Privacy Policy

Summary of Key Points

Here is a plain-English summary of the most important things to know about how Akre handles your data.

Table of Contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on?
4. When and with whom do we share your information?
5. Do we use cookies and tracking technologies?
6. Do we use artificial intelligence?
7. How long do we keep your information?
8. How do we keep your information safe?
9. Do we collect information from minors?
10. What are your privacy rights?
11. International data transfers
12. Information about tenants
13. Commercial electronic messages (CASL)
14. Data breach notification
15. Controls for do-not-track features
16. Do we make updates to this notice?
17. How can you contact us?
18. How can you review, update, or delete your data?
19. Privacy accountability
20. Accessibility

1. What Information Do We Collect?

2. How Do We Process Your Information?

In short: We process your information to provide, improve, and secure our services, and to communicate with you.

We process your personal information for the following purposes:

• To create and manage your account
• To deliver the Akre platform and its features, including AI-powered bill reading
• To process payments through Stripe
• To send you service-related emails (account updates, receipts, support responses)
• To monitor and fix errors and performance issues
• To detect and prevent fraud and abuse
• To comply with legal obligations

We only send marketing communications if you have opted in. You can unsubscribe at any time.

3. What Legal Bases Do We Rely On?

In short: We only process your information when we have a valid legal reason to do so.

Under Canadian privacy law (PIPEDA) and, where applicable, other legislation, we process your information based on:

• Your consent — for non-essential cookies, marketing emails, and AI document processing
• Contract performance — to deliver the services you signed up for
• Legal obligation — to comply with Canadian tax law (CRA) and other applicable regulations
• Legitimate interests — for the following specific purposes: (a) security monitoring and fraud prevention to protect Akre and its users; (b) improving and optimising our platform based on anonymised usage data; (c) maintaining the technical operation and reliability of our services. We have assessed that these interests are not overridden by your privacy rights.

You may withdraw consent at any time by contacting admin@akre.ca. Withdrawal of consent does not affect processing already carried out.

4. When and With Whom Do We Share Your Information?

In short: We share information only with trusted service providers who help us run Akre. We never sell your data.

We share your information with the following categories of third parties:

• Authentication — Clerk (user sign-in and session management)
• Database — Supabase (secure storage of your property and account data)
• Payments — Stripe (payment processing and subscription management)
• AI processing — Anthropic (bill reading and expense categorisation)
• Security — Cloudflare (DDoS protection and CDN)
• Hosting — Vercel (website infrastructure and analytics)
• Error monitoring — Sentry (bug detection and performance tracking)
• Rate limiting — Upstash (API abuse prevention)

We may also disclose your information if required by law, court order, or to protect the rights and safety of Akre or its users. We do not sell, rent, or trade your personal information to any third party for marketing purposes.

If Akre is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Do We Use Cookies and Tracking Technologies?

In short: Yes. We use essential cookies to operate the site and optional cookies for analytics and error monitoring.

We use cookies and similar technologies to keep you signed in, protect your session, and understand how our website is used. When you first visit Akre, you will be asked for your cookie preferences. Non-essential cookies (analytics, error monitoring) are only activated after you consent.

For full details on what cookies we use and how to manage them, please see our Cookie Policy.

6. Do We Use Artificial Intelligence?

In short: Yes. We use Anthropic's Claude AI to power our bill reading feature. Your documents are not used to train AI models.

Akre's core bill reading feature uses artificial intelligence provided by Anthropic (Claude AI). Here is exactly what happens when you upload a bill:

• Your document is securely transmitted to Anthropic's API over an encrypted connection
• Claude AI extracts and categorises the expense information from the document
• The structured data is returned to Akre and saved to your account
• The original document is stored securely in your Akre account

Anthropic does not retain your documents or use them to train its AI models. This is governed by Anthropic's API data usage policy, which you can review at https://www.anthropic.com/privacy.

You can opt out of AI processing at any time by manually entering bill data instead of uploading documents, or by contacting us at admin@akre.ca to request that AI processing be disabled for your account.

7. How Long Do We Keep Your Information?

In short: We keep your data for as long as your account is active, with specific retention periods for different data types.

We retain your personal information only as long as necessary for the purposes described in this notice or as required by law. Specific retention periods are:

• Account and profile data — retained for the duration of your account and deleted within 30 days of account closure
• Property, tenant, and document data — deleted within 30 days of account closure
• Financial and billing records — retained for 7 years as required by the Canada Revenue Agency (CRA) under Canadian tax law, regardless of account status
• Error and performance logs (Sentry) — 90 days
• Anonymised analytics data (Vercel) — up to 12 months
• Cookie consent records — 12 months

When your data reaches the end of its retention period, it is securely deleted or anonymised. To request early deletion of your data, contact admin@akre.ca.

8. How Do We Keep Your Information Safe?

In short: We use industry-standard technical and organisational measures to protect your data.

We have implemented the following security measures:

• Row Level Security (RLS) on our database — ensures each user can only access their own data
• Encrypted authentication and session management via Clerk
• HTTPS encryption for all data in transit
• Sensitive API keys stored as encrypted environment variables
• Rate limiting on all API endpoints to prevent abuse
• Input validation on all data received by our servers
• Real-time error monitoring and alerting via Sentry
• Security headers including Content Security Policy, HSTS, and X-Frame-Options

Despite these measures, no electronic transmission or storage system is 100% secure. If you believe your account has been compromised, contact us immediately at admin@akre.ca.

9. Do We Collect Information From Minors?

In short: No. Akre is not intended for users under 18.

Akre is a property management platform designed for adults. We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at admin@akre.ca and we will promptly delete it.

10. What Are Your Privacy Rights?

In short: You have meaningful rights over your personal data under Canadian privacy law.

As a user in Canada, you have the following rights under PIPEDA and the BC Personal Information Protection Act (PIPA):

• Right to access — request a copy of the personal information we hold about you
• Right to correction — request that inaccurate or incomplete information be corrected
• Right to deletion — request that your account and associated data be deleted
• Right to withdraw consent — withdraw consent to processing at any time
• Right to data portability — request your data in a structured, machine-readable format
• Right to complain — file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca

To exercise any of these rights, email admin@akre.ca. We will acknowledge your request within 5 business days and respond fully within 30 days.

11. International Data Transfers

In short: Some of our service providers are based in the United States. Your data may be processed there.

Akre is based in Vancouver, British Columbia, Canada. However, we use third-party services operated in the United States, including Anthropic, Clerk, Stripe, Vercel, Supabase, Sentry, and Cloudflare. By creating an Akre account and agreeing to our Terms of Service, you consent to your data being transferred to and processed in the United States as described in this notice.

Each of these providers maintains appropriate contractual and technical safeguards for data transfers and operates under its own privacy policy. If you have concerns about international transfers, contact us at admin@akre.ca.

12. Information About Tenants

In short: Landlords may store tenant information in Akre. We treat this data with the same care as all personal information.

Akre is a property management platform used by landlords and property managers. As part of using our services, landlords may enter personal information about their tenants, including:

• Names and contact details
• Unit and lease information
• Maintenance requests and communications

If you are a tenant whose information has been entered into Akre by a landlord, please be aware of the following:

• Your information is stored securely and is only accessible by the landlord or property manager who manages your unit
• Your data is protected by the same security measures described in Section 8 of this notice
• If a landlord removes you as a tenant from their account, your personal information associated with that tenancy will be deleted within 30 days
• Your information will also be deleted within 30 days of the landlord closing their Akre account
• You may contact us at admin@akre.ca to inquire about what information is held about you and to request its deletion

Landlords using Akre are responsible for ensuring they have a lawful basis to collect and store their tenants' personal information, and for complying with any applicable tenancy and privacy legislation in their jurisdiction, including the BC Residential Tenancy Act where applicable.

13. Commercial Electronic Messages (CASL)

In short: We comply with Canada's Anti-Spam Legislation. We only send marketing emails with your consent.

Akre complies with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (such as promotional emails or product updates) if you have expressly or implicitly consented to receive them.

You have implicitly consented to receive service-related messages by creating an Akre account. These include:

• Account creation and verification emails
• Payment receipts and billing notifications
• Security alerts and important account updates
• Responses to your support requests

For marketing or promotional communications, we will only contact you if you have explicitly opted in. You can withdraw consent and unsubscribe from marketing emails at any time by:

• Clicking the “Unsubscribe” link at the bottom of any marketing email
• Emailing admin@akre.ca with the subject line “Unsubscribe”

Unsubscribing from marketing emails will not affect your receipt of essential service communications, which are necessary for the operation of your account.

14. Data Breach Notification

In short: In the event of a data breach affecting your information, we will notify you and the Privacy Commissioner as required by law.

In the event of a data breach that poses a real risk of significant harm to you, Akre will:

• Notify the Office of the Privacy Commissioner of Canada as soon as feasible after determining a breach has occurred
• Notify all affected individuals directly by email as soon as feasible
• Maintain a record of all data breaches, regardless of whether notification was required

Our breach notification will include:

• A description of what happened and what information was involved
• The steps we have taken or will take to address the breach
• Recommended steps you can take to protect yourself
• Contact information for follow-up questions

We maintain an incident response plan and conduct regular security reviews to minimise the risk of a breach. If you believe your account has been compromised, contact us immediately at admin@akre.ca.

15. Controls for Do-Not-Track Features

In short: We do not currently respond to DNT browser signals, but you can manage tracking through our cookie preference centre.

Some browsers include a Do-Not-Track (DNT) feature that signals to websites that you do not want to be tracked. No universal standard for DNT exists, so we do not currently respond to DNT signals. However, you can manage non-essential tracking through our Cookie Preference Centre in the website footer.

16. Do We Make Updates to This Notice?

In short: Yes. We will notify you of any material changes at least 14 days in advance.

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email and post a prominent notice on our website at least 14 days before the changes take effect. The updated “Last updated” date at the top of this notice will always reflect when it was last revised.

17. How Can You Contact Us?

If you have questions, concerns, or requests regarding this Privacy Notice or your personal data, please contact us:

18. How Can You Review, Update, or Delete Your Data?

You have the right to review, update, or delete the personal information we hold about you. To do so:

• Log in to your Akre account and go to Settings to update your profile or close your account
• Email admin@akre.ca with a specific request and we will respond within 30 days

Please note that some information (such as financial records) may be retained for legal compliance even after account deletion. We will always inform you if this applies to your request.

19. Privacy Accountability

In short: Akre has designated a privacy contact who is accountable for compliance with this policy.

As required by PIPEDA's accountability principle, Akre has designated a privacy contact who is responsible for our compliance with this Privacy Notice and applicable privacy legislation.

Our designated privacy contact can be reached at:

Our privacy contact is responsible for receiving and responding to privacy inquiries and complaints, ensuring staff are trained on privacy obligations, and conducting periodic reviews of our privacy practices.

20. Accessibility

In short: This policy is available in alternative formats on request.

We are committed to making this Privacy Notice accessible to everyone. If you require this document in an alternative format — such as larger text, plain text, or another language — please contact us at admin@akre.ca and we will do our best to accommodate your request within 10 business days.

Version History

Future updates to this policy will be logged here with a summary of material changes.

© 2026 Akre. All rights reserved. · admin@akre.ca · Vancouver, BC, Canada