Privacy Policy

Last updated: July 5, 2026

Reckoner ("Reckoner," "we," "us," or "our") operates the Reckoner service at reckoner.app (the "Service"). This Privacy Policy explains what personal information we handle, how we use it, who we share it with, and your choices. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy laws, and Canada's Anti-Spam Legislation (CASL).

The short version: We collect what we need to run the Service for mortgage and real-estate professionals. We do not sell your personal information or your clients' personal information, and we never will. We share data only with the service providers that help us operate, or when you direct us to (for example, to your CRM), or when the law requires it.

1. Two kinds of people this policy covers

The Service is used by professionals to serve their own clients, so we handle information about two groups:

  • Agents (our customers). Mortgage and real-estate professionals and their staff who create accounts and use the Service. For their information, we are the organization responsible (the controller).
  • Leads and clients (people served by Agents). Individuals who use an Agent's calculators, pre-qualification forms, lead journeys, public pages, or verified-client tools. For this information, the Agent is responsible and we act as the Agent's service provider, processing it on the Agent's behalf and under their instructions.

If you are a lead or client and want to access, correct, or delete information collected through an Agent's tools, please contact that Agent directly. We will support the Agent in responding to your request.

2. Information we collect

a) Information Agents give us

  • Account & profile: name, email address, phone, password (stored hashed by our authentication provider), and business details such as brokerage, title, website, licence number and licensing authority (e.g. NMLS/provincial regulator).
  • Branding & content: logo, photo, colours, booking/application/video URLs, social links, rate configurations, calculator defaults, and the tools and pages you create.
  • Billing: subscription plan, status, and trial dates. Payments are processed by Stripe; we do not receive or store your full card number.
  • Support communications: messages you send us.

b) Information collected through an Agent's tools (Lead Data)

When a lead or client interacts with an Agent's tools, we may collect on the Agent's behalf:

  • Contact details: name, email, and phone number they provide;
  • Calculator and application inputs: figures such as income, debts, property value, down payment, and scenario details entered into calculators, pre-qualification forms, or lead journeys;
  • Verified-client records: where an Agent uses verified mode, agent-entered details such as applicant name, email, phone, verified income and debt, property type, and province;
  • Submission metadata: the page/source URL, browser user-agent, a hashed (not raw) IP address, and timestamps.

c) Information we collect automatically

  • Usage & analytics events about how the Service is used (for example, which features are opened), and audit logs of security-relevant actions.
  • Device/technical data such as browser type and general log information.
  • Cookies and similar technologies used for signing in, keeping your session, remembering interface preferences (such as sidebar state), and security. See Section 8.
  • Web-push tokens if you enable browser push notifications.
  • API and embed keys you generate (we store a hashed version and a short non-secret prefix, not the full secret).

We do not intentionally collect more sensitive information (such as government ID numbers, full financial account numbers, or credit reports), and the Service should not be used to collect it.

3. How we use information

We use personal information to:

  • provide, operate, secure, and maintain the Service and your account;
  • generate calculators, rate sheets, pages, PDFs, QR codes, and other outputs you request;
  • capture and deliver leads to you and, where you direct, to your connected integrations;
  • send transactional messages (account, security, billing, lead, and system notifications) by in-app inbox, email, or web push, according to your notification preferences;
  • process payments, manage subscriptions, and handle taxes (e.g. GST/HST) with our payment processor;
  • provide support, respond to inquiries, and enforce our Terms;
  • monitor, troubleshoot, prevent fraud and abuse, and improve reliability and features;
  • comply with legal obligations.

Marketing to Agents. Any commercial electronic messages we send you are subject to CASL; you can withdraw consent (unsubscribe) at any time, and we will still send necessary transactional messages.

We do not use Lead Data for our own marketing and do not send messages to your leads on our own behalf. Messages to your leads are sent at your direction, and you are responsible for having the consent CASL requires.

5. When we share information

We share personal information only in these situations:

Service providers (subprocessors). Vendors that host and run the Service under contract and only on our instructions. These currently include:

  • Supabase — database, authentication, and storage;
  • Vercel — application hosting and delivery;
  • Stripe — payment processing and billing;
  • Resend — transactional email delivery;
  • Browser push services — if you enable push notifications, they are delivered through the push service operated by your browser vendor (for example Google, Mozilla, or Apple).

Integrations you enable. If you connect a tool such as HubSpot, Pipedrive, or Zapier, we send the relevant data to it at your direction. Once data reaches a third-party tool you control, that tool's privacy practices apply. Stored integration access tokens are encrypted at rest.

Realtor / co-branding partners. If you invite a partner or co-brand a page, the information needed to power that shared page or lead flow is shared as configured by you.

Legal and safety. When required by law, regulation, legal process, or governmental request, or to protect the rights, property, safety, or security of Reckoner, our users, or the public, and to enforce our Terms.

Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this Policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not rent or trade your data or your Lead Data to data brokers or advertisers.

6. We do not sell your data

To be explicit: Reckoner does not, and will not, sell your personal information or your clients' and leads' personal information. We do not exchange it for money or other valuable consideration with third parties for their own purposes.

7. Where your information is stored (cross-border transfer)

Our service providers may store and process information in Canada, the United States, or other countries. When personal information is handled outside your province or Canada, it is subject to the laws of the country where it is stored, and may be accessible to courts, law enforcement, and authorities in that country. We use providers that offer appropriate contractual and security protections. If you would like more information about our providers' locations and safeguards, contact us at privacy@reckoner.app.

8. Cookies and tracking

We use cookies and similar technologies that are strictly necessary to sign you in, maintain your session, remember interface preferences, and protect security. We do not use them to build advertising profiles of you. You can control cookies through your browser, but disabling necessary cookies may break parts of the Service. If we add optional analytics or non-essential cookies in the future, we will update this Policy and, where required, ask for consent.

9. How we protect information

We use administrative, technical, and physical safeguards designed to protect personal information, including: row-level security to isolate each account's data, encryption in transit (HTTPS), encryption of stored integration tokens, hashing of passwords and API/embed keys, hashing of visitor IP addresses, access controls, rate limiting, and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for safeguarding your credentials and keys.

10. How long we keep information

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to meet legal, tax, accounting, security, and dispute-resolution needs, after which it is deleted or de-identified. Lead Data is retained according to the Agent's use and instructions; Agents can delete leads and other records in-app. If you close your account, we will delete or de-identify your personal information within a reasonable period, except where we must retain it by law.

11. Your privacy rights

Subject to applicable law, you may:

  • access the personal information we hold about you and ask how it is used;
  • correct information that is inaccurate or incomplete;
  • withdraw consent or unsubscribe from non-essential communications (this may limit some features);
  • delete your account and associated personal information, subject to legal retention requirements;
  • ask questions or complain about our handling of your information.

To exercise these rights as an Agent, contact us at privacy@reckoner.app. As a lead or client, contact the Agent who collected your information; we will assist that Agent. We will respond within the timeframes required by law and may need to verify your identity. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or your provincial privacy regulator.

Residents of other regions. If you are in the United States, the EEA/UK, or elsewhere, you may have additional or different rights under your local law (for example, rights to know, delete, correct, or opt out of "sale"/"sharing"). Because we do not sell or share personal information for advertising, there is no such activity to opt out of. Contact us to exercise any rights available to you.

12. Children's privacy

The Service is a business tool intended for professionals and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a new "Last updated" date and, where appropriate, notify you (for example, by email or in-app). Your continued use of the Service after changes take effect means you accept the updated Policy.

14. Contact us

Questions, requests, or complaints about privacy? Contact our privacy contact / Privacy Officer:

  • Reckoner — Privacy
  • Email: privacy@reckoner.app
  • Website: reckoner.app

We will acknowledge and respond to your request as required by applicable law.