Privacy Policy for Dalapo
Last Updated: July 31, 2026
At Dalapo (accessible via https://www.dalapo.com and the Dalapo Chrome Extension), protecting your privacy and being transparent about how we collect, use, and process your data is our top priority.
This Privacy Policy complies with Canadian privacy standards, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25.
1. Important Notice: Non-Intrusive Extension Design
- Listing-page utility only: The Dalapo Chrome Extension is a side-panel calculator that runs on supported real estate listing pages (for example Centris, DuProprio, RE/MAX, Realtor.ca, Zillow, Redfin, and other declared listing domains). It reads publicly visible listing parameters (such as asking price, taxes, insurance, condo fees, unit counts, and rental income where shown) to compute financial estimates locally in your browser.
- No general browsing surveillance: We do not log, track, or record your general web browsing history, bookmarks, or activity on sites outside the extension’s supported real estate listing hosts.
- Narrow site access: The extension requests access only to Dalapo and the real estate sites needed for its calculator features. It does not request blanket “all websites” access as a default permission.
- No ads injected into listing pages: The extension does not inject advertising, affiliate overlays, or partner widgets into third-party listing pages. Partner matching and paid upgrades happen on dalapo.com when you choose to use those features.
- Email Address: Collected when you unlock dashboard access via our email gate, subscribe to deal highlights / newsletter communications (with consent), or create a Pro subscription.
- Payment information: If you purchase Dalapo Pro (monthly or lifetime), payment is processed by Stripe. Dalapo does not store full card numbers. We retain subscription status and related billing metadata needed to fulfill your plan.
- Funding Blueprint & Partner Match Data: If you opt to submit a “Funding Blueprint” or request broker/mortgage matching, we collect the details you explicitly submit, such as:
- Full name, email address, and phone number
- Financial profile indicators (approximate liquid cash, credit score range, timeline, income type, first-time investor status)
- Optional notes for real estate brokers or financial partners
- Bug reports & product feedback: If you submit feedback or a bug report from the extension or website, we collect your description and related technical context. Bug reports may include an optional screenshot of the listing tab and/or Dalapo side panel that you choose to send.
B. Automated & Technical Data
- Listing metrics (public listing data): During an active analysis session on a supported listing URL, the extension may read public listing parameters (for example listing URL, price, borough/city, taxes, insurance, rent, unit type/count). Selected metrics may be sent to Dalapo servers to power deal analysis, portfolio/compare features, and anonymized market benchmarks. Listing metrics are kept decoupled from your PII unless you explicitly opt in to partner matching or otherwise link them through an account action.
- Usage quotas & local storage: We store local flags in
chrome.storage and browser localStorage to manage the free analysis allowance (for example a rolling 24-hour free-use window), Pro unlock status, locale preference, and locally saved deal cards / favourites so the extension and dashboard can stay in sync on your device.
- Plan status sync: If you have unlocked with an email, the extension/dashboard may request your current plan status from Dalapo servers (for example free vs Pro) using that email.
- Analytics data: Aggregate, non-identifiable interaction metrics (such as clicks on sponsored partner links or insurance provider recommendations on the dashboard).
We use collected information strictly for the following purposes:
- Service delivery: To calculate property metrics (cash flow, closing capital, mortgage estimates, transfer/welcome tax brackets, and related underwriting figures).
- Access control: To manage freemium daily quotas and sync email unlock / Pro privileges across the Chrome Extension and Web Dashboard.
- Portfolio & compare: To save deals you analyze or favourite so you can review and compare them on dalapo.com.
- Broker & financial matching (opt-in): To connect you with real estate agents, mortgage brokers, or financial institutions only when you explicitly complete and submit a Funding Blueprint or lead capture form.
- Market benchmarks & deal curation: To aggregate anonymized real estate data to refine local benchmarks and power deal-highlight communications you consented to receive.
- Support & product quality: To investigate bug reports and improve reliability and compliance of the extension and dashboard.
- Billing: To process and maintain Pro subscriptions through Stripe.
- We never sell your raw personal data: We do not trade or sell user email lists to third-party data brokers.
- Opt-in partner leads: If you submit a broker match or Funding Blueprint request, your contact information and submitted deal profile are shared exclusively with qualified real estate agents, mortgage brokers, or partner institutions to fulfill your request.
- Service providers: We use secure infrastructure providers, including:
- Supabase for backend database management
- Vercel for web hosting
- Stripe for payment processing
Database service-role keys and Stripe secrets are maintained on the server side and are never exposed to the client browser or extension environment.
5. Quebec Law 25 & PIPEDA Compliance Rights
Under Quebec Law 25 and PIPEDA, you hold the following rights regarding your personal data:
- Right to explicit consent: Data collection points (such as email entry and newsletter consent) require explicit, affirmative user consent where required.
- Right to access & rectification: You may request a copy of personal data linked to your email address or request corrections.
- Right to erasure (right to be forgotten): You may request that we permanently delete your email address, subscription/marketing records, and submitted lead records from our databases at any time (subject to limited legal/accounting retention where applicable).
- Data anonymization: Market listing data used for benchmarks remains anonymized and decoupled from user account credentials wherever practicable.
To exercise any of these rights, contact our privacy representative at privacy@dalapo.com (or through our web contact channels).
6. Security & Infrastructure
All data in transit between the extension, web application, and backend is protected using standard SSL/TLS encryption. Administrative access to backend databases and server routes requires secure authentication. The Chrome Extension follows Manifest V3 practices, including a restrictive content security policy and host access limited to Dalapo plus supported listing sites.
7. Children’s Privacy
Dalapo is intended for adults evaluating real estate investments. We do not knowingly collect personal information from children under 14 (or the applicable age of majority for consent in your jurisdiction).
8. Updates to This Policy
We may update this Privacy Policy periodically to reflect product updates or legal compliance changes. Any updates will be posted at https://www.dalapo.com/privacy with a revised “Last Updated” date.