Privacy Policy

Reasonable safeguards

• HTTPS enforced (HSTS) and modern security headers.
• Passwords are stored as salted bcrypt hashes.
• Role-based access controls in the portal (client vs admin).
• Short-lived sessions that expire automatically.
• Audit logs that record who accessed what, and when.

Data residency

This portal uses managed cloud infrastructure. Your data is currently stored in the United States (Vercel Postgres, Eastern US). If this changes, this policy will be updated.

Breach response

If a breach occurs, we will:

• Notify affected users.
• Notify the Office of the Privacy Commissioner as required.
• Maintain breach records and remediation notes.

Contact

For privacy requests, contact the brokerage using the details on the website.