Privacy Policy
Last updated: October 4, 2026
What we collect
The Mississauga research beta is available without an account. Toronto reports use the account access described by the service. We do not run advertising trackers or third-party analytics. We do measure usage ourselves, described below, and that usage measurement never includes the addresses you search. Mississauga source-evidence records are described separately below.
If you create an account, we store:
- Your email address, and your name and profile photo if you sign in with LinkedIn.
- Reports you save, along with any edits and notes you add to them.
- Data corrections you submit, so we can review and act on them.
- Standard authentication records, such as when you last signed in.
Usage measurement
We measure how the product is used so we can fix what is broken and drop what nobody opens. It is built in-house and deliberately narrow. There is no third-party analytics script, no advertising tracker, and no cookie or stored identifier of any kind.
What is recorded:
- Whether a lookup succeeded, failed or timed out, and how long it took.
- Which report tabs are opened, and whether a report was copied, printed, shared or saved.
- How often a request is turned away for want of an account or a rate limit.
Usage measurement does not record the addresses you search. When a lookup fails we keep only its shape, such as whether it had a street number or a unit designator, because that is what tells us why searches fail. The search itself is not stored in usage events.
Events are grouped by a random identifier that exists in your browser tab’s memory for as long as the page is open. It is not a cookie, it is never written to disk, it disappears when you reload, and it cannot be linked to you or to another visit.
If your browser sends Do Not Track or Global Privacy Control, we record no usage events.
Mississauga source evidence
A Mississauga lookup sends the civic address to the City’s public data service hosted by Esri. To verify the evidence returned, we retain source request records in a private evidence directory. These include the City source URL, query parameters (including the civic address), returned public City records, request and observation times, response checksums, and any sanitized failure reason. A random identifier groups requests in a source session.
These evidence records do not include your IP address, account, email, cookies or visitor headers. Invalid or wrong-city inputs and requests without agreement to the City terms do not produce source requests. Evidence records support source verification; they are retained without a fixed deletion schedule at present. Contact us with questions about them.
Consulting and City data-error links open a draft in your own mail app. The website does not send or store that draft. You choose whether to send it to the displayed recipient.
How we use it
To operate the service: authenticating you, showing your saved reports across devices, reviewing corrections, and diagnosing errors. We do not sell your personal information, and we do not share it for advertising.
Service providers
Running the service means sending some data to infrastructure providers who process it on our behalf:
- Supabase: accounts, authentication, and your saved reports.
- Vercel and Railway: application and API hosting. They process request logs.
- Cloudflare R2: map tile storage.
- Esri: map imagery, address lookups from parcel clicks, and City of Mississauga address, tax-parcel and zoning source queries.
- Anthropic: reads published City development-application descriptions during our own data ingest. Nothing you type is sent there.
Some of these providers process data outside Canada, including in the United States.
Your choices
You may request access to, correction of, or deletion of your account data at any time by contacting us. Deleting your account removes your profile and saved reports.
Contact
Questions about this policy: privacy@torontozoning.com.