Effective date: July 24, 2026
Applies to: Cobnect Inc. websites, applications, products, and related online services (the “Services”).
Cobnect Inc. (“Cobnect”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information in Canada, including under the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial private-sector laws in Québec, British Columbia, and Alberta.
About Cobnect: Cobnect Inc. is a Canadian technology company that provides web-based tools, reports, dashboards, and related services to help homeowners, real estate professionals, home inspectors, contractors, municipalities, organizations, and other users better understand residential home performance, including energy, comfort, greenhouse gas, retrofit, benchmarking, and sustainability-related indicators.
Organization: Cobnect Inc.
Privacy Contact: Cobnect Privacy Officer
Privacy Email Address: privacy@cobnect.com
Cobnect’s Privacy Officer is responsible for compliance with this Policy and applicable privacy laws.
This Policy explains how we collect, use, disclose, store, and protect personal information in connection with the Services.
Depending on how you use the Services, we may collect:
A. Identification, account, and contact information — name, email address, province, user role, organization name where provided, account credentials, account preferences, and authentication information.
B. Property & household — street address, postal code, dwelling type, year built, number of storeys, equipment and building-envelope attributes and retrofit history.
C. Utility & usage — self-reported bills; where you authorize, consumption/interval data from utilities or connected devices; incentive eligibility inputs.
D. Images & media — photos/video you upload for remote assessment (e.g., equipment nameplates, attic/basement).
E. Device & technical — IP address, device/browser/OS, pages viewed, timestamps, approximate geolocation derived from IP, and cookie identifiers (see Section 10).
F. Communications — emails, messages, support tickets, survey responses, and call recordings where notice is given.
G. Transactional — subscriptions, purchases; Cobnect does not store full payment card numbers (payments are processed by PCI-compliant providers).
H. Professional, B2B, municipal, and organizational information — business contact information, organization name, role/title, brokerage or inspection-firm information, contractor or supplier business details, licence or certification information where provided, service areas, municipal/program affiliation, and information related to authorized professional, client-related, portfolio, program, API, widget, or white-label use.
We collect personal information (i) directly from you; (ii) automatically from your device/browser; (iii) from service providers; and (iv) from third-party data sources and APIs with your authorization or as permitted by law (e.g., municipal/assessment records, utility interfaces, smart-home platforms, building-permit/open-data registries, mapping/geo datasets, and licensed data providers). When such data relates to an identifiable individual, we treat it as personal information.
Cobnect collects and uses personal information only for purposes a reasonable person would consider appropriate, including to:
Consent and lawful authority: Cobnect relies on consent, contractual necessity, legal obligations, and other lawful bases permitted by applicable Canadian privacy laws. Consent may be express or implied depending on the context, the sensitivity of the information, the user’s reasonable expectations, and applicable law. Where required, including for sensitive information, connected accounts, utility or device data, partner disclosures, marketing communications, or non-essential cookies, Cobnect will seek express consent. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent, some Services or features may no longer be available or may not function properly.
Cobnect does not sell or rent personal information. We disclose personal information only as follows:
a) Service providers: Hosting/cloud, analytics, email and communications tools, payment processors, customer support, security and logging. These providers act on Cobnect’s instructions under written terms that require appropriate safeguards and prohibit secondary use.
b) Newsletters and mailing lists: If you subscribe to newsletters or similar communications, your name and email may be shared with a third-party provider that manages our mailing lists and delivers emails on our behalf.
c) Strategic partnerships: We may cooperate with municipalities, brokerages, utilities, program administrators, or similar partner organizations to deliver incentives or products, collect voluntary survey insights, or conduct joint outreach/education. We disclose only what is necessary and only with your consent or as otherwise permitted by law. You may opt out of partner marketing at any time (see Section 13).
d) API providers and data licensors. Where we retrieve house characteristics or usage data via an API or licensed feed (e.g., assessment attributes, energy usage, device telemetry), the provider may act (i) as our service provider (processing under contract) or (ii) as an independent organization (processing under its own privacy policy). We limit requests to the minimum fields needed and keep audit logs of access. We prohibit uses inconsistent with this Policy. Where feasible, we identify the API provider at the time of connection. We do not disclose raw third-party data onward except (i) to provide the Services you request, (ii) to our service providers under contract, or (iii) as required or permitted by law.
e) Contractors and suppliers at your request. When you ask us to connect you with a contractor/supplier/energy advisor/utility/program administrator, we disclose only the information required to fulfill your request.
f) Legal and regulatory. Courts, regulators, or law enforcement where required or permitted by law (e.g., subpoenas, lawful requests, protection of rights, safety, and security).
g) Corporate transactions. In a merger, acquisition, financing, or sale, personal information may be transferred under confidentiality obligations and only as permitted by law.
If you choose to sign in or connect an account using Google or another third-party authentication provider, Cobnect receives the account information you authorize, such as your user ID, name, email address, and profile image. Cobnect uses this information to authenticate you, create and manage your account, secure access, and personalize your experience. Cobnect does not sell Google user data, use Google user data for advertising, or disclose Google user data except to operate the Services, support account security, comply with law, or work with service providers acting on Cobnect’s behalf. We do not store your Google password. OAuth tokens, where used, are protected using technical and organizational safeguards such as encryption, access controls, logging, and revocation controls. You may revoke Cobnect’s access through your Google Account permissions or by contacting Cobnect. If you disconnect Google or close your Cobnect account, we will cease further access and delete or de-identify OAuth-derived data unless retention is required for legal, tax, accounting, security, fraud-prevention, or dispute-resolution purposes.
If Cobnect requests access to sensitive or restricted Google scopes in the future, such as Gmail, Drive, or Calendar data, Cobnect will request explicit consent and will use that data only for user-facing features you authorize, in accordance with applicable Google API Services User Data Policy requirements and applicable law.
Cobnect may de-identify, anonymize, or aggregate information derived from use of the Services so that it no longer identifies an individual, or so that it is not reasonably capable of identifying an individual when used alone or in combination with other reasonably available information. To the fullest extent permitted by applicable law, Cobnect may use, retain, disclose, and otherwise process de-identified, anonymized, or aggregated information for analytics, benchmarking, model training, model validation, quality assurance, product development, research, security, reporting, business planning, and improving Cobnect’s services and technology. Cobnect takes reasonable measures designed to prevent re-identification and does not attempt to re-identify anonymized or de-identified information except where permitted or required by law, including for security, fraud prevention, debugging, legal compliance, or testing and improving de-identification safeguards. Where Québec law or another applicable law imposes additional requirements, Cobnect will comply with those requirements.
Cobnect uses cookies and similar technologies (such as pixels, local storage, and software development kits) to operate the Services, remember your preferences, understand usage, and, where permitted, deliver relevant content. A cookie is a small file stored on your device when you visit a website.
We use the following categories:
Where required by applicable law, Cobnect will obtain consent before enabling non-essential cookies or similar technologies, including analytics, functional, preference, marketing, advertising, or tracking technologies. In Québec, where applicable, technologies that identify, locate, or profile a user will remain disabled by default and will be activated only after the user provides consent through Cobnect’s cookie banner.
You can accept or decline non-essential cookies through Cobnect’s cookie banner where available. If you decline non-essential cookies, Cobnect will not enable non-essential analytics, functional, preference, marketing, advertising, or tracking technologies, but strictly necessary technologies will remain active. You can also manage or delete cookies through your browser settings. Disabling certain technologies may affect website functionality or prevent parts of the Services from working properly.
Cobnect’s primary application hosting and core data storage are located in Canada, using Canada-based cloud infrastructure. Some service providers that support the Services, such as analytics, email delivery, authentication, customer support, security, or payment processing providers, may process or access limited personal information outside Canada.
Where personal information is processed, accessed, stored, or transferred outside Canada, it may be subject to the laws of that jurisdiction. Cobnect remains accountable for personal information under its control and uses contractual, technical, and organizational safeguards designed to provide a level of protection comparable to that required under Canadian privacy law.
Where Québec privacy law applies, Cobnect will conduct any required assessment before communicating personal information outside Québec and will implement required contractual or other safeguards.
We employ safeguards appropriate to the sensitivity of the information, including encryption in transit and at rest where feasible, role-based access controls, multi-factor authentication for administrative systems, network monitoring and logging, vulnerability management, personnel training, vendor due-diligence, and incident response procedures. No method of transmission or storage is absolutely secure; Cobnect strives to prevent loss, theft, misuse, and unauthorized access. Users are also responsible for maintaining the confidentiality of their login credentials and for using secure devices, browsers, networks, and email accounts when accessing the Services.
We send commercial electronic messages only with consent (express or implied) and include identification details and a functional unsubscribe. You can:
Withdrawing consent does not affect service or transactional notices.
We maintain records of marketing consents and unsubscribe requests in accordance with CASL.
Cobnect uses algorithms, statistical methods, AI, and machine-learning models to generate informational, asset-based outputs, such as energy-related scores, predicted energy use, greenhouse gas indicators, heat-loss indicators, comfort-related indicators, benchmarking, retrofit opportunity flags, and potential incentive-related information. These outputs are informational and are not, by themselves, determinative of legal rights, financial rights, rebate eligibility, lending outcomes, insurance outcomes, property value, official audit results, or regulatory status.
Cobnect does not use automated processing to make decisions that produce legal or similarly significant effects concerning you unless we inform you as required by applicable law. Where applicable law provides rights regarding decisions based exclusively on automated processing, including Québec privacy law where applicable, Cobnect will provide required notice, information about the principal factors and parameters, correction rights, and human review or contestation rights where required.
Subject to identity verification, legal exceptions, and applicable law, you may have the right to:
Requests should be directed to privacy@cobnect.com. Cobnect will respond within applicable statutory timelines (generally 30 days, with permitted extensions).
We retain Personal Information only as long as needed for the purposes described in this Policy or as required by law. Unless a longer period is required for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes (or due to a legal hold), our standard retention periods are: (a) account, profile, and property data: account life and up to 24 months after closure or last activity; (b) communications and support records: 24 months; (c) transaction and billing records: 7 years; (d) web logs and analytics: 12–24 months (shorter for analytics, longer for security). When the original purposes have been achieved, we destroy the data or anonymize it in accordance with applicable law; anonymized (irreversibly non-identifiable) data may be retained without a fixed limit for research and statistical purposes.
Cobnect maintains incident-response procedures and keeps records of all security incidents.
consumer protection laws, you agree that the courts located in Toronto, Ontario will have exclusive jurisdiction over any dispute arising out of or relating to these Terms or the Services, unless Cobnect and you agree in writing to binding arbitration or another dispute-resolution process.
The Services are intended for adults. Consistent with our Terms of Use, you must be at least 18 years of age, or the age of majority in your province or territory (whichever is greater), to create an account or use the Services. Cobnect does not knowingly collect personal information from anyone under the age of majority. If we become aware that we have collected personal information from a person under the applicable age without valid consent, we will delete it. Where personal information relating to a minor is provided by an authorized adult (for example, a property owner’s information submitted by an authorized professional), it is handled in accordance with this Policy.
The Services may link to or integrate with third-party websites, applications, payment processors, mapping tools, analytics tools, contractors, suppliers, energy advisors, utilities, program administrators, incentive providers, or other external services. Those third parties are governed by their own terms, privacy policies, and practices. Cobnect is not responsible for third-party privacy practices, security practices, content, services, eligibility determinations, or decisions.
Where you connect a third-party account or data source, Cobnect will explain the requested access and will use the data as authorized and consistent with this Policy. Where you ask Cobnect to share information with a third party, such as a contractor, supplier, utility, program administrator, municipality, brokerage, or partner organization, that third party may process the information under its own privacy policy unless acting as Cobnect’s service provider.
We may update this Policy to reflect changes in our practices or legal requirements. The updated Policy will be posted with a new effective date. Where required, we will provide notice or seek renewed consent.
If you have a question, request, or complaint about Cobnect’s privacy practices, please contact:
Cobnect Privacy Officer
Cobnect Inc.
Suite 1201, 1200 Bay Street, Toronto, ON, Canada, M5R 2A5
Email: privacy@cobnect.com
General inquiries: info@cobnect.com
We will review and respond to privacy requests and complaints in accordance with applicable law. If your concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada or, where applicable, your provincial privacy regulator.
