Privacy Policy

1. Introduction

Welcome to Urbi Kore Inc. ("Urbi Kore," "we," "us," or "our"). Protecting your privacy is at the core of our business. This Privacy Policy describes how we collect, use, disclose, and protect the personal information of our users in accordance with Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Protection Act (PIPA) of Alberta.

We are committed to transparency in our data practices and to giving you meaningful control over your personal information. Please read this Privacy Policy carefully. By using our Website, App, or Services, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Policy

This policy applies to all personal information collected by Urbi Kore through our Website (www.myurbi.co), our mobile applications (the "App"), and any other means through which you interact with our Services. It covers our practices regarding all user types, including:

• Kore System Users (property managers, board members, on-site staff)
• Community Members (residents and tenants accessing the platform through a partner property)
• Konnect Marketplace Vendors (third-party businesses listing services on URBI Konnect)

This policy does not apply to the practices of third parties that we do not own or control, including Konnect Marketplace Vendors. When you engage a vendor through URBI Konnect, that vendor may collect and process your personal information under their own privacy policy. We encourage you to review the privacy practices of any vendor before engaging their services.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account, use our services, or interact with us, we collect information that you provide directly, including:

• Account registration information: your name, email address, phone number, and mailing address
• Property information: your residential address and unit number
• Payment information (for URBI Konnect transactions): credit card number, billing address, and related financial information, processed through Stripe
• Profile preferences: communication preferences, service preferences, and notification settings
• Feedback and communications: any messages, feedback, support requests, or other communications you send to us or through the platform
• Marketplace activity: services browsed, bookings made, reviews submitted, and transaction history on URBI Konnect

3.2 Information Collected Automatically

When you use our Website or App, we automatically collect certain information, including:

• Device information: device type, operating system, unique device identifiers, and mobile network information
• Usage data: features accessed, pages viewed, time spent, interaction patterns, and in-app actions
• Log data: IP address, browser type, access times, and referring URLs
• Location data: general location based on IP address (we do not collect precise GPS location unless you explicitly enable it for a specific feature)

3.3 Information from Third Parties

We may receive information about you from third parties, including:

• Property managers who provide your contact information to set up your community account
• Third-party authentication services (e.g., Facebook) if you choose to link your account
• Payment processors (Stripe) regarding transaction status
• Konnect Marketplace Vendors regarding the status of services you have booked

4. Cookies and Tracking Technologies

Our Website and App use cookies and similar technologies to collect information automatically. These include:

• Necessary cookies: required for the operation of the Website and App (e.g., session management, security). These cannot be disabled.
• Functional cookies: remember your preferences and settings to enhance your experience.
• Analytics cookies: help us understand how users interact with our services so we can improve them.

We do not use marketing or advertising cookies. We do not serve targeted advertisements through our platform.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our services.

4.1 Website Analytics and Your Opt Out

On this marketing website we measure aggregate usage (pages viewed, links and buttons clicked, how far through a page visitors read) using Google Analytics together with our own first party measurement stored on infrastructure we control. These measurements are on by default when you visit, on the basis of implied consent, and we do not wait for you to accept a banner before counting a page view.

What we deliberately do not do: we run no advertising or cross site tracking, we never sell or share this data with data brokers, we do not store your IP address with these events (location is recorded only at the country and region level), and we do not use this data to identify you. Session identifiers used to group a single visit are random and expire when you close the tab.

You can turn website analytics off at any time using the Privacy choices link in the footer of every page, or by declining on the notice shown on your first visit. Opting out stops both Google Analytics and our own measurement immediately, and your choice is remembered on your device.

5. How We Use Your Information

We collect and use your personal information for the following purposes:

• Service delivery: to provide, maintain, and improve our platform, including both URBI Kore and URBI Konnect, and to manage your account
• Marketplace facilitation: to connect Community Members with Konnect Marketplace Vendors, process bookings, and relay payments through the URBI Konnect marketplace
• Transaction processing: to process payments through Stripe for URBI Konnect marketplace transactions
• Communications: to send transactional messages (booking confirmations, service updates, security alerts, password resets), respond to your inquiries, and facilitate property manager communications to Community Members through the platform
• Platform improvement: to analyze usage patterns, diagnose technical issues, and improve functionality and user experience
• Safety and security: to detect and prevent fraud, abuse, and security incidents, and to enforce our Code of Conduct
• Legal compliance: to comply with applicable laws, regulations, legal processes, or governmental requests
• System updates: to inform you of new features, updates, or changes to our platform

We do not use your personal information for marketing or promotional purposes. If this changes in the future, we will obtain your express opt-in consent before doing so, in compliance with Canada's Anti-Spam Legislation (CASL).

6. Consent

6.1 How We Obtain Consent

We obtain consent for the collection, use, and disclosure of personal information in the following ways:

• Express consent: when you create an account, you expressly consent to the collection and use of your personal information as described in this policy
• Implied consent: when property managers provide your contact information to set up your community account, your consent to receive community-related communications is implied by your relationship with the property
• Transactional consent: when you make a purchase through URBI Konnect, you consent to the sharing of necessary information (such as your name, contact details, and booking information) with the applicable Konnect Marketplace Vendor for the purpose of fulfilling the service
• Ongoing consent: your continued use of the Service constitutes ongoing consent to the practices described in this policy

6.2 Withdrawing Consent

You may withdraw your consent at any time, subject to legal or contractual restrictions:

• For notification preferences: adjust your settings in the App under notification preferences
• For text messages: reply STOP to any text message from Urbi Kore
• For account deletion: contact us at hello@myurbi.co

We will process consent withdrawal requests within 30 days. Withdrawing consent for certain types of information processing may affect our ability to provide the Service, and we will inform you of the consequences before processing your request.

7. Third-Party Disclosure

We may disclose your personal information to the following categories of third-party recipients:

7.1 Service Providers (Data Processors)

We share personal information with the following categories of service providers who process data on our behalf:

• Payment processing: Stripe, Inc. processes payment information for URBI Konnect marketplace transactions. Stripe's privacy policy governs their handling of your payment data.
• Cloud infrastructure: Supabase (hosted on Amazon Web Services) provides our database and application hosting services.
• Communications: Twilio, Inc. provides SMS messaging and push notification delivery services.
• Analytics: we may use analytics tools to understand usage patterns and improve the Service.

All service providers are contractually required to protect your personal information to a standard equivalent to this policy and applicable Canadian privacy law.

7.2 Konnect Marketplace Vendors

When you book a service or purchase a product through URBI Konnect, we share the information necessary to fulfill that transaction with the applicable Konnect Marketplace Vendor. This typically includes your name, contact information, property address, and booking details. Konnect Marketplace Vendors are independent businesses and are responsible for their own privacy practices. We encourage you to review a vendor's privacy policy before engaging their services.

7.3 Property Managers

For Community Members, certain account and community-related information may be accessible to the property managers and administrators of your building or community through the URBI Kore platform, to the extent necessary for community management purposes.

7.4 Mobile Information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

7.5 Other Disclosures

Personal information may also be disclosed:

• As required or permitted by law, regulation, or court order
• To protect the rights, property, or safety of Urbi Kore, our users, or the public
• In connection with a merger, acquisition, or sale of all or a portion of our assets, provided the acquiring entity agrees to protect your personal information consistent with this policy and applicable Canadian privacy law
• With your express consent for any purpose not described in this policy

8. International Data Transfer

Your personal information is processed and stored on servers located in the United States through our third-party service providers (Supabase/AWS, Stripe, and Twilio). By using the Service, you acknowledge and consent to the transfer of your personal information to the United States.

We ensure compliance with Canadian privacy laws by requiring our foreign service providers to be contractually bound to equivalent privacy standards, implementing appropriate technical and organizational security measures, and conducting regular assessments of our providers' data protection practices.

Please be aware that personal information stored in the United States may be subject to lawful access requests by U.S. law enforcement or government agencies under applicable U.S. law.

9. Data Security

We implement robust security measures to protect personal information, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Access controls limiting employee access to personal information on a need-to-know basis
• Regular security assessments and monitoring
• Secure payment processing through Stripe (PCI-DSS compliant)

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Breach Notification

In the event of a breach of security safeguards involving your personal information that creates a real risk of significant harm, Urbi Kore will:

• Notify the Office of the Privacy Commissioner of Canada as required by PIPEDA's Breach of Security Safeguards Regulations
• Notify affected individuals as soon as feasible, and in any event within 96 hours of confirming the breach, by email or other direct communication
• Include in the notification: a description of the breach, the types of personal information involved, the steps we are taking to reduce the risk of harm, and steps you can take to protect yourself
• Notify any other organization or government institution that may be able to reduce the risk of harm
• Maintain a record of all breaches for a minimum of 24 months, as required by law

11. Data Retention and Deletion

11.1 Retention Periods

We retain your personal information only as long as necessary for the purposes described in this policy or as required by law. General guidelines:

• Account information: retained for the duration of your account and for a reasonable period after closure
• Transaction records: retained as required for tax and financial reporting obligations
• Communications records: retained for a reasonable period after your last interaction
• Usage and analytics data: aggregated and anonymized within a reasonable period

11.2 Deletion Upon Account Termination

Upon account termination, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for the establishment, exercise, or defense of legal claims.

11.3 Requesting Deletion

You may request deletion at any time by contacting hello@myurbi.co. We will process requests within 30 days and confirm completion. Some information may be retained where we have a legal obligation, and we will inform you of any exceptions.

12. Your Rights

12.1 Right of Access

You have the right to request access to the personal information we hold about you. Contact hello@myurbi.co. We will respond within 30 days as required by PIPEDA. A minimal fee may apply in certain circumstances, and we will inform you before proceeding.

12.2 Right of Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update most information through the App settings. For other corrections, contact hello@myurbi.co.

12.3 Right to Withdraw Consent

As described in Section 6.2, you may withdraw consent at any time, subject to legal or contractual restrictions.

12.4 Right to Complain

If you are not satisfied with how we have handled your personal information, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca, or with the Office of the Information and Privacy Commissioner of Alberta at www.oipc.ab.ca.

13. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided personal information to us, please contact hello@myurbi.co. If we become aware that we have collected such information, we will take steps to delete it promptly.

14. Updates to This Policy

We may update this policy to reflect changes in our practices, technology, legal requirements, or other factors. For material changes, we will provide at least 30 days advance notice via email and/or prominent notice on our Website or within the App. The "Last Updated" date at the top of this policy will be revised to reflect changes. Your continued use of the Service after the effective date constitutes acceptance. If you disagree, you should discontinue use before the changes take effect.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For privacy-specific inquiries, including access requests, correction requests, consent withdrawal, or complaints, please include "Privacy Request" in the subject line of your email.