Privacy Policy

Account and identity information. Name, email address, phone number, role, unit or lot, building, and the credentials and passkeys you register. Where a Client Organisation requires it, emergency contacts and vehicle or pet details.

Property operations records. Maintenance requests and work orders, amenity bookings, move records, parking permits, access requests, notices and correspondence, governance records such as council decisions and bylaw files, and the photos and documents attached to them.

Financial information. Ledger entries, invoices, receipts and payment status. Card numbers are entered directly with our PCI-compliant payment processor and never touch AryaPM systems; we receive only a payment token and the last four digits.

Technical information. Sign-in events, device and browser details, IP addresses, security and audit logs, error reports and, where you enable them, push-notification tokens.

Website and enquiry information. What you submit through the demo or quote form, and basic analytics about how aryapm.ca is used.

• To provide the Service: sign you in, route requests to the right people, take bookings and payments, send notices and receipts, and keep the records a property must keep.
• To secure the Service: detect unauthorised access, enforce invitation-only onboarding, audit privileged actions and investigate incidents.
• To support you: answer questions, diagnose problems and onboard properties.
• To improve the Service: understand how features are used and fix what does not work, using aggregated or de-identified information wherever possible.
• To meet legal obligations: respond to lawful requests, keep records required by law, and exercise or defend legal claims.
• To tell you about AryaPM: only where you have asked to hear from us or where CASL otherwise permits, and always with a way to unsubscribe.

Residents provide information to their Client Organisation under that organisation’s own privacy notices and legal authority, including its obligations under the Strata Property Act. Client Organisations are responsible for having the consent or authority needed before entering resident information into AryaPM.

When you create an account, request access, or ask for a demo, you consent to the collection and use described here. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent may mean we can no longer provide the Service to you.

The AryaPM database and uploaded files are stored with an enterprise cloud infrastructure provider in a Canadian data centre region. Some application processing, message delivery and payment processing is performed by providers that operate in the United States. Information may therefore be accessed or transiently processed outside Canada, and while there it may be subject to the laws of those countries.

We choose providers with recognised security certifications and bind them by contract to protect personal information and use it only to provide their service to us.

We do not sell personal information and we do not share it with advertisers. We share it only with the following categories of recipients, and only as needed to run the Service:

• Your Client Organisation and the users it authorises, according to their roles.
• Cloud infrastructure providers that host our database, files and application.
• A PCI-compliant payment processor that handles card payments and settles funds to each property's own account.
• Email, SMS and push-notification delivery providers, so that notices, receipts and alerts reach you.
• Professional advisers such as lawyers, accountants and auditors, under confidentiality.
• Authorities or courts where the law requires disclosure.

A current list of our service providers and their locations is available to Client Organisations on request under their agreement with us, and is kept confidential.

• Access is invitation-only; there is no public account creation.
• Every property's records are isolated by access controls enforced inside the database, not only in application code.
• Connections are encrypted in transit; data is encrypted at rest.
• Passkeys (Face ID and fingerprint) and time-based two-factor codes are available to every account; profile changes go through approval queues.
• Privileged actions are logged. Staff access to client data is limited to what support and operations require.
• Automated backups run several times a day and are retained for a limited period.
• Contractors check in on site without accounts; they never receive resident records.

We keep personal information for as long as the Client Organisation’s subscription is active and for 30 days afterwards so that records can be exported. We then delete it from live systems, and it ages out of backups within our retention window, unless the law requires a longer period or an active dispute requires it.

Strata corporations have their own statutory retention duties; exporting records before the end of a subscription is the Client Organisation’s responsibility, and we help on request. Security logs and website enquiries that do not become clients are kept only for a limited period.

You may ask to see the personal information we hold about you, ask us to correct it, ask how it has been used and to whom it has been disclosed, and withdraw consent. Residents should direct requests first to their Client Organisation, which controls the records; we will assist it in responding. Anyone may contact our Privacy Officer directly at support@aryapm.ca.

We respond within 30 days, or tell you why more time is needed. We may ask you to verify your identity first. If you are not satisfied with our response, you may complain to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

Operational messages (booking confirmations, receipts, notices from your property, security alerts) are sent because they are part of the Service. Marketing messages are sent only with your consent and always include an unsubscribe link.

We record delivery, open and bounce events for the messages properties send through AryaPM so administrators can see what reached whom. SMS messages are sent only to numbers a property or resident has provided for that purpose; reply STOP to opt out of SMS.

The application uses strictly necessary cookies and local storage to keep you signed in across aryapm.ca subdomains, remember your theme and view preferences, and protect against cross-site attacks. aryapm.ca uses privacy-respecting, aggregated analytics to count visits and understand which pages are read; it does not use advertising cookies or cross-site tracking.

The Service is intended for adults acting for a property, or residents who are parties to a tenancy or ownership. We do not knowingly collect personal information from children under 13. Household features that a resident chooses to use for their own family are controlled by that resident.

If we confirm a security breach involving personal information under our control that creates a real risk of significant harm, we will notify the affected Client Organisation’s administrators without undue delay, notify individuals and the Privacy Commissioner where the law requires, and record the incident.

We will post any changes at aryapm.ca/privacy with a new version and effective date, and Authorised Users will be asked to acknowledge the new version at their next sign-in. Material changes are announced to Client Organisation administrators in advance.

Privacy Officer, AryaPM, Kelowna, British Columbia, Canada. Email support@aryapm.ca with “Privacy” in the subject line.