VaultIQ Privacy Policy
Last Updated: June 2026
VaultIQ Canada (“VaultIQ,” “we,” “us,” or “our”) is committed to protecting personal information with the highest level of care, responsibility, and security.
This Privacy Policy explains how VaultIQ collects, uses, discloses, stores, protects, retains, and manages personal information when users access or use the VaultIQ website, web application, software platform, artificial intelligence features, subscription services, support services, and related tools (collectively, the “Services”).
VaultIQ is a Canadian mortgage intelligence platform built for mortgage professionals. Our platform is designed to help brokers search lender information, compare lending criteria, access verified lender profiles, review mortgage scenario information, and use AI-assisted tools to support professional research and workflow efficiency.
This Privacy Policy is intended to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”), British Columbia’s Personal Information Protection Act (“BC PIPA”), and other applicable provincial privacy legislation where required.
By accessing or using VaultIQ, creating an account, submitting information, or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, disclosure, storage, and handling of your personal information as described below.
1. Our Privacy Commitment
VaultIQ treats privacy as a core part of the platform.
We are committed to:
- Collecting only the information reasonably necessary to provide and improve the Services.
- Using personal information only for clear, identified, and appropriate purposes.
- Protecting personal information through reasonable administrative, technical, and physical safeguards.
- Limiting access to personal information to authorized personnel, contractors, and service providers who require access for legitimate business purposes.
- Being transparent about how personal information is collected, used, shared, stored, and retained.
- Giving users the ability to request access, correction, deletion, or withdrawal of consent, subject to legal and contractual limits.
- Responding responsibly to privacy concerns, complaints, and potential security incidents.
VaultIQ does not sell, rent, or trade personal information.
2. Accountability
VaultIQ is responsible for personal information under our control.
We maintain privacy practices designed to protect personal information and ensure that personal information is handled in accordance with applicable Canadian privacy laws.
VaultIQ has designated a Privacy Officer responsible for overseeing privacy compliance, responding to privacy-related inquiries, and managing requests relating to access, correction, consent withdrawal, deletion, and privacy complaints.
Privacy-related questions or requests can be directed to:
VaultIQ Privacy Officer
Email: Founder@vaultiqcanada.com
If a dedicated privacy email is created in the future, VaultIQ may update this Privacy Policy to include that contact information.
3. Information We Collect
VaultIQ collects different types of information depending on how users interact with the Services.
a) Account and Profile Information
When you create an account, subscribe to VaultIQ, or use the platform, we may collect:
- Name
- Email address
- Phone number, if provided
- Company, brokerage, lender, or organization name
- Job title or professional role
- Account username
- Account login credentials
- Subscription status
- User preferences
- Communications you send to VaultIQ
- Information submitted through support requests, onboarding forms, contact forms, or platform communications
b) Payment and Subscription Information
VaultIQ uses Stripe or other trusted third-party payment processors to process subscription payments.
VaultIQ does not store full credit card numbers, banking details, or full payment card information on its own servers.
Payment processors may collect and process information such as:
- Cardholder name
- Billing email
- Billing address
- Payment card details
- Transaction history
- Subscription plan
- Payment status
- Fraud prevention signals
Payment information is handled by the applicable payment processor in accordance with its own privacy policy, security standards, and legal obligations.
c) Mortgage Scenario and Platform Input Data
VaultIQ allows users to input mortgage-related scenario information for professional research, lender matching, and workflow support.
This may include:
- Property city, region, or province
- Property type
- Loan type
- Loan amount
- Estimated property value
- Loan-to-value ratio
- Mortgage scenario details
- Deal structure
- Lender criteria
- Product type
- Submission requirements
- Appraiser-related information
- Broker-entered notes
- Search filters
- Platform questions
- AI prompts
- AI search queries
- Lender profile questions
- Other mortgage-related information entered into the platform
VaultIQ is designed for lender research, mortgage scenario analysis, broker workflow support, and access to lender intelligence.
VaultIQ is not designed to collect unnecessary sensitive borrower information.
Unless VaultIQ introduces a specific future feature expressly designed for secure borrower documentation, users should not upload, enter, or submit unnecessary sensitive personal information, including:
- Social Insurance Numbers
- Bank account numbers
- Credit card numbers
- Government-issued identification
- Driver’s licences
- Passports
- Tax documents
- Full credit reports
- Banking documents
- Income verification documents
- Medical information
- Passwords for third-party services
- Highly sensitive personal or financial information not required for the use of the Services
Users are responsible for ensuring that any information they enter into VaultIQ is appropriate, lawful, accurate, and necessary for the intended professional purpose.
d) Lender Profile and Business Information
VaultIQ may collect, organize, store, and display lender-related business information, including:
- Lender name
- Business contact information
- Product information
- Lending guidelines
- Approved appraiser information
- Submission requirements
- Mortgage products
- Policies
- Promotions
- Service areas
- Loan-to-value limits
- Minimum credit score requirements
- Property type restrictions
- Broker-facing lender criteria
- Other lender-submitted or publicly available business information
Some lender profile information may be provided directly by lenders, collected through onboarding forms, verified through lender communications, or compiled from publicly available or broker-facing sources.
VaultIQ aims to keep lender information accurate and current, but users should independently verify lender requirements before making lending, submission, compliance, or business decisions.
e) Communications and Support Information
When you contact VaultIQ, we may collect:
- Your name
- Email address
- Message content
- Support request details
- Attachments you choose to provide
- Records of communications
- Feedback, questions, complaints, or platform suggestions
We use this information to respond to inquiries, provide customer support, investigate issues, improve the platform, and maintain business records.
f) Automatically Collected Information
When you access or use the Services, VaultIQ may automatically collect certain technical and usage information, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Referral source
- Pages viewed
- Features accessed
- Search activity
- Login timestamps
- Session activity
- Error logs
- Approximate location derived from IP address
- Usage analytics
- Cookie identifiers
- Security logs
- Interaction data within the platform
This information helps VaultIQ operate, secure, improve, monitor, and troubleshoot the Services.
g) Cookies and Similar Technologies
VaultIQ may use cookies, pixels, local storage, and similar technologies to:
- Enable core platform functionality
- Maintain secure login sessions
- Remember user preferences
- Improve site performance
- Analyze platform usage
- Detect fraud, misuse, or suspicious activity
- Support security monitoring
- Improve user experience
Users may disable cookies through browser settings, but some parts of VaultIQ may not function properly without cookies.
4. How We Use Information
VaultIQ uses personal information and platform information for the following purposes:
- To provide, operate, maintain, and improve the Services.
- To create and manage user accounts.
- To authenticate users and protect login security.
- To process subscriptions and payments through third-party payment processors.
- To provide access to lender search tools, lender profiles, mortgage intelligence, and AI-assisted features.
- To personalize and improve user experience.
- To respond to inquiries, support requests, feedback, and complaints.
- To send administrative emails, account updates, service notices, payment notices, security alerts, and platform updates.
- To improve lender data accuracy and platform functionality.
- To monitor platform performance and usage.
- To troubleshoot bugs, errors, and technical problems.
- To detect, prevent, and investigate fraud, misuse, unauthorized access, abuse, security threats, and illegal activity.
- To enforce our Terms of Use and other agreements.
- To comply with legal, regulatory, tax, accounting, and business obligations.
- To maintain internal records.
- To protect VaultIQ, users, lenders, brokers, service providers, and the public.
VaultIQ does not use personal information for purposes that are materially different from those described in this Privacy Policy unless we obtain consent or are otherwise permitted or required by law.
5. Consent
By using VaultIQ, creating an account, submitting information, subscribing to the Services, or communicating with us, you consent to the collection, use, and disclosure of information as described in this Privacy Policy.
Consent may be express or implied, depending on the circumstances and the sensitivity of the information.
You may withdraw your consent at any time, subject to legal, contractual, security, and operational restrictions. If you withdraw consent, VaultIQ may no longer be able to provide some or all of the Services.
To withdraw consent, contact us at:
Founder@vaultiqcanada.com
VaultIQ may retain certain information where required or permitted by law, including for legal compliance, fraud prevention, dispute resolution, security, audit, tax, accounting, or enforcement purposes.
6. Artificial Intelligence and Automated Processing
VaultIQ includes AI-assisted features designed to help mortgage professionals search, understand, and interact with lender information and mortgage-related platform data.
AI-assisted features may allow users to ask questions, generate summaries, search lender profiles, review guidelines, compare lender criteria, and receive informational responses based on available data.
By using AI-assisted features, users understand and agree that:
- AI-generated outputs are informational only.
- AI-generated outputs do not constitute legal, financial, mortgage, lending, underwriting, compliance, or professional advice.
- VaultIQ does not replace professional judgment, lender verification, licensed advice, legal advice, or regulatory compliance review.
- AI-generated information may contain errors, omissions, outdated information, or incomplete interpretations.
- Users must independently verify lender requirements, guidelines, products, policies, pricing, submission requirements, and regulatory obligations before relying on any information.
- Users remain responsible for decisions, submissions, recommendations, communications, and actions taken using the platform.
- VaultIQ does not make lending decisions.
- VaultIQ does not approve, decline, underwrite, fund, or adjudicate mortgage applications.
- VaultIQ does not provide credit decisions or borrower-specific lending approvals.
Certain AI-powered features may securely transmit user prompts, search queries, or related platform inputs to trusted AI service providers for processing. These service providers are used only as necessary to operate and improve VaultIQ’s AI functionality.
Users should not enter unnecessary sensitive borrower information into AI prompts, including Social Insurance Numbers, bank account information, government identification, full credit reports, income documents, medical information, or other sensitive information not required for the intended use.
VaultIQ may monitor, log, review, or analyze AI interactions for quality control, security, troubleshooting, abuse prevention, platform improvement, and compliance purposes, subject to applicable law.
7. Limiting Collection
VaultIQ limits the collection of personal information to information that is reasonably necessary for identified business, operational, security, legal, and platform-related purposes.
We do not intentionally collect personal information that is not required to provide, secure, improve, or support the Services.
Users should avoid entering unnecessary personal, borrower, financial, or confidential information into VaultIQ unless the information is required for the intended platform function.
8. Limiting Use, Disclosure, and Retention
VaultIQ uses, discloses, and retains personal information only for the purposes described in this Privacy Policy, for purposes consented to by the user, or as otherwise permitted or required by law.
VaultIQ does not disclose personal information to third parties except where necessary to operate the Services, provide requested functionality, comply with legal obligations, protect security, enforce agreements, or complete business transactions as described in this Privacy Policy.
VaultIQ retains information only for as long as reasonably necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.
9. Third-Party Service Providers
VaultIQ may share information with trusted third-party service providers that help us operate, secure, support, and improve the Services.
These may include:
- Payment processors, including Stripe.
- Hosting and cloud infrastructure providers.
- Database and storage providers.
- AI service providers.
- Analytics and monitoring providers.
- Email delivery providers.
- Customer support tools.
- Security and fraud prevention tools.
- Development, maintenance, and technical service providers.
- Legal, accounting, tax, compliance, and professional advisors.
Third-party service providers are authorized to access and use personal information only as necessary to provide services to VaultIQ or as otherwise permitted by law.
VaultIQ takes reasonable steps to require service providers to protect personal information using appropriate safeguards.
VaultIQ does not sell, rent, or trade personal information.
10. Cross-Border Data Processing
VaultIQ may use third-party service providers located in Canada, the United States, or other jurisdictions.
As a result, personal information may be transferred to, stored in, accessed from, or processed outside of Canada.
When personal information is processed outside Canada, it may be subject to the laws of the jurisdiction where it is located, including lawful access requests by courts, law enforcement, regulatory authorities, or government agencies.
VaultIQ takes reasonable contractual, technical, and organizational steps to protect personal information processed by service providers outside Canada.
11. Security Safeguards
VaultIQ uses reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, misuse, modification, destruction, or other improper handling.
These safeguards may include:
- Secure hosting infrastructure.
- HTTPS encryption for data transmission.
- Access controls.
- Role-based permissions where appropriate.
- Password protection.
- Password hashing or secure credential handling.
- Authentication systems.
- Restricted administrative access.
- Least-privilege access practices.
- Monitoring and logging.
- Firewalls and security tools.
- Backups and recovery procedures.
- System maintenance and updates.
- Vendor security review where appropriate.
- Internal privacy and security practices.
- Limiting access to information to individuals and service providers with a legitimate need to know.
Although VaultIQ takes privacy and security seriously, no method of transmission, storage, software operation, or internet-based service can be guaranteed to be completely secure.
Users are responsible for protecting their own account credentials, using strong passwords, keeping login details confidential, and notifying VaultIQ immediately of any suspected unauthorized access or account misuse.
12. Security Incidents and Breach Response
VaultIQ takes potential security incidents seriously.
If VaultIQ becomes aware of a security incident involving personal information, we will take reasonable steps to investigate, contain, assess, and respond to the incident.
Where required by applicable privacy law, VaultIQ will notify affected individuals, regulatory authorities, and any other required parties if a breach creates a real risk of significant harm or otherwise triggers a legal notification requirement.
VaultIQ may also keep records of privacy breaches and security incidents as required by applicable law.
13. Accuracy of Information
VaultIQ makes reasonable efforts to ensure that personal information used by the platform is accurate, complete, and up to date for the purposes for which it is collected and used.
Users are responsible for keeping their account information accurate and current.
Users may request correction of inaccurate or incomplete personal information by contacting VaultIQ.
Lender information, guidelines, policies, appraiser lists, products, and submission requirements may change over time. VaultIQ aims to provide useful and accurate lender intelligence, but users should verify lender information directly with the applicable lender before relying on it.
14. Data Retention
VaultIQ retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by law.
Retention periods may depend on:
- The type of information.
- The reason it was collected.
- The user’s subscription status.
- Legal, tax, accounting, regulatory, and audit requirements.
- Fraud prevention and security needs.
- Dispute resolution.
- Enforcement of agreements.
- Backup and disaster recovery requirements.
- Legitimate business purposes.
When personal information is no longer required, VaultIQ may delete, anonymize, aggregate, or securely archive it in accordance with applicable law and internal practices.
Backups and archived copies may persist for a limited period before deletion in accordance with VaultIQ’s backup and retention procedures.
15. Account Deletion
Users may request deletion of their VaultIQ account by contacting:
Founder@vaultiqcanada.com
Upon receiving a deletion request, VaultIQ will take reasonable steps to delete or anonymize personal information associated with the account, subject to legal, contractual, operational, security, and legitimate business requirements.
VaultIQ may retain certain information where necessary to:
- Comply with legal obligations.
- Maintain payment, tax, accounting, or audit records.
- Resolve disputes.
- Enforce agreements.
- Prevent fraud or misuse.
- Protect platform security.
- Maintain backup records for a limited period.
- Comply with regulatory or legal requests.
Deletion of an account may result in loss of access to the Services and may not immediately remove all information from backups, logs, or records where retention is permitted or required by law.
16. User Privacy Rights
Subject to applicable law, users may have the right to:
- Request access to personal information VaultIQ holds about them.
- Request correction of inaccurate or incomplete personal information.
- Withdraw consent to certain uses of personal information.
- Request deletion of an account and associated personal information.
- Ask questions about VaultIQ’s privacy practices.
- Challenge VaultIQ’s compliance with applicable privacy laws.
- File a privacy complaint with VaultIQ.
- Contact the applicable privacy regulator if concerns are not resolved.
To make a privacy request, contact:
VaultIQ Privacy Officer
Email: Founder@vaultiqcanada.com
VaultIQ may need to verify your identity before responding to privacy-related requests.
VaultIQ will respond to privacy requests within a reasonable time and in accordance with applicable law.
17. Marketing Communications
VaultIQ may send users service-related emails, administrative notices, security alerts, subscription updates, product updates, onboarding messages, and support communications.
Where permitted by law, VaultIQ may also send marketing or promotional communications about platform features, updates, offers, or services.
Users may unsubscribe from promotional emails by using the unsubscribe mechanism in the email or by contacting VaultIQ.
Even if a user unsubscribes from marketing communications, VaultIQ may still send important transactional, account, payment, security, legal, or service-related communications.
18. Cookies, Analytics, and Platform Monitoring
VaultIQ may use cookies, analytics tools, monitoring tools, and similar technologies to understand how the Services are used, improve platform performance, detect technical issues, and protect security.
Analytics and monitoring information may include usage patterns, feature interactions, session activity, device information, browser information, IP address, error reports, and performance data.
VaultIQ uses this information to improve the platform, maintain reliability, detect misuse, prevent fraud, and support users.
Users can manage cookies through browser settings. Disabling cookies may affect platform functionality.
19. Business Transfers
VaultIQ may disclose or transfer information in connection with a proposed or completed business transaction, including a merger, acquisition, financing, investment, reorganization, sale of assets, transfer of ownership, partnership, due diligence process, or similar transaction.
If such a transaction occurs, VaultIQ will take reasonable steps to ensure that personal information remains protected and is used only for appropriate purposes.
20. Legal and Regulatory Disclosure
VaultIQ may disclose personal information where we believe it is reasonably necessary to:
- Comply with applicable law.
- Respond to court orders, subpoenas, warrants, legal processes, or regulatory requests.
- Cooperate with law enforcement, regulators, or government authorities.
- Enforce our Terms of Use or other agreements.
- Protect the rights, safety, property, or security of VaultIQ, users, lenders, brokers, service providers, or others.
- Detect, prevent, or investigate fraud, abuse, security incidents, or unauthorized activity.
- Establish, exercise, or defend legal claims.
21. Children and Minors
VaultIQ is intended for professional users, including mortgage brokers, lenders, administrators, and other authorized business users.
VaultIQ is not intended for children or individuals under the age of 18.
VaultIQ does not knowingly collect personal information from children.
If VaultIQ becomes aware that personal information has been collected from a child without appropriate authorization, VaultIQ will take reasonable steps to delete the information.
22. Confidentiality of Lender and Broker Information
VaultIQ recognizes that lender, broker, and mortgage-related business information may be confidential or commercially sensitive.
VaultIQ takes reasonable steps to protect confidential business information submitted through the platform.
Users must not upload, submit, disclose, or share information through VaultIQ unless they have the lawful right and authority to do so.
Users are responsible for ensuring that lender information, borrower information, broker information, and business information submitted to VaultIQ is accurate, appropriate, lawful, and authorized.
VaultIQ may use lender-submitted information to build, update, display, and improve lender profiles, lender intelligence, search results, AI-assisted answers, and related platform features.
23. No Sale of Personal Information
VaultIQ does not sell personal information.
VaultIQ does not rent personal information.
VaultIQ does not trade personal information.
VaultIQ does not provide personal information to third parties for their independent marketing purposes without consent.
24. Changes to This Privacy Policy
VaultIQ may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal obligations, business practices, security practices, or privacy requirements.
When changes are made, VaultIQ will update the “Last Updated” date at the top of this Privacy Policy.
Material changes may be communicated through the VaultIQ website, web application, email, or other appropriate notice.
Continued use of the Services after an updated Privacy Policy is posted means that you acknowledge and accept the updated Privacy Policy.
25. Contact Information
If you have questions, concerns, complaints, or requests related to this Privacy Policy or VaultIQ’s privacy practices, contact:
VaultIQ Canada
Attention: Privacy Officer
Email: Founder@vaultiqcanada.com
VaultIQ will review privacy inquiries and respond in accordance with applicable Canadian privacy laws.
26. Summary
VaultIQ is built to provide mortgage professionals with secure, intelligent, and efficient access to lender information.
We collect only what is reasonably necessary, use information for legitimate platform and business purposes, protect information through reasonable safeguards, limit disclosure to trusted service providers and lawful purposes, and give users meaningful privacy rights.
VaultIQ’s privacy standard is simple:
Your information should be handled with the care, structure, and protection expected from a real vault.