1. Who We Are (Controller of Your Data)

Green Smart Home Inc. ("Green Smart Home," "we," "us," "our") is an Ontario-incorporated company at 2425 Matheson Blvd E, 8th Floor, Mississauga, ON L4W 5K4. We are licensed by the Electrical Safety Authority (ESA) and an approved HRSP (Home Renovation Savings Program) installer. We are the data controller responsible for your personal information under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.

Our designated Privacy Officer can be reached at privacy@greensmarthome.ca or (613) 909-4835 ext. 2.

2. Information We Collect

2.1 Information You Provide

• Identifiers: Full name, email, phone, postal/install address
• Property Information: Roof type/age, square footage, electrical panel specs, hydro/gas bills, photos of your home for AI audit
• Financial Information (only if applying for financing): Income, employment, address and identification details requested for the application; any requested SIN fragment is sensitive information, and full SINs should not be included in notes, chat or uploads
• Contract Information: Signed agreements, e-signatures, proof of identity for HRSP applications
• Communications: Emails, SMS, call recordings (with notice), support tickets

2.2 Information Collected Automatically

• Device/Usage: IP address, browser, OS, pages viewed, clicks and calculator interactions, subject to applicable consent and retention requirements
• Cookies & Pixels: See our Cookie Policy for details and opt-out controls
• System Production Data: Once installed, your solar inverter (Enphase/SolarEdge) transmits production readings to us for monitoring and warranty support

2.3 Information From Third Parties

• Utility: Hydro One/Toronto Hydro/etc. — net-metering and PTO confirmations (with your written authorization on the interconnection application)
• Credit bureaus: Soft-pull pre-qualification only with consent
• Property records: Public MPAC roof/property data
• Referrals: Name and email of the person who referred you

3. Identified Purposes and Consent

We collect, use, and disclose your personal information only for the purposes identified below. Where required, we obtain your express consent at the point of collection.

4. Who We Share Information With

5. Cross-Border Data Transfers

We use Base44 to host this application. Base44 documents United States storage by default; we do not represent this application as Canadian-hosted. Hosting, AI, communications, and other service providers may process information outside Canada, where it may be subject to lawful access by foreign authorities. Contact our privacy office for information about applicable providers and safeguards. Cross-border processing does not remove our responsibilities under applicable Canadian privacy law.

6. Privacy Requests Under Applicable Law

Email privacy@greensmarthome.ca with subject "Data Rights Request" — we respond within 30 days at no charge.

7. Retention Review

The periods below are proposed policy targets requiring operational and legal confirmation, not a claim that automatic deletion is currently implemented. Records must be reviewed for applicable tax, warranty, consent and legal-hold requirements before deletion.

• Quote/lead data: 3 years from last interaction (then deleted/anonymized)
• Signed contracts & invoices: Proposed 7-year policy, subject to applicable tax recordkeeping rules and legal holds
• HRSP rebate records: Retention to be confirmed against the applicable program's audit requirements
• Warranty & monitoring data: Length of warranty (typically 25 years for panels)
• Marketing consent records: 3 years after withdrawal (CASL audit trail)
• Call recordings: 12 months (quality assurance)

8. Security (PIPEDA Principle 7)

• Base44 documents encryption at rest and in transit; this is not end-to-end encryption or a promise of a specific cipher or hosting region.
• Access restrictions are enforced through account roles and record permissions, with additional authorization checks for protected actions.
• New homeowner portal document uploads use private storage and time-limited access links. Historical files require separate review and migration.
• Under PIPEDA, breaches posing a real risk of significant harm must be reported to the Privacy Commissioner and affected individuals notified as soon as feasible. Records of all breaches must be retained for at least 24 months.
• Security measures do not constitute a certification of legal compliance; safeguards and organizational procedures require ongoing review.

9. Automated Decisions & AI

We use AI tools (e.g., AI Home Audit, AI Pipeline Coach, AI Proposal Assistant) to generate estimates and suggestions. AI-generated financing estimates are not credit approvals or lender decisions. Final lender approval and contract acceptance require the appropriate authorized review. You have the right to request human review of any AI-assisted decision.

10. Children's Privacy

Our services are for adults aged 18+ (age of majority in Ontario). We do not knowingly collect data from minors. Parents/guardians who believe a minor has provided info should contact us for immediate deletion.

11. Changes to This Policy

Material changes are notified by email at least 30 days in advance and via a banner on the site. The "Effective" date above always shows the current version.

12. Contact & Complaints