Privacy Policy

Last updated: April 2026

1. Data controller

AcheteurFuté is responsible for the processing of your personal data in connection with the use of the AI real estate coaching platform. Email: support@acheteurfute.com

2. Data collected

We collect the following data: Account data: - Email address - First and last name (optional) Financial data (voluntarily provided): - Annual gross income and spouse's income - Monthly debts - Savings (CELIAPP, RRSP/HBP, other) - Target budget and purchase timeline Property data: - Imported and saved properties - Analyses and comparisons - Visit photos Conversation data: - Messages exchanged with the AI coach Technical data: - IP address (server logs) - Browser type - Language preference

3. Use of data

Your data is used to: - Personalize the AI coach's responses to your profile - Perform financial calculations (CMHC, welcome tax, borrowing capacity, etc.) - Save your properties and analyses - Manage your subscription and payments - Generate your personalized report - Improve the Service (aggregated and anonymized statistics only) We never use your personal financial data for marketing or advertising purposes.

4. Sharing with third parties

Your data is shared only with the following service providers, strictly necessary for the operation of the Service: - Supabase (database hosting and authentication) - Anthropic (AI conversation processing via the Claude API — data is NOT used to train models) - Stripe (payment processing — we do not store your card numbers) - Vercel (web application hosting) - Resend (transactional email delivery) We never sell your personal data. We do not share your data with real estate brokers, financial institutions or advertisers.

5. Data retention

Your data is retained as long as your account is active. If you delete your account: - Your personal data is deleted within 30 days - Payment data is retained by Stripe according to their own retention policies - Aggregated and anonymized data may be retained for statistical purposes Conversations with the AI coach are retained so you can review them, but can be deleted at any time from your profile.

6. User rights

In accordance with applicable laws, you have the right to: - Access your personal data - Rectify your data if inaccurate - Delete your data (right to be forgotten) - Export your data in a portable format - Withdraw your consent at any time - File a complaint with the Commission d'accès à l'information du Québec To exercise these rights, contact us at support@acheteurfute.com.

7. Cookies and local storage

AcheteurFuté uses minimal cookies and local storage: - localStorage: language preference (fr/en), session data - Session cookies: Supabase authentication - No advertising tracking cookies - No third-party analytics tools (no Google Analytics, no Facebook Pixel) You can clear cookies and local storage from your browser at any time.

8. Data security

We take the security of your data seriously: - All connections are encrypted via HTTPS/TLS - PostgreSQL database with row-level security (RLS) policies — each user can only access their own data - API keys and secrets stored server-side only, never exposed to the client - Secure authentication via Supabase Auth - Payments processed by Stripe (PCI DSS certified)

9. Quebec Law 25 compliance

AcheteurFuté complies with Law 25 (Act to modernize legislative provisions as regards the protection of personal information) of Quebec: - We have designated a person responsible for the protection of personal information - We obtain your consent before collecting your data - We limit collection to data necessary for the Service - We inform you of any confidentiality incident within the prescribed timeframes - We conduct privacy impact assessments for projects involving personal data

10. GDPR compliance (European users)

If you are located in the European Economic Area (EEA), the following additional rights apply: - Legal basis for processing: consent and contract execution - Data transfers: your data may be transferred to Canada (European Commission adequacy decision) and the United States (certified providers) - Right to data portability - Right to object to processing - Right to lodge a complaint with your local data protection authority

11. Contact

For any questions regarding this policy or to exercise your rights, contact us at: AcheteurFuté — Data Protection Email: support@acheteurfute.com