Privacy Policy

Last updated: June 11, 2026

EzEval is operated by Roga Digital, based in British Columbia, Canada. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act.

What we collect

• Account information: your name, email address, and password (stored only as a secure hash — we never see or store your password in plain text).
• Business information: your business name, contact details, price sheets, tax settings, and team membership.
• Customer records you enter: names, addresses, phone numbers, and notes about your customers' properties. This data belongs to your business; we process it only to provide the Service.
• Usage data: standard server logs (IP address, browser type, pages requested) used for security and troubleshooting.

Cookies

We use a single session cookie to keep you signed in. We do not use advertising cookies or third-party tracking.

How we use information

• To provide, maintain, and improve the Service.
• To communicate with you about your account, billing, and important changes.
• To protect the Service against abuse and unauthorized access.

We do not sell personal information, and we do not share your pricing or customer data with other businesses.

Service providers

Like most software, EzEval runs on infrastructure operated by trusted providers:

• Vercel — application hosting.
• Neon — database hosting.
• OpenStreetMap (Nominatim) — when you save a customer address, the address is sent to this geocoding service to place it on the map. No name or contact details are sent with it.

These providers may store and process data on servers located in the United States. When we add payment processing, billing details will be handled by a dedicated payment processor and your card number will never touch our servers.

Retention and deletion

We keep your data for as long as your account is active. You may request deletion of your account and its data at any time; we will remove it within 30 days, except where we must retain records to meet legal obligations.

Security

All traffic to the Service is encrypted in transit (HTTPS), passwords are hashed with a modern algorithm, and access to production data is restricted. No system is perfectly secure, but we take protecting your data seriously and will notify you of any breach affecting your personal information as required by law.

Your rights

You may request access to, correction of, or deletion of your personal information by contacting us. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

Changes to this policy

We may update this policy from time to time. Material changes will be announced through the Service or by email before they take effect.

Contact

Privacy questions or requests: .