ValidRenter collects the documents and personal information you upload (which may include government-issued ID, income documents, bank statements and credit information) for the sole purpose of checking your file's consistency and generating your ValidRenter Score.

Privacy officer

Carlos Faviel Font — info@centremedicalfont.ca. Direct any access, correction, consent-withdrawal or complaint request to them. You may also complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Score generated by automated processing

Your ValidRenter Score is generated exclusively by automated processing of the documents you provide. You have the right to: be informed of the main factors and parameters used (identity, income, affordability against your target rent, references, credit, file completeness); have the information used corrected; and submit observations to a staff member able to review the score. Write to info@centremedicalfont.ca.

What landlords see

Every share transmitted BY ValidRenter to a landlord (link, email, SMS, Telegram) contains only your score, badges and category breakdown — never your raw documents. Your full dossier (including your documents) is delivered only to you. You control and can revoke every share.

How we protect it

Uploaded documents are encrypted at rest (AES-256-GCM, AWS KMS-managed key in the Montreal region), malware-scanned and structurally sanitized, and stored outside the public web root on servers located in Quebec (AWS ca-central-1). Some text may be processed by a cloud AI provider solely to read documents; we send the minimum necessary and do not use it to train models.

Confidentiality incidents

Every confidentiality incident is logged in a register; incidents presenting a risk of serious injury are reported to the Commission d'accès à l'information and to the persons concerned, as the law requires.

Retention and destruction

Raw source documents are automatically deleted 90 days after scoring. Your derived profile and score are kept while your account is active (inactive accounts purged after 24 months); no personal information is kept beyond 7 years. You may export your data and request deletion at any time; payment records are retained 6 years for tax obligations.

ValidRenter is not a credit bureau and does not pull credit-bureau files. See also our public personal-information-agent notice.