This Data Processing Addendum ("DPA") forms part of the Terms of Service between Propvara and customers who enter personal information about others (tenants, owners, guarantors, family members, contractors, guests) into the Service.
Roles
For Customer Data, the customer is responsible for the personal information under Canadian privacy law and Propvara processes it as a service provider, only to provide the Service and on the customer's documented instructions, which include using the Service's features and settings.
Propvara's commitments
- Process Customer Data only to provide, secure and support the Service
- Ensure staff with access are bound by confidentiality
- Apply appropriate technical and organizational safeguards, including encryption, role-based database access control and audit logging
- Use only subprocessors listed in the Privacy Policy, under written terms at least as protective as this DPA, and give notice before adding new ones
- Notify the customer without undue delay after becoming aware of a breach of security safeguards affecting their Customer Data, and help them meet their notification obligations
- Help the customer respond to access and correction requests
- Delete or return Customer Data when the account ends, as described in the Privacy Policy
- Not sell Customer Data or use it for advertising, and not allow AI providers to train models on it
Customer commitments
- Have the authority and any consent needed to provide the personal information
- Use the Service's roles and sharing settings appropriately, for example giving family viewers access only with a tenant's consent
- Respond to individuals' privacy requests for Customer Data
Quebec
For customers subject to Quebec's private-sector privacy law, Propvara will provide information the customer needs to complete a privacy impact assessment before communicating personal information outside Quebec.
Need a signed copy? Email legal@propvara.com.