Privacy Policy
Last updated: June 9, 2026
What data we collect
- Account data: email address, display name, password (hashed).
- Property and tenant data: addresses, lease terms, rent amounts, tenant names and contact info that you enter.
- Payment and expense data: rent received, expenses, FX rates, CRA remittance records.
- Forwarded payment and bill emails: only the emails you choose to forward. BorderBird never connects to your inbox. Instead, you set up one email filter that forwards only your Interac e-Transfer and utility-bill emails to a private BorderBird address, and we read only those forwarded messages to detect rent payment confirmations and bill amounts. We never see, read, or have access to the rest of your mailbox.
How we use it
We use your data exclusively to provide BorderBird's record-keeping and tax-reporting features. Specifically: tracking rent received, calculating CRA remittances and Schedule E figures, generating reports, and surfacing late-payment alerts. We do not use your data for advertising or analytics profiling. We do not use tracking cookies or third-party analytics.
Forwarded email handling
- BorderBird never connects to your inbox and holds no access to your mailbox. We only ever receive the emails your own forwarding filter sends us.
- You set up one email filter that forwards only your Interac e-Transfer and utility-bill emails to a private BorderBird address — nothing else is ever sent to us.
- Used solely to detect rent payment notifications (e-transfers, Interac auto-deposits) and bill amounts.
- Parsed payment data is stored in your account; the original email content is not retained beyond what is needed to deduplicate imports.
- Never sold, rented, or shared with third parties.
- You can turn off forwarding at any time from the filter settings in your own email account. Once it's off, no further emails reach BorderBird; turning it off does not delete data already imported.
Data storage and retention
- All data is hosted in Canada on Supabase's
ca-central-1region (Montréal). Data in transit is encrypted with TLS; data at rest is encrypted with AES-256. - Account data is retained for as long as your account is active. Upon account closure, all personal data is permanently deleted within 30 days.
Third-party services
BorderBird uses the following third-party services that may process your data:
- Supabase — database and authentication hosting (Canada, ca-central-1). See Supabase Privacy Policy.
- Google sign-in (optional) — if you choose to sign in with Google, it is used only to authenticate your account. BorderBird does not connect to or read your Gmail inbox; payment and bill detection relies solely on the emails you forward to us.
Your rights
You have the right to:
- Access all data we hold about you
- Correct inaccurate data
- Request deletion of your account and all associated data
- Export your data in CSV format
PIPEDA compliance
BorderBird complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We collect only the personal information needed to provide the service, obtain meaningful consent, and protect data with appropriate safeguards.
Contact
For privacy questions or to file a complaint, email admin@borderbird.com.