Privacy Policy - BrokerBase

1. Scope

BrokerBase provides communication tooling for Canadian insurance teams. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in line with PIPEDA and, where applicable, Quebec Law 25.

2. Purposes Of Collection

To create and secure user accounts
To store contact records, communication history, and consent records
To send email and SMS communications on your instructions
To troubleshoot product issues, detect abuse, and maintain audit trails
To meet legal, security, insurance, and recordkeeping obligations

3. Categories Of Information

Account data such as name, work email, organization, login metadata, and role
Contact data such as names, email addresses, phone numbers, tags, and notes
Communication data such as send status, opens, clicks, replies, and unsubscribe events
Security and audit data such as IP address, device/browser metadata, and policy actions
Billing-adjacent data where billing is enabled

4. Service Providers And Regions

We use service providers to host the app and deliver communications. Depending on enabled features, those providers may include:

Processor	Purpose	Region
Railway	Application hosting and managed runtime infrastructure	United States
SendGrid	Transactional and campaign email delivery	United States
Resend	Transactional email delivery	United States
Twilio	SMS delivery and messaging events	United States
Stripe	Subscription billing and webhook processing	United States

5. Cross-Border Transfers

BrokerBase is hosted on Railway infrastructure in the United States. Personal information may therefore be processed or stored outside Canada and may be accessible to U.S. courts, law enforcement, and regulators under applicable U.S. law.

6. Retention Periods

Data Type	Retention
Email delivery logs	365 days
Deleted contacts pending purge	90 days
Contact history and compliance records	2555 days
Security audit records	2555 days

7. Your Rights

Subject to applicable law, you may request access to personal information, correction of inaccuracies, and deletion or de-indexing where legally available.

PIPEDA provides a right of access and correction.
Quebec Law 25 may provide additional rights around portability, de-indexing, and consent transparency.
You can also unsubscribe from marketing communications at any time.

8. Privacy Officer

BrokerBase Privacy Officer is responsible for privacy inquiries and complaints.

BrokerBase Privacy Officer
BrokerBase
Calgary, Alberta, Canada
Email: noreply@followupengine.online

9. Questions

For general support, contact noreply@followupengine.online. For legal terms, see our Terms of Service.