Version: November 5, 2026.
1. Who is responsible for your information?
Pleximo is a rental-management and financial-tracking application operated personally by its founder, without an incorporated company. In this policy, “Pleximo,” “we” and “our” refer to the operator providing the service under the Pleximo brand.
General inquiries: info@pleximo.app.co. Support: support@pleximo.app.co.
Person responsible for protecting personal information: this role is held by the operator of Pleximo. For a privacy request or complaint, write to support@pleximo.app.co, with “Privacy” in the subject line.
2. Scope and sources of information
This policy covers the public website and the Pleximo service with accounts and cloud storage. It applies to users and to people whose information a user enters, including tenants, co-owners and other contacts.
We receive information when you create an account, complete a form, import transactions, upload documents, use the service or contact us. An authorized member may also enter information about someone else. Technical providers process some connection and operational data.
Older versions using local financial storage are separate: their information is not automatically transferred into a cloud account. Deleting an account does not delete those older copies or your downloads.
3. Information processed
Depending on the features used, information includes:
- Account and identity: email, authentication information managed by Supabase Auth, first and last names, optional phone number, optional photo and language preference. Passwords are not saved in financial records.Where terms acceptance is requested at signup, the version and date of your declaration are kept with the account data. This is not an independent, immutable register.
- Properties and rentals: label, type, address when provided, units, contacts, names, emails, phone numbers, aliases and notes, leases, dates, rents, renewals, terminations, pet information and payment agreements.
- Finances and annual preparation: imported transactions, dates, descriptions, sources and amounts, categories, notes, budgets, reconciliations, rules and histories, mortgage principal/interest breakdowns, personal use, annual owner names and shares, and private preparation contact details.
- Documents: PDFs and images, filenames, titles, descriptions, periods and links to related records. Their contents depend on what you or another member uploads.
- Access and operations: property memberships, invitations and target emails, roles, operations and information needed for retries and security. Support messages contain the information you choose to send.
Hosting and authentication providers may process IP addresses, request metadata and sign-in events for operations and security. Log details and retention depend on provider configuration; no uniform period is guaranteed here.
For a CSV import, the file is sent to the server and parsed again before transactions are saved. This operation does not automatically archive the CSV as a document. A separately saved document may remain saved even if you later cancel the related financial edit.
4. Why we use information
We process information to create and secure accounts, provide access to authorized properties, organize rentals, record and reconcile transactions, apply selected rules, display budgets and reports, prepare available exports, manage documents and answer requests. Information also helps prevent unauthorized access, handle errors and meet applicable legal obligations.
Email, authentication details and the names required by account setup are necessary for those functions. Profile phone numbers and photos are optional. Other information depends on the records and features used. Missing necessary information may prevent use of a feature.
Where consent is required, it must be appropriate to the purpose and sensitivity of the information. This policy does not replace separate consent required for a particular use.
5. Information about others and sharing
If you enter information about someone else, you must have the necessary authority or other lawful basis, provide required notices and limit collection to relevant information. Avoid unnecessary social insurance numbers, identity documents or other sensitive information. Permission to use Pleximo does not automatically authorize every collection.
Authorized property members can view and manage its records according to their permissions. Administrators manage access, among other responsibilities. Members' emails may be visible to other authorized members of that property. Being recorded as a tenant or owner does not provide a login or access permission.
Your private profile and photo are separate from shared records. Explicitly copying your contact details into a property contact makes that copy shared information; editing your profile does not automatically replace those copies.
Removing access prevents subsequent consultations authorized by that access, but does not recall documents or exports already downloaded. We remain responsible for our own obligations concerning information we process.
6. Providers and processing outside Quebec and Canada
The service uses Supabase for authentication, the database and private files. Render hosts the server application and processes information passing through it. Resend transports authentication emails through Supabase. These providers and their subprocessors support hosting, message delivery, security and technical support. They may process information necessary for these services, including contact details and authentication email content.
Information may be processed or accessed outside Quebec and Canada, including in the United States, depending on providers and their support services. It may then be subject to local laws and legally authorized access requests. A Canadian database location does not guarantee that all processing, logs or support access stay in Canada.
Information may also be disclosed where required or permitted by law, within applicable limits. Privacy boundaries between members do not mean the operator and technical providers cannot access some information for operations, support or security. Access and disclosures remain subject to applicable protection obligations.
7. Cookies and browser preferences
The account service uses cookies for authentication and continuity. A cookie also remembers the selected property, with a configured maximum lifetime of one year. Language is kept in browser local storage and may be synchronized with the account for emails.
The reviewed code does not integrate advertising, third-party audience analytics or session replay.
You can clear or block cookies and browser storage; some features, including sign-in, may then stop working. If optional tools requiring your choice are added, appropriate notices and controls must be presented before their use.
8. Security
The architecture includes identity verification, property permissions, database access controls and private storage for documents and photos. Private responses are configured to avoid shared caching. These measures reduce risks without guaranteeing absolute security. The service operator is responsible for handling privacy reports, assessing incidents, taking corrective measures and notifying people or authorities where required by law. Report suspected incidents to support@pleximo.app.co.
Protect your credentials, use a secure device and check export recipients. Never send your password or a sign-in link in a support request. File-format checks do not constitute antivirus scanning.
9. Retention and deletion
Saved information remains in the service until removed through available operations or applicable obligations. Retention must be limited to justified purposes and legal obligations. No automatic erasure after inactivity or uniform retention period is announced. Logs, technical histories and backups may follow separate provider cycles. You can request details about retention of information concerning you.
“Delete my account,” in account security, requires confirmation and your current password. When the operation completes, it removes the authentication identity, associated sessions, private profile and photo, private tax preparations and that account's access. Properties where you are the sole member, including their data and files, are deleted.
Properties with other members retain financial information, rental records, documents and shared contacts. Some historical account references are detached without deleting financial facts. The last administrator of a shared property must transfer administration before deleting their account. Keeping information about you in these records remains subject to your rights and a lawful basis; you can request a review under section 10.
An interrupted deletion may already have removed some files and require a retry. Document deletion may remove access before physical cleanup finishes. Incomplete uploads, metadata or histories may remain until cleanup or under applicable retention rules. Property archiving and Trash do not necessarily constitute erasure.
This feature does not directly erase provider logs, emails, backups or copies downloaded by other people. Deletion therefore does not guarantee immediate erasure of all copies. An annual dossier is a documentary export, not a restorable application backup. This document does not guarantee backup coverage or expiry timelines.
10. Requests and complaints
You can request access to your information, correction and, where the law provides, communication in a structured, commonly used format. You can also request a review of deletion or withdraw consent, subject to applicable legal and contractual limits. Withdrawal may make some features unavailable; its consequences will be explained.
Send requests to the responsible person identified in section 1, even if you do not have an account. Describe your request without unnecessarily attaching sensitive documents. Proportionate verification of identity or authority may be needed. Access may be limited to protect others' information or comply with the law.
Access and correction requests governed by Quebec law receive a written response within the applicable deadline, generally no later than 30 days after receipt. Restrictions or refusals will be explained with applicable remedies. You may complain to Quebec's Commission d'accès à l'information and, where it has jurisdiction, the Office of the Privacy Commissioner of Canada. You do not have to waive a remedy to contact us.
11. Changes and contacts
The update date appears at the beginning of this policy. Significant changes will be brought to your attention through an appropriate channel. New consent will be requested where required; changing a policy does not itself establish consent to a new use.
General inquiries: info@pleximo.app.co. Support: support@pleximo.app.co. For a privacy request, use the responsible person's contact details in section 1.