Privacy Policy for Dalapo
Last Updated: July 23, 2026
At Dalapo (accessible via https://www.dalapo.com and the Dalapo Chrome Extension), protecting your privacy and being transparent about how we collect, use, and process your data is our top priority.
This Privacy Policy complies with Canadian privacy standards, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25.
1. Important Notice: Non-Intrusive & Anonymous Extension Design
- No Live Personal Scraping: The Dalapo Chrome Extension operates strictly as an overlay on real estate listing pages (e.g., Centris.ca, RE/MAX, DuProprio). It parses public listing parameters (property price, municipal/school taxes, building insurance, unit counts, and gross rental revenue) to calculate financial estimates locally and deterministically.
- No Browsing History Collection: We do not log, track, or record your general web browsing history, bookmarks, or activity outside supported real estate listing URLs.
- Email Address: Collected when you unlock unlimited dashboard access via our email gate or subscribe to our real estate deal highlights newsletter.
- Funding Blueprint & Partner Match Data: If you opt to submit a “Funding Blueprint” or request broker/mortgage matching, we collect the details you explicitly submit, such as:
- Full Name, Email Address, and Phone Number.
- Financial profile indicators (approximate liquid cash, credit score range, timeline, income type, first-time investor status).
- Optional notes for real estate brokers or financial partners.
B. Automated & Technical Data
- Listing Metrics & Search Activity: Public real estate parameters scraped during active user sessions (e.g., listing price, postal code prefix, borough/city name, estimated tax brackets, gross rent). Listing metrics are processed independently to populate our central market benchmark database and are kept strictly decoupled from your Personally Identifiable Information (PII) unless you explicitly opt-in to partner matching.
- Usage Quotas & Local Storage: We store local flags (
chrome.storage.local and browser localStorage) to track your 24-hour daily free usage allowance (e.g., 3 free analyses per day) and sync your email unlock status between the Chrome Extension and the Web Dashboard.
- Analytics Data: Aggregate, non-identifiable interaction metrics (such as clicks on sponsored partner links or insurance provider recommendations).
We use the collected information strictly for the following purposes:
- Service Delivery: To calculate deterministic property metrics (Cap Rates, Cash Flow, Closing Capital, Mortgage Amortizations, and Welcome Tax brackets).
- Access Control: To manage freemium daily quotas and sync your email unlock privileges across the Chrome Extension and Web Dashboard.
- Broker & Financial Matching (Opt-In): To connect you with real estate agents, mortgage brokers, or financial institutions only when you explicitly complete and submit a “Funding Blueprint” or lead capture form.
- Market Benchmarks & Deal Curation: To aggregate anonymized real estate data to refine local borough benchmarks and power our weekly automated deal highlights newsletter.
- We Never Sell Your Raw Personal Data: We do not trade or sell user email lists to third-party data brokers.
- Opt-In Partner Leads: If you submit a broker match or “Funding Blueprint” request, your contact information and submitted deal profile are shared exclusively with qualified real estate agents, mortgage brokers, or partner institutions to fulfill your request.
- Service Providers: We store data using secure, encrypted infrastructure (including Supabase for backend database management and Vercel for web hosting). Database service role keys are strictly maintained on the server side and never exposed to the client browser or extension environment.
5. Quebec Law 25 & PIPEDA Compliance Rights
Under Quebec Law 25 and PIPEDA, you hold the following rights regarding your personal data:
- Right to Explicit Consent: Data collection points (such as email entry modals) require explicit, affirmative user consent.
- Right to Access & Rectification: You may request a copy of any personal data linked to your email address or request corrections.
- Right to Erasure (Right to be Forgotten): You may request that we permanently delete your email address, subscription status, and submitted lead records from our databases at any time.
- Data Anonymization: Market listing data scraped by the extension remains strictly anonymized and decoupled from user account credentials.
To exercise any of these rights, please contact our privacy representative at privacy@dalapo.com (or through our web contact channels).
6. Security & Infrastructure
All data in transit between the extension, web application, and database backend is protected using standard SSL/TLS encryption protocols. Administrative access to backend databases and server routes requires secure authentication tokens.
7. Updates to This Policy
We may update this Privacy Policy periodically to reflect product updates or legal compliance changes. Any updates will be posted directly to https://www.dalapo.com/privacy with an updated revision date.