Privacy Policy

Last updated: May 22, 2026

Kozi ("we", "our", or "us") operates the Kozi real estate platform at kozi.app and related services (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

By creating an account or using the Platform, you consent to the practices described in this policy. If you do not agree, do not use the Platform.

1. Information We Collect

a) Information you provide

• Account data: first name, last name, email address, phone number.
• Agent data (if applicable): brokerage name, profile photo, license information.
• Communications: messages you send to agents or support through the Platform.

b) Information collected automatically

• Usage data: listings viewed, saved, compared, and shared; searches performed; filters applied; map interactions; time spent on pages.
• Inferred preferences: budget range, preferred location, property type, and amenity affinities — derived from your browsing behaviour to personalize your experience.
• Device & session data: IP address, browser user agent, session identifiers, and approximate geolocation (city/region level) — used for security, rate limiting, and fraud prevention.
• Cookies & local storage: authentication tokens, theme preferences, and session state. We do not use cross-site advertising trackers.

c) Listing data

All property listings displayed on the Platform are sourced from third-party Multiple Listing Service (MLS) data feeds. When you interact with listings (saving, comparing, requesting showings), we record that interaction to improve your experience and, where you have requested it, to share relevant information with a connected agent.

2. How We Use Your Information

• To create and maintain your account.
• To personalize the For You feed, search results, and listing recommendations.
• To send you listing alerts, price change notices, and open-house reminders you opt into.
• To match you with agents who have opted into the Kozi lead program — only after you explicitly initiate contact.
• To operate anti-abuse, rate-limiting, and fraud-prevention controls.
• To improve Platform features through aggregated, anonymized analytics.
• To comply with legal obligations.

3. Legal Basis & PIPEDA Compliance

We rely on your consent, collected at account creation, as the primary legal basis for processing your personal information. You may withdraw consent at any time (see Your Rights below), though this may limit your access to certain features.

We adhere to PIPEDA's ten fair information principles: accountability, identifying purposes, consent, limiting collection, limiting use / disclosure / retention, accuracy, safeguards, openness, individual access, and challenging compliance.

4. Sharing & Disclosure

• Agents: We share your contact information with a linked agent only when you explicitly request it (e.g. "Request a showing" or "Link an agent").
• Service providers:We use Supabase (database & authentication), Stripe (payments), and Upstash (caching). Each processes data solely to deliver services to us and is bound by confidentiality agreements.
• MLS® data provider (PropTx): We may share your name, email address, and listing-access records with PropTx Innovations Inc. for purposes of audit, compliance verification, or legal proceedings as required in the administration of the MLS® System, pursuant to our data licence agreement with PropTx.
• Legal requirements: We may disclose information if required by law, court order, or regulatory authority.
• We do not sell your personal information. Ever.

5. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal information within 30 days, except where retention is required by law or for fraud prevention purposes (up to 7 years).

Anonymized, aggregated analytics may be retained indefinitely as they cannot identify you.

6. Data Security

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, row-level security in our database, and role-based access controls. No method of transmission or storage is 100% secure; we will notify affected users promptly in the event of a breach as required by PIPEDA.

7. Your Rights

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct inaccurate information.
• Deletion: Request erasure of your account and associated personal data.
• Withdrawal of consent: Opt out of non-essential processing at any time.
• Notifications: Manage all in-app notification categories at /settings/notifications.

To exercise any of these rights, email privacy@kozi.app. We will respond within 30 days.

8. Children's Privacy

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be announced via in-app banner or email at least 14 days before they take effect. Continued use after that date constitutes acceptance of the updated policy.

10. Contact & Complaints

Privacy Officer — Kozi
Email: privacy@kozi.app

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.