Effective 26 July 2026 · Sophabulous Inc., Fredericton, New Brunswick, Canada
It is an accurate description of what our software actually does — it was written by reading the code, not from a template — but it has not yet been reviewed by a lawyer. If anything here matters to a decision you are making, email info@sophab.ca and ask us to confirm it in writing.
Sophabulous helps homeowners and building owners see whether a Solar Passive Habitat makes sense on their own building. Doing that well means asking you for your address and your contact details, so this page sets out exactly what we hold, why, and how to get it back or have it erased.
We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We do not sell, rent or trade personal information, and never have.
What you type. Only what a form asks for:
| Where | What |
|---|---|
| Assessment & contact forms | Name, email address, phone number (optional), the property address you searched, which services you ticked, and anything you write in the notes box. |
| Free plan & sell-sheet forms | Email address, and company name on the commercial form. |
| Newsletter | Email address only. |
| Signing in | Your email address and display name from Google or Facebook, if you choose to sign in. We never receive your password. |
What you upload. If you use the free in-situ mockup, the photo of your wall is sent to our server, composited with the design, and returned to your browser. Generating a preview does not keep the photo. If you send a photo along with an enquiry, we do keep it, attached to that enquiry, so we can work from it — and it is then reachable at a long random link. That link is not listed or indexed anywhere, but it is not password protected either, so treat it as shareable-by-link. Ask us and we will delete it.
What we derive. From the address you search we obtain map coordinates and, where Google has coverage, the roof geometry of the building, so we can model the structure. We keep those coordinates with your enquiry.
What we measure. Our site analytics are our own — there is no Google Analytics, no advertising pixel and no third-party tracker anywhere on this site. Deliberately, it records:
It does not record your IP address, your browser's user-agent string, anything you type into a form, or the query part of a URL. The lookup table that turns an IP address into a city is keyed by a salted one-way hash, so it cannot be read back as a list of visitor IP addresses. Analytics rows are deleted after 365 days.
You can switch analytics off for this browser:
We use no advertising or tracking cookies. The only cookies we set are functional ones: a signed sign-in cookie if you sign in, a short-lived cookie that protects the sign-in redirect, and an administrator cookie for our own staff. Your progress through the assessment tool is kept in your browser's local storage, not on our server, so closing the tab does not lose your work.
We use what you give us to model your building and prepare your assessment, to send you what you asked for, to answer you and discuss next steps, and to keep our own records of who asked for what. That is the whole list. Submitting a form is your consent for those purposes, and you can withdraw it at any time (section 6).
Marketing email is separate and opt-in. The newsletter is double opt-in: nothing is sent until you click the link in a confirmation email, and every marketing message carries a one-click unsubscribe link. Transactional email — your report, your sign-in link, the acknowledgement that we received your enquiry — is sent because you asked for it, and unsubscribing from marketing does not stop it.
We share personal information with service providers who help us operate, and with nobody else. We do not sell it, and we do not disclose it to a builder, contractor or partner without asking you first.
Some of these operate outside Canada, so information handled by them may be stored in or accessed from another country and can be subject to that country's laws. We may also disclose information where the law requires it.
Analytics rows are deleted after 365 days, automatically. Enquiries, reports and uploaded photos are kept for as long as we may still need them for the project or our records — we do not currently expire them on a fixed schedule — and are deleted on request.
Under PIPEDA you may ask us to tell you what personal information we hold about you and how it has been used, correct anything that is wrong, delete it, or withdraw your consent. Email info@sophab.ca and we will respond within 30 days. For a straightforward request we do not charge.
Unsubscribing takes one click from any marketing email, or email us and we will do it by hand.
If you are not satisfied with how we have handled your information, you may complain to the Office of the Privacy Commissioner of Canada.
The site is served over HTTPS only. Sign-in cookies are signed, HTTP-only and restricted to this site. The administrative dashboard is behind a sign-in restricted to named addresses. No system is perfectly secure, and we will not pretend otherwise — but we do not store payment card details and we do not store passwords.
This site is meant for property owners and is not directed at children. We do not knowingly collect information from anyone under 16.
If we change this policy we will update the date at the top. Material changes to how we use information you have already given us will be sent to you by email.
Questions, access requests and complaints all go to the same place: info@sophab.ca — Sophabulous Inc., Fredericton, New Brunswick, Canada.