Privacy policy

Version of November 15, 2026

This policy explains, in plain terms, what personal information Bailo collects, why, who has access to it and what your rights are. It is established in accordance with Québec's Act respecting the protection of personal information in the private sector. The French version is the official version.

1. Who is responsible for your information

Bailo is operated by [dénomination sociale de la société, à compléter], [adresse de l'établissement au Québec, à compléter].

Person in charge of the protection of personal information: [nom et titre du responsable de la protection des renseignements personnels, à compléter] — [courriel de contact, à compléter] — [adresse de l'établissement au Québec, à compléter].

You may send them any question, any request for access or rectification and any complaint.

2. The information we collect

We collect only the information necessary for the purposes described in section 3, and we collect it from you.

• Account: first name, last name, email address, password (kept in a form we cannot read), date and version of your consent.
• Application file: phone, current address, household situation, number of occupants, employment situation, seniority, income bracket, declared credit score (optional), pets, smoker status, desired move-in date, presentation text.
• Supporting documents (optional): identity document, proof of income, proof of employment, proof of credit score, reference letter. These documents contain sensitive information; we collect them only with your express consent, given when you file them.
• Listings: description, photos and address of the dwelling, rent, lease dates.
• Messaging and visits: messages exchanged, visit times proposed and accepted.
• Assignment follow-up: steps completed, date the notice was sent to the landlord, the landlord's response, and the signature the assignor draws on screen on their notice.
• Search alerts: the city, radius and criteria you ask us to watch, and your agreement to receive an email. Tenants only see a number of people per city, never your identity.
• Reports and blocks you make.
• From the assignor, to let them send the notice: the landlord's name and, if provided, email and phone. Only the assignor has access to them.
• From the landlord, when responding to a notice: their name, their signature drawn on screen, their response, the reason they give and any question.
• Proof of lease, if you request the "verified" badge.
• Waiting list: the email address you leave to be told when the service opens, and the language of the page.
• Settings kept on your device: language, appearance, search area, notifications already seen.

We use no targeted advertising, no audience measurement tool, no tracking cookie and no technology that locates or profiles you. The information pages of the website (guides) can be read without an account and collect no information, other than what any web server receives to display a page (IP address, browser type). Bailo does not ask for your location: the map displays listings, not where you are.

3. Why we use it

• To create and secure your account.
• To publish your listings and send your applications.
• To allow the assignor to assess a file, organize a visit and send the assignment notice to the landlord.
• To prevent fraud, handle reports and keep the service secure.
• To monitor, in statistical form, how the service operates.
• To tell you when the service opens, if you joined the waiting list.

We do not use your information for other purposes without your consent. No decision concerning you is made by fully automated processing.

4. Who has access to what

• Everyone: your listing, without the exact address (city, first part of the postal code and a point on the map deliberately offset by about a hundred metres) and without your name.
• The assignor to whom you send an application: your first name, your file and your supporting documents, for viewing only.
• That same assignor, once your application is selected and as soon as they declare that the visit has taken place: your name, email, phone and address.
• The selected applicant: the exact address of the dwelling.
• Your correspondent: the messages you send them.
• The landlord of the dwelling, when the assignor sends the assignment notice: the name and address of the selected applicant — which the law requires in that notice —, a summary of their file (situation, employment, income bracket, declared credit score if provided) and their supporting documents, which the landlord can view without downloading, with a watermark bearing the landlord's name. The applicant consents to this before the notice is sent. The link given to the landlord stops working 60 days after it is sent, and the copies of the documents stop being readable 61 days after they are filed; the assignor keeps the summary sent until their listing is deleted. Bailo does not verify the identity of the person opening the link.
• The Bailo team: listings, the progress of applications (without applicants' contact details), reports and proofs of lease submitted for verification. This access is restricted to the people who need it for moderation and support.

We do not sell any personal information and do not communicate any to third parties for commercial purposes.

We may disclose information without your consent only where the law requires or permits it, for example at the request of a court or a competent authority. If the operation of Bailo is transferred to another business, your information is passed on to it to the extent necessary to continue the service, under the conditions set by law; you will be notified.

5. Our providers and communications outside Québec

• Google (Firebase) hosts the application. The database and files (photos, supporting documents) are kept in a data centre located in Montréal. The sign-in service (email and password) is operated by Google and may process that information outside Québec, in particular in the United States.
• OpenStreetMap and Photon (geocoding): when a listing is published, the address of the dwelling is sent to these services, operated outside Québec, to obtain the point displayed on the map; so is the name of the city when you choose a search area. These services receive the IP address of your device, but not your name or account. The exact position is not kept.
• jsDelivr: the web version loads from this service the component that displays PDF files; it receives the IP address of your device.
• OpenStreetMap (map tiles): displaying the map sends that service the IP address of your device, as for any web page.

Before communicating information outside Québec, we assess the privacy-related factors and make sure it receives adequate protection there.

6. How long we keep it

• Your account, file and documents: until your account is deleted. You may remove a document at any time.
• Your listings: they stop being displayed 60 days after publication, unless renewed, and are deleted with your account or at your request.
• The file given to the landlord: its link stops working 60 days after it is sent and the copies of the documents 61 days after they are filed; they are removed earlier if you withdraw your application or delete your account. Once the landlord has responded, the response and the summary of the file are kept until the link expires, so that the response cannot be erased.
• Reports: as long as necessary for handling them and preventing fraud.
• The waiting list: until the opening message is sent, and twelve months at most. You may ask for your address to be removed at any time.

When your account is deleted, your profile, file, documents, listings, applications, alerts and favourites are destroyed. If an assignment notice has already been sent to a landlord, the summary it contains (name, address, situation) stays with the assignor who sent it, until their listing is deleted. Messages already sent remain visible to your correspondent, marked "Deleted account".

7. Your rights

You may, free of charge:

• view and correct your information, directly in the application or by writing to us;
• obtain a copy of the information you provided to us, in a structured, commonly used technological format;
• withdraw your consent, which may make some services unavailable;
• delete your account (Profile > Account management);
• ask us to stop disseminating information concerning you.

We respond in writing within thirty (30) days. If our response does not satisfy you, you may contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

8. How we protect it

Access to data is controlled by rules applied on the server: each person can only read what concerns them, except listings, which are public, and the file given to the landlord, accessible to whoever holds its secret link. Communications are encrypted. The application offers no function to download or share supporting documents, which are displayed with the name of the person viewing them. The mobile app blocks screenshots of these documents; this protection does not exist in a web browser. Contact details are hidden in the messaging system until the visit.

As no system is infallible, if a confidentiality incident presents a risk of serious injury, we notify the persons concerned and the Commission d'accès à l'information, and record it in our register of incidents.

9. Minors

Bailo is intended for people aged 18 and over. We do not knowingly collect information concerning a minor.

10. Changes to this policy

We publish any change in the application and notify you when it is significant.