1. Scope of This Policy
Tojuco provides technology that helps real-estate media companies and their authorized users manage services, appointments, vendors, property information, media, invoicing, and related business workflows.
In some circumstances, Tojuco collects and uses personal information for its own business purposes, such as managing accounts, subscriptions, support, and website inquiries. In other circumstances, we process information on behalf of a business customer that controls its own branded portal and determines how information is collected and used.
This Policy applies to information under Tojuco's control. Where a customer's privacy policy also applies, users should review that policy for information about the customer's own practices.
2. Information We Collect
Depending on how you interact with the Services, we may collect account and contact information, business and professional information, property and order information, billing and transaction information, communications and support information, technical and usage information, and integration information.
This may include names, business names, email addresses, telephone numbers, user roles, vendor profiles, appointment information, access instructions, property media, billing contacts, invoice details, payment status, support requests, IP addresses, browser and device information, log data, and information from integrations that you or your organization authorize.
We may also receive information from business customers, authorized users, service providers, and other parties where collection is permitted by law.
3. How We Use Personal Information
We will not use personal information for unrelated purposes without obtaining any consent required by applicable law.
- Creating, administering, and securing accounts and organizations.
- Providing scheduling, order management, media delivery, invoicing, and other platform functionality.
- Connecting authorized users, agents, vendors, and administrators to the information needed for their roles.
- Processing payments and maintaining financial and transaction records.
- Operating integrations requested or authorized by customers.
- Responding to inquiries, providing support, and communicating service-related information.
- Maintaining, troubleshooting, improving, and protecting the Services.
- Detecting fraud, unauthorized activity, and security incidents.
- Complying with legal, regulatory, accounting, and contractual obligations.
- Sending marketing communications where permitted by law and in accordance with your communication preferences.
4. Consent and Your Choices
We obtain consent where required and provide information about the purposes for which personal information is collected, used, and disclosed. The form of consent may vary depending on the sensitivity of the information and the circumstances.
You may withdraw consent for certain activities, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide particular features or services.
You can unsubscribe from marketing emails using the link provided in those messages or by contacting us. Operational communications, such as account security notices, invoices, and important service updates, may continue where necessary or permitted by law.
5. How We Share Information
We may disclose personal information to your organization and authorized users according to roles, permissions, and account configuration.
We may engage service providers for hosting, cloud storage, payment processing, email delivery, analytics, customer support, security, and other business operations, subject to appropriate contractual and security requirements.
Information may be transferred to third-party platforms, including accounting, calendar, payment, or MLS-related systems, when an organization enables an integration or requests a connected service.
We may disclose information where required or permitted by law, to protect rights and safety, investigate misuse, respond to lawful requests, or in connection with a business transaction subject to appropriate safeguards.
We do not disclose personal information to third parties for their independent marketing purposes without the consent required by law.
6. Property Media and Public Content
The Services may allow users to upload and publish property photographs, videos, floor plans, tours, and other listing materials. Some of these materials may contain personal information, including images of individuals, personal belongings, or details about a property.
Business customers and users are responsible for ensuring they have the necessary rights, permissions, and lawful authority to collect, upload, use, and publish the materials they submit.
Content designated for public publication, such as a property tour or marketing page, may be accessible to anyone with the relevant public link and may be viewed, shared, or indexed by third-party services depending on the publication settings.
7. Cookies and Analytics
Our website and platform may use cookies and similar technologies to maintain sessions, remember preferences, support security, understand usage, and improve performance. Where enabled, analytics or marketing technologies may also collect information about interactions with our website.
You may be able to manage cookies through your browser or the consent controls provided on our website. Disabling certain cookies may affect the functionality of the Services. Where required by law, we will obtain consent before using non-essential tracking technologies.
8. Data Storage and International Transfers
Personal information may be stored or processed in Canada or in other jurisdictions where Tojuco or its service providers operate. When information is processed outside Canada, it may be subject to the laws of that jurisdiction, including lawful access by public authorities.
We use contractual, organizational, and technical measures appropriate to the nature of the information and the risks associated with its processing.
9. Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, and alteration. These measures may include access controls, authentication, secure transmission, monitoring, backups, and restrictions on personnel access, as appropriate.
No electronic system can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials and notifying us promptly if they suspect unauthorized access.
10. Retention and Deletion
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, meet legal or contractual requirements, resolve disputes, and maintain appropriate business records.
Retention periods may vary depending on the type of information, the account relationship, and applicable legal requirements. Information processed on behalf of a business customer may be retained or deleted in accordance with that customer's agreement with Tojuco and applicable law.
When information is no longer required, we take reasonable steps to securely delete, destroy, or anonymize it, subject to lawful retention requirements and applicable backup processes.
11. Access, Correction, and Privacy Requests
Subject to applicable law, you may request access to personal information we hold about you, ask that inaccurate information be corrected, or inquire about how your information is used and disclosed. You may also request deletion or withdrawal of consent where available under applicable law.
If your information is held within an account operated by a Tojuco business customer, we may direct your request to that organization or assist it in responding, as appropriate.
To submit a privacy request or complaint, contact our Privacy Officer. We may need to verify your identity before responding. If you are dissatisfied with our response, you may have the right to contact the applicable privacy regulator.
12. Children's Privacy
The Services are intended for business use and are not directed at children. We do not knowingly permit children to create independent accounts without appropriate authorization. If we become aware that personal information has been collected from a child without the consent or authority required by law, we will take appropriate steps to address the situation.
13. Third-Party Services
The Services may contain links to third-party websites or connect with external platforms. Those services operate under their own privacy policies and terms. Tojuco is not responsible for the privacy practices of third parties that operate independently of us.
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our Services, information practices, or legal requirements. The updated Policy will be posted with a revised effective date. Where required by law, we will provide additional notice or obtain consent for material changes.