ValidRenter collects the documents and personal information you upload (which may include government-issued ID, income documents, bank statements and credit information) for the sole purpose of verifying your identity and financial profile and generating your ValidRenter Score.

Your rights (Quebec Law 25 / PIPEDA)

• Access, correct and delete your information.
• Withdraw consent and request erasure.
• Be informed of any confidentiality incident affecting you.

How we protect it

Uploaded documents are encrypted at rest (AES-256-GCM), malware-scanned and structurally sanitized, and stored outside the public web root. Your documents are disclosed to a landlord only when YOU choose to share your dossier with them; the dossier you generate bundles your uploaded documents together with your score, and you control and can revoke every share. Some text may be processed by a cloud AI provider (AWS Bedrock, Canadian region) solely to read documents; we send the minimum necessary and do not use it to train models.

Retention

Raw source documents are automatically deleted 90 days after scoring. Your derived profile and score are kept while your account is active and re-verification is required at 6–12 months. You may request deletion at any time; payment records are retained 6 years for tax/accounting obligations.

We are an independent verification service, not a credit bureau or personal information agent.