隐私政策
生效日期:2026 年 10 月 26 日 · 运营方:ColivEase(安大略省)· 隐私负责人:support@colivease.ca
我们依照加拿大《个人信息保护和电子文件法》(PIPEDA)收集、使用和保护你的个人信息。
1. 我们收集什么
- 账号信息:邮箱,以及你通过 Google、Apple 或 Facebook 登录时这些服务提供的基本资料(姓名、邮箱)。
- 资料:昵称、年龄、性别、身份(学生、上班族等)、学校或工作、简介、预算、想住的区域、入住时间、生活习惯、社群语言、头像和照片。
- 房源:房源信息、照片、大概位置和精确地址(精确地址只向申请被接受的租客显示)。
- 沟通记录:聊天消息、聊天申请、队伍、申请、邀请和举报。
- 验证信息:手机号;证件验证由 Stripe 处理,我们只接收验证结果,不保存你的证件图片。⚖
- 付款信息:由 Stripe、Apple 或 Google 处理,我们只接收购买记录,不接触你的银行卡号。
- 技术信息:设备和浏览器类型、IP 地址、推送通知令牌,以及必要的日志。
2. 我们如何使用
- 提供服务:展示资料和房源、计算匹配度、按社群语言推荐内容、发送聊天消息和通知。
- 安全:审核房源、处理举报、防范诈骗和滥用。
- 付费服务和身份验证。
- AI 功能:你上传的照片会发送给 Google Gemini 生成卡通头像;你提交检查的租约会发送给 Google Gemini 做分析。我们不会把这些内容用于其他目的。⚖
- 改进服务和遵守法律义务。
3. 谁能看到你的信息
- 其他用户:你的公开资料。未登录的访客只能看到名字首字、年龄段、语言和模糊头像。真实照片只有在你设为公开、或者主动分享给某个人时才会显示,你可以随时撤回。
- 平台员工:⚖ 为了处理举报、调查诈骗和保障用户安全,经授权的员工可以查看相关的聊天记录和账号信息。员工的每次查看都会被记录在审计日志中,员工只拥有工作所需的权限。
- 服务提供商:Supabase(数据托管,加拿大中部区域)、Google(登录、Gemini AI)、Apple、Meta(登录)、Stripe 和 RevenueCat(付款、证件验证)、Amazon Web Services(邮件)、Twilio(短信验证)、Expo(手机推送)。他们只能按我们的指示处理数据。部分服务商可能在加拿大境外处理数据。⚖
- 法律要求:法律要求时,或为保护人身安全时。
我们不出售你的个人信息。
4. 保存期限
- 账号存续期间保存你的资料。删除账号后,资料、照片和房源立即删除,聊天中显示为「已注销用户」。
- 在线签署的合同会保存到租约结束后 1 年,之后自动删除,因为另一方也需要这份证据;即使你删除了账号也是如此。⚖
- 举报和审计日志会保存到处理需要和法律要求的期限为止。
5. 你的权利
你可以查看、更正和删除你的信息,可以撤回同意(撤回后部分功能可能无法使用),也可以就我们的处理方式提出投诉。请联系 support@colivease.ca。你也有权向加拿大隐私专员办公室(OPC)投诉。
6. 安全
数据传输全程加密,数据库仅能由服务器访问,员工权限按最少必要原则分配。如果发生可能造成重大伤害的数据泄露,我们会按法律要求通知你和隐私专员。
7. 未成年人
本服务只面向 18 岁以上的人。我们不会有意收集未成年人的信息。
8. 变更
政策如有重大变更,我们会提前通知你。
Privacy Policy
Effective October 26, 2026 · Operated by ColivEase (Ontario) · Privacy contact: support@colivease.ca
We collect, use and protect your personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. What we collect
- Account: your email, and the basic profile (name, email) Google, Apple or Facebook share when you sign in with them.
- Profile: name, age, gender, whether you study or work, school or job, bio, budget, preferred areas, move-in date, habits, community languages, avatar and photos.
- Listings: details, photos, the approximate location and the exact address (shown only to renters whose application you accept).
- Communication: chat messages, chat requests, teams, applications, invites and reports.
- Verification: your phone number. ID checks are done by Stripe; we receive only the result and don't store images of your ID. ⚖
- Payments: handled by Stripe, Apple or Google. We receive purchase records only, never your card number.
- Technical: device and browser type, IP address, push notification tokens and the logs we need.
2. How we use it
- To run the service: show profiles and listings, compute match scores, suggest content by community language, deliver chats and notifications.
- For safety: review listings, handle reports, and prevent scams and abuse.
- For paid features and identity verification.
- For AI features: photos you upload go to Google Gemini to make a comic avatar, and leases you submit go to Google Gemini for analysis. We don't use this content for anything else. ⚖
- To improve the service and meet legal obligations.
3. Who sees your information
- Other users: your public profile. Visitors who aren't signed in see only your first initial, age range, languages and a blurred avatar. Real photos show only if you make them public or share them with a specific person, and you can take that back at any time.
- Our staff: ⚖ to handle reports, investigate scams and keep people safe, authorized staff can read the chats involved and account details. Every access is recorded in an audit log, and staff have only the permissions their job needs.
- Service providers: Supabase (hosting, Canada Central region), Google (sign-in, Gemini AI), Apple and Meta (sign-in), Stripe and RevenueCat (payments, ID checks), Amazon Web Services (email), Twilio (SMS verification) and Expo (phone push). They may process data only on our instructions. Some may process data outside Canada. ⚖
- When the law requires it, or to protect someone's safety.
We don't sell your personal information.
4. How long we keep it
- We keep your profile while your account exists. When you delete your account, your profile, photos and listings are deleted right away, and chats show "Deleted user".
- Contracts signed online are kept until one year after the lease ends and then deleted automatically, because the other party needs them as evidence. This applies even if you delete your account. ⚖
- Reports and audit logs are kept as long as handling them and the law require.
5. Your rights
You can see, correct and delete your information, withdraw consent (some features may then stop working), and complain about how we handle it. Write to support@colivease.ca. You can also complain to the Office of the Privacy Commissioner of Canada.
6. Security
Data is encrypted in transit, only our server can reach the database, and staff get the least access they need. If a breach could cause significant harm, we will tell you and the Privacy Commissioner as the law requires.
7. Minors
The service is for people 18 and over. We don't knowingly collect information about minors.
8. Changes
We'll give notice before material changes to this policy.