information for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and security requirements. When you delete your account, your sites, listing credentials, cached listing data and media are deleted as part of the deletion process; limited records (such as billing records and abuse logs) may be retained where required.
7. Security
We protect personal information with technical and organizational measures, including encrypted transport (HTTPS), hashed passwords, access controls and isolation between customer sites. No system is perfectly secure; if we become aware of a breach creating a real risk of significant harm, we will notify affected individuals and the Privacy Commissioner as required by law.
8. Your rights
You may access, correct or delete your personal information at any time through your account settings, or by contacting us. You may withdraw consent to optional processing (for example, by removing social profile URLs or disconnecting DDF® credentials), subject to legal and contractual restrictions. You may also complain to the Office of the Privacy Commissioner of Canada.
9. Visitors to agent websites
Websites published through the Service belong to the individual agents who operate them. If you submit an inquiry on an agent's website, that information goes to the agent, who is responsible for it as its own data controller. This Policy covers the CreativeRealtor.ca platform itself.
10. Where data is stored
The Service is hosted on servers that may be located in Canada or other jurisdictions used by our infrastructure providers. Where personal information is processed outside Canada, it may be subject to the laws of those jurisdictions.
11. Changes
We may update this Policy from time to time. Material changes will be announced by email or in-product notice before they take effect.
12. Contact
Privacy questions and requests: MyGTA Inc., info@creativerealtor.ca.