1. Introduction
Welcome to Weblo ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI employee services, including our SMS/text messaging features.
Data protection is central to how we build and operate Weblo. Our platform is designed with security and privacy in mind, and we handle your information in accordance with applicable privacy laws, including Quebec's Act respecting the protection of personal information in the private sector ("Law 25").
Weblo plays two roles. We are responsible for the information we collect for our own purposes, for example when you visit our website, request a demo, or create an account. When we provide our AI employee services to property management companies, we process the personal information of their tenants, prospects, owners, and other contacts on their behalf, under a written agreement. In that case, the property management company remains responsible for that information, and we use it only to provide the services as instructed.
Quebec residents
Our Law 25 Privacy Notice explains how we comply with Quebec's private-sector privacy law, including how to contact our person in charge of the protection of personal information, your rights, and how to file a complaint.
2. Information We Collect
We may collect the following types of information:
- Personal Information: Name, email address, phone number, and other contact details provided during registration or service use.
- Usage Data: Information about how you interact with our services, including call recordings, transcripts, SMS message logs, and usage statistics.
- Technical Data: IP address, browser type, device information, and cookies.
- Phone Numbers & SMS Data: Mobile phone numbers provided for the purpose of receiving transactional SMS notifications related to property management services, including maintenance updates, appointment confirmations, rent payment reminders, and service notifications.
- Business Information: Company name, number of units managed, property management software used, and areas of interest that you provide when you request a demo or contact us.
- Information Processed on Behalf of Our Clients: Caller phone numbers, call recordings, transcripts, text and email messages, maintenance requests, and appointment details of the tenants, prospects, owners, and other contacts of the property management companies we serve.
- Voice Demo Audio: If you use the live voice demo on our website, your voice is processed in real time by our AI provider to generate the assistant's responses.
We collect information directly from you (through our forms, phone calls, text messages, and email), automatically through cookies and similar technologies when you use our website, and from our clients and the property management software they connect to our services. We collect only the information necessary for the purposes described in this Privacy Policy.
3. How We Use Your Information
We use the collected information for various purposes, including:
- Providing and maintaining our services
- Personalizing and improving user experience
- Analyzing usage patterns and trends
- Communicating with you regarding updates or support
- Sending transactional SMS/text messages for which you have provided consent
- Measuring and improving the effectiveness of our advertising
- Protecting the security and integrity of our services and preventing fraud and abuse
- Complying with our legal obligations and enforcing our agreements
We process information on behalf of our clients only to provide the services under our agreement with them and in accordance with their instructions. We do not use your personal information for a new purpose without your consent, unless the law permits or requires it.
4. SMS/Text Messaging
Weblo provides SMS/text messaging services on behalf of property management companies. This section specifically describes how we collect, use, store, and share information related to our SMS communications, including how SMS consent is obtained and managed.
How We Collect SMS Consent and Phone Numbers
We collect mobile phone numbers and SMS consent when end-users (such as tenants, prospective tenants, or property owners) voluntarily provide their phone number and opt in to receive SMS messages. SMS consent is collected through the following methods: (1) completing the SMS opt-in form on our Terms of Service page at weblo.ai/terms, which includes a consent checkbox, (2) providing a phone number during account registration or tenant onboarding with an explicit SMS consent acknowledgment, or (3) providing verbal consent during a phone call with a Weblo AI assistant, which is documented and logged in our system. Phone numbers are collected solely for the purpose of delivering service-related SMS communications. SMS consent is not required to use our services or purchase any product.
Types of SMS Messages
We send transactional SMS messages related to property management services, including but not limited to:
- Maintenance request updates and scheduling confirmations
- Appointment and property viewing confirmations
- Rent payment reminders and confirmations
- Service notifications and status updates
- Leasing inquiry follow-ups
How We Use SMS Consent and Data
SMS messages are only sent to individuals who have provided prior express consent to receive text messages. Your phone number and SMS consent data are used exclusively to send you transactional SMS messages related to your property management services as described above. We do not use your SMS consent or phone number for marketing, advertising, or promotional purposes. We do not sell, share, or disclose your SMS consent status, phone number, or SMS message content to any third parties for their own marketing or commercial use. Your SMS opt-in/opt-out status is recorded and maintained in our system to ensure we honor your communication preferences at all times.
Opt-Out Rights
You may opt out of receiving SMS messages at any time by replying STOP to any message you receive from us. Upon receiving your opt-out request, we will send a one-time confirmation message and cease all further SMS communications to your number. You may also text HELP to receive assistance or contact us at info@weblo.ai.
SMS Data Sharing and Disclosure
We do not sell, rent, loan, trade, lease, or otherwise transfer for profit any phone numbers, SMS consent records, or personal information collected in connection with our SMS messaging services to any third party. Phone numbers, SMS message content, and consent data are not shared with third parties for their marketing or promotional purposes. SMS consent data may only be shared with our service providers (such as our SMS delivery platform) strictly as necessary to deliver your messages, and these providers are contractually prohibited from using this data for any other purpose.
TCPA Compliance
Our SMS messaging practices comply with the Telephone Consumer Protection Act (TCPA), the CTIA Messaging Principles and Best Practices, and all applicable federal and state regulations governing text message communications. We maintain records of consent and honor all opt-out requests promptly.
5. Cookies and Tracking Technologies
We and our partners use cookies, pixels, and similar technologies on our website. Some of these technologies can identify you, infer your approximate location, or build a profile of your interests and behaviour. We use the following categories:
- Essential: Needed for the website to work, such as remembering your language preference.
- Analytics: PostHog helps us understand how visitors use our website (for example, pages viewed, clicks, and device and browser type) so we can improve it.
- Advertising Measurement: The Meta Pixel and Conversions API and the OpenAI (ChatGPT Ads) pixel and Conversions API help us measure the effectiveness of our ads. When you submit a form, we may share hashed (SHA-256) identifiers, such as your email address, first name, or phone number, together with your IP address and browser information, with these platforms to attribute conversions.
- Scheduling: Calendly powers our demo booking tool and may set its own cookies when you use it.
You can block or delete cookies in your browser settings, use your browser's tracking protection or private browsing mode, and manage how Meta uses your information for ads in your Meta ad preferences. Blocking essential cookies may affect how the website works.
6. How We Share Your Information
We do not sell your personal information. We share it only as described below:
- Service Providers: Companies that help us operate our services, such as cloud hosting providers, AI model providers (such as OpenAI), telecommunications and SMS providers, email delivery providers (such as Resend), analytics providers (such as PostHog), and scheduling tools (such as Calendly). They may use your information only to provide services to us, under written agreements that require them to keep it confidential and secure.
- Our Clients: Information we process on behalf of a property management company is shared with that company and, at its direction, with the property management software it connects to our services (such as AppFolio, Buildium, Yardi Breeze, Rentec Direct, or CondoManager).
- Advertising Platforms: Limited hashed identifiers and technical information are shared with Meta and OpenAI to measure the performance of our advertising, as described in the Cookies and Tracking Technologies section.
- Legal and Safety: When required by law, a court order, or a competent authority, or when necessary to protect the rights, safety, or security of Weblo, our clients, or others.
- Business Transactions: In connection with a merger, acquisition, financing, or sale of assets, under an agreement that protects the confidentiality of your information.
International Data Transfers
Some of our service providers store or process personal information outside your province or country, including in the United States. Before communicating personal information outside Quebec, we assess whether it will receive adequate protection, and we put written agreements in place with the recipients. Information stored in another jurisdiction may be subject to the laws of that jurisdiction, including lawful access by its authorities.
A list of our key subprocessors is available to clients on request.
7. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including information transmitted by SMS, against loss, theft, and unauthorized access, use, disclosure, alteration, or destruction. Our safeguards include:
- Encryption of data in transit and at rest
- A security program aligned with the AICPA SOC 2 Trust Services Criteria (our SOC 2 audit is currently in progress)
- Hosting on cloud infrastructure providers that maintain SOC 2 Type II reports
- Role-based, least-privilege access controls with multi-factor authentication
- Regular security assessments, vulnerability management, and activity logging and monitoring
- Confidentiality obligations and privacy and security training for personnel who have access to personal information
- Written security and confidentiality requirements for our service providers
No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Security Incident Notification
If we become aware of a security incident involving personal information, we act promptly to contain it, reduce the risk of harm, and prevent it from happening again. Where an incident presents a risk of serious harm, we notify the affected individuals and the competent authorities, including Quebec's Commission d'accès à l'information, as required by law. When an incident affects information we process on behalf of a client, we notify that client without undue delay. We keep a record of all incidents involving personal information. To report a suspected security vulnerability or incident, email info@weblo.ai.
8. Data Retention
We keep personal information only for as long as necessary to fulfill the purposes for which it was collected, or longer where the law requires it. In general:
- Demo request and contact information is kept for as long as needed to respond to you and manage our business relationship.
- Client account information is kept for the duration of our agreement and afterwards for as long as needed to meet our legal, tax, and accounting obligations.
- Information processed on behalf of our clients is kept according to their instructions and our agreement with them, and is deleted or returned when the agreement ends, unless the law requires us to keep it.
- SMS opt-out requests are processed immediately. SMS consent records, and the phone numbers of people who have opted out, are kept only as long as needed to honour your choices and demonstrate compliance with messaging laws.
When personal information is no longer needed, we securely destroy it or anonymize it in accordance with generally accepted best practices. You may ask us to delete your information at any time, subject to legal retention requirements.
9. Compliance & Regulations
We are committed to complying with applicable privacy laws and regulations, including:
- Quebec's Act respecting the protection of personal information in the private sector (Law 25)
- PIPEDA (Personal Information Protection and Electronic Documents Act, Canada)
- CASL (Canada's Anti-Spam Legislation)
- TCPA (Telephone Consumer Protection Act)
- CTIA Messaging Principles and Best Practices
- GDPR (General Data Protection Regulation)
- CCPA (California Consumer Privacy Act)
- CAN-SPAM Act
- Other applicable international and local privacy laws
We do not sell or share your personal data with third parties for marketing purposes.
10. Your Rights
Depending on your location, you may have certain rights regarding your personal information, including:
- Access to your personal information and to information about how it is used
- Correction of inaccurate, incomplete, or outdated information
- Deletion of your personal information
- Restriction of processing
- Data portability, in a structured and commonly used technological format
- Withdrawal of your consent at any time, subject to legal or contractual restrictions
- Information about decisions made exclusively through automated processing, and the opportunity to have such decisions reviewed by a person
- Opt out of SMS communications at any time by texting STOP
- File a complaint with us or with the competent privacy regulator
To exercise any of these rights, send a written request to our Privacy Officer using the contact information below. We may ask you to verify your identity before responding. We respond within 30 days of receiving your request, free of charge; a reasonable fee may apply for transcription, reproduction, or transmission, and we will tell you about it in advance. If your request concerns information we process on behalf of a property management company, we will refer it to that company and help it respond.
11. Children's Privacy
Our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 14 without the consent of a parent or guardian. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. Changes to This Privacy Policy
We review this Privacy Policy at least once a year and update it when our practices change. We will post any changes on this page and update the "Last Updated" date. For significant changes, we will also notify you through an appropriate means, such as an email or a notice on our website, before the changes take effect.
13. Contact Us
If you have any questions about this Privacy Policy or our SMS messaging practices, or if you wish to exercise your rights or make a complaint, please contact our Privacy Officer, who is responsible for the protection of personal information at Weblo:
Athanas Bakleh
Chief Technology Officer (CTO) and Privacy Officer
Email: info@weblo.ai
Weblo AI, Ax.c – Place Victoria, 800 Rue du Square-Victoria, 3rd Floor, Montreal, QC H3C 0B4, Canada
We acknowledge and review every privacy complaint and respond in writing within 30 days. If you are not satisfied with our response, you may contact the privacy regulator in your jurisdiction, such as Quebec's Commission d'accès à l'information (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).