Privacy

Who is responsible

Veralease is run by Soft Computers Inc., a Canadian company.

Rajan Nagar is the person accountable for personal information at Soft Computers. Write to info@softcomputers.ca and the message reaches him. The contact form on this site goes to the same place.

What we collect, and why

Your email address and a password, so you have an account and can get back into it. The password is stored as a hash by our sign-in provider. We never see it.

Your phone number, once you verify one, because a verified number is what lets you list a car or message a seller. Verification is a code we text you.

Your display name, your profile photo, your city and province, a short description of you, and the languages you speak. This is the profile other people see, and you choose each part of it.

Your legal name and your mailing address, when you fill them in. A lease transfer is paperwork in a real name at a real address, and the lender asks for both.

The language you want emails in, which notifications you want, who can see your phone number, and who can see your profile. These are your settings.

Your sign-in sessions: for each device you are signed in on, when it signed in, when it was last active, the browser and operating system it reports, and the IP address it connected from. This is what the list on Sign in and security shows you, and it is how you spot a sign-in that is not yours.

Anything you write in the contact form, with the name and email you give it, so we can answer you.

When listings open, the listings you post and the messages you send. Those pages are not built yet, and this policy will be updated before they are.

We do not collect anything for advertising, and we do not sell or rent anything about you to anybody.

Where it is kept

The database and the files are with Supabase, in the Canada Central region, which is in Montréal. That is where your account, your profile, your settings and your photo live.

The website itself runs on Vercel. Vercel may handle a request from a server outside Canada, and its logs hold the address, the path and the browser of a request for a short time.

Text messages go through Twilio, which receives your phone number in order to send the code.

The bot check on the sign-in and sign-up forms is Cloudflare Turnstile. Cloudflare receives your IP address and some information about your browser when the check runs.

Email is sent by Supabase for now. When we move to Resend, the addresses we write to will go through Resend instead, and this page will say so.

So some information about you is handled outside Canada. Canadian law allows that, and we are telling you plainly because Quebec law asks us to.

Who sees what

Your profile is the public half: your display name, photo, city, province, description, languages, whether your phone and identity are verified, and how many transfers you have completed. Profile visibility on the Privacy page decides who sees it. Anyone means anyone on the internet. Signed-in members means people with a Veralease account.

Your profile photo is a file on a web address. Anyone who has that address can open the picture, the same way a profile picture works on other sites, whatever your visibility setting says. Taking the photo off your profile deletes the file.

Your legal name, your mailing address, your email, your phone number, your settings and your sign-in sessions are private. Veralease sees them. When a transfer happens, the lender sees the name and address the paperwork needs, because that is what a transfer is.

Nobody outside Soft Computers sees your information except the companies named above, and each of them only sees the part it needs to do its job.

How long we keep it

While your account exists. Delete your account on the Privacy page in Settings and your profile, your settings and your photo are deleted with it.

A sign-in session ends when you sign out of it, and you can end any of them from Sign in and security.

Contact messages are kept for two years, so we can look back at a conversation we had with you.

Your rights

You can get a copy of what we hold. Settings, then Privacy, then Download your data gives you a file with your profile, your settings and your sign-in sessions. Ask us by email for anything the file does not cover.

You can correct it. Everything you gave us is editable in Settings.

You can have it deleted. Delete account is on the same Privacy page, or ask us by email and we will do it.

For anything else, write to info@softcomputers.ca. We answer within thirty days, which is what Canadian law gives us.

If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada. If you are in Quebec, you can complain to the Commission d’accès à l’information du Québec.

Email you did not ask for

Product news is off unless you turn it on. You will find it in Settings under Notifications, and you can turn it off again there or from the link at the bottom of any such email. Canadian anti-spam law is why it works this way, and we think it is the right way round anyway.

The emails we send regardless are the ones your account needs: confirming your address, resetting your password, and telling you about something happening on your account.

Cookies

Two, and neither of them follows you. One keeps you signed in. The other belongs to the Cloudflare Turnstile bot check on the sign-in and sign-up forms.

There are no advertising cookies and no analytics on this site today. When we add a product analytics tool, this page will name it before it starts.

If something goes wrong

If information about you is lost or taken and there is a real risk of harm to you, we will tell you and we will tell the Office of the Privacy Commissioner of Canada, and the Commission d’accès à l’information if Quebec law applies. We keep a record of any such incident.

Changes to this policy

When we change it we change the date below. If a change means we are collecting something new or using it for something new, we will say so on the site before it starts.