Privacy Policy.

1. Who we are

ListingLeak is an Airbnb listing audit service operated at listingleak.ca. We provide short-term rental hosts with a written analysis of their Airbnb listing to help improve booking conversion rates.

For privacy purposes, the data controller is:

2. What information we collect

We collect information you provide directly when you purchase and request an audit. This includes:

• Contact information - your name and email address
• Listing information - your Airbnb listing URL, city or market, property type, and nightly rate
• Context you provide - your primary goal, what you believe is not working, and any additional notes you submit in our intake form
• Payment information - processed entirely by Square. We never see, receive, or store your card number or any payment credentials
• Submission metadata - the date and time your form was submitted

We do not collect sensitive personal information such as government identification, health data, or financial account details beyond what Square processes independently.

3. How we use your information

We use the information you provide solely to:

• Deliver the listing audit report you purchased, to the email address you provided
• Contact you if we have a question about your listing or need clarification to complete your report
• Send your report and any follow-up related to your specific order
• Improve our audit methodology using anonymised, aggregated patterns (never personally identifiable)

We do not use your information to:

• Send you unsolicited marketing emails
• Sell, rent, or trade your personal data to any third party
• Build advertising profiles about you
• Share your listing details with competitors or other hosts

4. How we store and protect your data

Your submitted information is received via email and may be stored in a secure spreadsheet accessible only to ListingLeak operators. We take reasonable technical precautions to protect this data from unauthorised access.

We retain your information for as long as reasonably necessary to deliver your report and maintain records of our service delivery. If you request deletion, we will remove your personal data within 30 days of your request, except where retention is required by law.

Our site is hosted on a static file host (Netlify, Cloudflare Pages, or similar) and does not run server-side code that stores data independently. Form submissions are transmitted via FormSubmit.co and, where configured, a Cloudflare Worker to Google Sheets - both secured by HTTPS.

5. Third-party services

We use the following third-party services to operate ListingLeak. Each has its own privacy policy:

• Square - payment processing. Square is PCI DSS Level 1 certified. Your payment information is handled entirely by Square and governed by the Square Privacy Policy.
• FormSubmit.co - form-to-email delivery. Your intake form data is transmitted through FormSubmit to deliver it to our inbox. Governed by the FormSubmit Privacy Policy.
• Cloudflare - infrastructure, DNS, and optional Worker processing. Governed by the Cloudflare Privacy Policy.
• Google Fonts - typography loaded from Google servers. Google may log font requests. Governed by the Google Privacy Policy.
• Meta (Facebook) and Google Ads - we may use advertising pixels or tags from Meta and/or Google to measure the effectiveness of our ads. These tools may set cookies or collect non-personally identifiable browsing data. You can opt out via aboutads.info or youronlinechoices.com.

We do not sell or share your personal information with any of these parties beyond what is necessary for the specific technical function they serve.

6. Cookies and tracking

Our website may use the following types of cookies and tracking technologies:

• Functional cookies - essential for the site to work correctly. No personal data stored.
• Analytics cookies - if enabled, used to understand how visitors navigate the site in aggregate. No individual profiling.
• Advertising pixels - if we run paid ads, Meta Pixel and/or Google Tag may be present to measure conversion events (e.g. a completed form submission). These do not identify you personally but may use your IP address and browser fingerprint in accordance with Meta's and Google's respective data policies.

You can control cookies through your browser settings. Disabling cookies will not affect your ability to read this site or submit a form, but may affect advertising measurement.

7. Your rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access - request a copy of the personal information we hold about you
• Correction - ask us to correct inaccurate information
• Deletion - request that we delete your personal data
• Withdrawal of consent - where processing is based on consent, you may withdraw it at any time
• Complaint - if you believe we have handled your data unlawfully, you have the right to complain to a supervisory authority

Residents of Canada are protected under PIPEDA (Personal Information Protection and Electronic Documents Act). Residents of the European Economic Area are protected under GDPR. Residents of California may have additional rights under CCPA.

To exercise any of these rights, email us at info@listingleak.ca. We will respond within 30 days.

8. Children's privacy

ListingLeak is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of ListingLeak after changes are posted constitutes your acceptance of the updated policy.

10. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out: