Privacy Policy

Who this covers

Scordwell is a platform that lets realtors invite buyer clients, capture their home-buying preferences, and receive matched, explained real estate listings. This policy describes how we handle personal information for both realtors (who create a Scordwell workspace) and buyer clients (who are invited into one by their realtor).

Information we collect

• Account information: name, email, and (optionally) phone number and real estate license number for realtors; name, email, and (optionally) phone number for buyer clients, entered by the inviting realtor.
• Preference data: answers to the buyer questionnaire — budget, location, property type, features, lifestyle preferences, dealbreakers, and any free-text description of what a buyer is looking for. This can incidentally reveal sensitive context (e.g. a school or daycare address implying a buyer has children).
• Usage data: which listings a buyer views, likes, or passes on; showing requests, proposed times, and any notes or decline reasons entered; address searches.
• Billing data: Scordwell does not directly collect or store payment card details. Stripe, our payment processor, collects and stores this on our behalf — see below.
• Technical data: standard request/error metadata (IP address, browser/device information, timestamps) captured by our error-monitoring and hosting providers.

How we use it

We use this information to operate the core product: matching buyer clients to listings, generating AI-assisted explanations of those matches, coordinating showings between buyers and realtors, and billing realtor subscriptions. We do not sell personal information, and we do not use buyer preference data for advertising.

Who we share it with

We rely on the following third-party service providers to operate Scordwell. Each processes only the data necessary for its role:

• Clerk — authentication and account management for both realtors and buyer clients.
• Supabase (hosted in Canada Central) — our primary database, storing account, preference, listing, and matching data.
• Stripe — payment processing and subscription billing for realtor accounts. Card details never touch our own servers.
• Anthropic (Claude) — buyer preference data (questionnaire answers, free-text descriptions) is sent to generate AI-assisted preference suggestions and match explanations.
• Repliers — our real estate listing data provider. Data flows one way, from Repliers to us; we do not send buyer or realtor personal information to Repliers.
• Resend — sends transactional email (showing requests, confirmations, reminders) on our behalf, which necessarily includes recipient names, email addresses, and showing details.
• Sentry — error monitoring; may capture fragments of request data at the moment an error occurs, for debugging purposes.
• Vercel — hosts the application and processes all data in transit.

Where your data is processed

Our primary database is hosted in Canada (Supabase, Canada Central region), which we chose specifically for Canadian data residency. However, several of the providers above — including Clerk, Stripe, Anthropic, Resend, Sentry, and Vercel — process data outside Canada, primarily in the United States. Cross-border processing of this kind is generally permitted under PIPEDA with appropriate safeguards and disclosure, but the specifics of those safeguards for Scordwell have not yet been reviewed by counsel.

Retention

We retain account and preference data for as long as an account remains active, plus a reasonable period afterward to support account recovery and legal/accounting requirements. A concrete retention schedule (e.g. auto-deletion after N months of inactivity) has not yet been defined or implemented.

Security

We use industry-standard practices — encrypted connections, scoped access controls, and workspace-level data isolation between realtor accounts — to protect personal information. No system is perfectly secure, and we have not yet undergone an independent, professional security review.

Your rights

Under PIPEDA, individuals in Canada generally have the right to access the personal information an organization holds about them, request corrections, and withdraw consent for its collection, use, or disclosure (subject to legal or contractual restrictions). A formal process for exercising these rights — and the contact point below — has not yet been finalized.

Children

Scordwell is not directed at, and is not knowingly used by, anyone under the age of majority.

Changes to this policy

As this document is a draft, it will change substantially before Scordwell's public launch. Once finalized, this section will describe how we notify users of material changes.

Contact

A privacy contact/DPO email address has not yet been established — add one here once available.