YorkNine policies
Privacy Policy
How YorkNine handles account, VOW, real estate, communication, and assistant-feature information.
1. Accountability and scope
YorkNine is operated by Quan Ve and Avi Samaroo, Sales Representatives, with CENTURY 21 Atria Realty Inc., Brokerage (Vaughan office). This policy applies to the YorkNine website and app. The YorkNine Privacy Officer is accountable for personal information under our control and for compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable law.
2. Information we collect
Depending on the features you use, we collect: your name, signed-in account email, phone number where you choose to provide it, account and security data; consent, VOW terms, email-confirmation, expiry, and representation-status records; saved homes, searches, alerts, viewed properties, showings, valuations, appointments, messages, and preferences; voice or text transcripts when you use assistant features; location you choose to provide; and basic device, browser, user-agent, security, audit, and usage information. VOW audit events use a one-way request fingerprint rather than retaining the raw network address in that audit record. Listing information comes from authorized real estate data providers.
3. Purposes
We use personal information to create and secure accounts; provide public searches, saved items, alerts, VOW access, property-history tools, showings, valuations, appointments, and requested communications; remember preferences; allow the agents and brokerage to respond; operate public-data assistant features; prevent scraping and misuse; investigate incidents; maintain legal, brokerage, consent, MLS®, and audit records; and improve reliability. We do not sell personal information.
4. Consent and choices
We seek meaningful consent where required and limit collection to what is reasonably needed for the stated purpose. Microphone, location, notification, analytics, and marketing permissions may be declined or withdrawn, subject to legal or contractual limits. Marketing consent is not required for VOW access. Withdrawing a consent needed for a requested feature may prevent that feature from operating.
5. VOW identity, email confirmation, and activity records
Protected PropTx/TRREB information requires a password-protected account, acceptance of current VOW terms, and confirmation of the valid email associated with that account. We record the accepted terms version and time, confirmation and expiry times, and a security audit trail of protected searches, listing views, history or valuation views, and revocation. These records support the broker-consumer relationship, access control, incident response, and compliance verification.
6. Association audit and legal disclosure
With the explicit VOW acknowledgement, identity, agreement, verification, and VOW activity records may be disclosed to PropTx, TRREB, participating members, CENTURY 21 Atria Realty Inc., Brokerage, and their authorized representatives to audit or verify compliance with MLS® rules, contracts, law, or legal process. We may also disclose information where required or permitted by law, to protect rights or security, or in connection with a properly governed business transfer.
7. Agents, brokerages, and service providers
Information may be shared with Quan Ve, Avi Samaroo, authorized CENTURY 21 Atria Realty Inc., Brokerage personnel, a listing brokerage or professional involved in your request, and providers supporting hosting, authentication, maps, listing feeds, email, text, calendars, analytics, security, and customer communications. Providers are expected to use safeguards and process information only for authorized purposes.
8. AI and voice separation
YorkNine text and voice assistants may receive questions, preferences, conversation history, and public active IDX listing information. Protected VOW or sold listing facts, listing identifiers, prices, histories, comparables, and valuation evidence are redacted before external AI processing and are not returned through AI tools. If a protected record is open, the assistant receives only a generic protected-state notice. A user-provided address may be used to open a separate secured in-app journey without sending the resulting protected listing data back to the assistant.
9. Processing outside Canada
Some providers may process personal information outside Ontario or Canada, including in the United States. Information in another country may be available to courts or authorities under local law. We remain accountable for personal information under our control and use contractual, organizational, and technical safeguards appropriate to its sensitivity.
10. Retention
We retain personal information only as long as reasonably necessary for the purposes described and legal, brokerage, MLS®, consent, security, and dispute requirements. VOW identity, credential, agreement, and activity records may be retained for at least 180 days after the related VOW access or credential expires, and longer where required to investigate misuse or meet a legal obligation. Other records are deleted or anonymized under applicable retention practices.
11. Security and breach response
We use reasonable administrative, technical, and physical safeguards, including server-side access checks, role-based entity permissions, time-limited VOW authorization, hashed email-confirmation tokens, response limits, public/VOW feed separation, and protected-activity auditing. No online system can be guaranteed completely secure. Privacy breaches are assessed, recorded, notified, and reported where required by PIPEDA or other applicable law.
12. Access, correction, deletion, and complaints
You may ask to access or correct personal information, withdraw consent, unsubscribe from marketing, change device permissions, or make a privacy complaint. Account holders may initiate deletion through My account → Security; anyone may use the public Delete Account page. We may verify identity. Information that must be retained for law, MLS® compliance, security, dispute, or another permitted purpose may be excluded from deletion. You may also complain to the Office of the Privacy Commissioner of Canada.
13. Cookies and local storage
YorkNine uses authentication tokens, local or session storage, and similar technologies to keep you signed in, restore searches, remember preferences, secure the service, and understand basic performance. Clearing or blocking this storage may sign you out or prevent saved features from working.
14. Mobile app data collection summary (App Store and Google Play)
The following summary reflects the data types declared in the Apple App Store privacy labels and the Google Play Data Safety form for the YorkNine app. Every category below is linked to your account identity where you are signed in; no category is used for third-party advertising or sold to data brokers. • Contact information — name, email address, phone number. Collected when you create an account, request a showing, valuation or appointment, or complete VOW verification. Used for app functionality, account management and customer support. • Identifiers — account user ID, anonymous visitor ID, device push token. Used for app functionality, security and notifications. • Location — coarse or precise device location only while you use the “My location” map control; approximate area derived from your searches. Used for app functionality (centring the map). Device location is never stored on our servers, sold or used for advertising. • User content — saved homes, saved searches, messages to agents, showing and valuation requests, assistant text and voice transcripts, and any photos or documents you choose to upload. Used for app functionality and customer support. • Search history — property searches, filters and viewed listings. Used for app functionality (restoring searches, alerts, personalised suggestions) and, where you consent, product personalisation. • Usage data — product interaction such as screens viewed, features used and listing interactions. Used for analytics, app functionality and lead-management by the agents named in Section 1. • Diagnostics — crash logs, performance data and security audit events. Used for app functionality and reliability. • Audio data — microphone audio is processed only while you actively use the voice assistant, is transcribed, and the recording itself is not retained beyond processing. We do not collect financial account numbers, payment card details, health data, fitness data, browsing history outside YorkNine, precise contacts lists, or sensitive information such as racial or ethnic origin.
15. Tracking and advertising identifiers
YorkNine does not “track” you as defined by Apple’s App Tracking Transparency framework: we do not link your data with third-party data for advertising or advertising-measurement purposes, and we do not share your data with data brokers. The app does not request the Apple Advertising Identifier (IDFA) or the Google Advertising ID. Analytics are first-party or aggregated and are used only to improve YorkNine.
16. Device permissions and how to control them
The app asks for permissions only when you use the related feature, and every feature has a manual alternative: • Location — requested when you tap “My location” on the map, to centre the map on you. Deny it and you can still search any area by name, postal code or address. • Microphone — requested when you start a voice conversation with YorkNine Intelligence. Deny it and text chat and manual search remain fully available. • Notifications — requested when you turn on alerts for saved searches, price changes or agent replies. Deny it and alerts still appear inside the app and, where you chose it, by email. • Camera / Photos — requested only if you choose to add a profile picture or attach an image. You can change any permission at any time in iOS Settings → YorkNine, or Android Settings → Apps → YorkNine → Permissions.
17. Sign in with Apple and Google
You may sign in with Apple, Google or an email and password. With Sign in with Apple you may hide your email; we then receive an Apple private relay address and use it for all account and service email. We receive only your name (if shared), email or relay address and a unique account identifier from Apple or Google — never your password. You may revoke YorkNine’s access in your Apple ID or Google Account settings; doing so will sign you out, and you may then delete your YorkNine account as described in Section 12.
18. Push notifications
If you enable them, push notifications are delivered through Apple Push Notification service and Google Firebase Cloud Messaging. We store a device token linked to your account to route your alerts. Notification content (for example a new match or an agent reply) is generated by YorkNine and is not shared with Apple or Google beyond what is needed to deliver it. You can turn notifications off in the app’s Notifications settings or in your device settings; the token is deleted when you sign out on that device or delete your account.
19. Children
YorkNine is intended for adults seeking Ontario real estate services and is rated for users 17 and older (Apple) / 18 and older (Google Play). We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact the Privacy Officer and it will be deleted.
20. Third-party services in the app
The mobile app relies on the following categories of service providers, each acting under contract for the purposes stated: Base44 (hosting, authentication, database and native app shell); Mapbox (interactive maps and geocoding — map tiles are requested by your device, which reveals your IP address and the map area viewed to Mapbox under its privacy policy); PropTx / TRREB (licensed listing data); OpenAI and ElevenLabs (assistant text, speech-to-text and text-to-speech processing on redacted, non-VOW content); Twilio (SMS verification codes and text messages); Google (Calendar for appointments, sign-in); Apple (sign-in, push notifications). None of these providers is permitted to use your personal information for their own advertising.
21. Data deletion timelines
When you delete your account in the app, your profile, saved homes, searches, notifications, conversations, device tokens, showing and valuation requests and linked CRM history are removed immediately from active systems and purged from backups within 30 days. VOW identity, agreement and audit records required by MLS® rules, and records required by law or for an active dispute, are retained for the periods in Section 10 and then deleted or anonymised. Web deletion requests are acknowledged within 5 business days and completed within 30 days of identity verification.
22. Contact and policy changes
Privacy requests may be directed to: YorkNine Privacy Officer, c/o CENTURY 21 Atria Realty Inc., Brokerage, 946 Portage Parkway, Vaughan, Ontario L4K 0K3; 905-883-4747; avi.samaroo@century21.ca. Material changes will be posted in the app and on the website, and additional notice or consent will be provided where required. Effective and last updated September 2, 2026.