Privacy Policy

We're committed to protecting your privacy and ensuring transparency in how we collect, use, and safeguard your personal information.

Last updated: Jan 17, 2026

1. Introduction

Subhub ("we", "our", "us") provides a platform that helps students safely find and list sublets. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

By using Subhub, you consent to the data practices described in this Policy.

2. PIPEDA Compliance

Subhub complies with the Personal Information Protection and Electronic Documents Act ("PIPEDA"). We follow PIPEDA's principles concerning accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, accuracy, safeguards, openness, individual access, and challenging compliance.

We identify the purposes for collecting personal information at or before the time information is collected and obtain consent as required under PIPEDA.

3. Information We Collect

3.1 Information You Provide

  • Account details: Name, login credentials, school affiliation, university email (for verification), and similar information.
  • Listing details: Address, price, description, photos, availability, amenities.
  • Sublet requests: Budget, preferences, move-in dates, contact information, lease duration.
  • Messages: Content of messages exchanged between users.
  • Verification information: University email address, verification tokens.
  • Saved content: Favorites.

3.2 Information Collected Automatically

  • Device data: Browser type, operating system, IP address.
  • Usage data: Pages visited, interactions, timestamps.
  • Location data: Geographic coordinates when using map features or creating/listing properties.

4. Use of Third-Party Services

We use trusted third-party service providers that support our platform, including:

  • Analytics and performance tools
  • Advertising and attribution tools
  • Mapping/geolocation services
  • Authentication and security tools
  • Cloud hosting and infrastructure
  • Email and notification delivery
  • Real-time messaging systems

These providers may collect or process data according to their own privacy policies. We limit their access to only what is necessary to perform services on our behalf.

5. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience.

  • Essential cookies: Login, security, navigation
  • Analytics cookies: Usage measurement and performance analysis
  • Advertising cookies: Relevance, reach, attribution
  • Preference cookies: Saved filters, language preferences

You may disable cookies in your browser. However, disabling essential cookies may affect functionality.

6. How We Use Your Information

We use personal information to:

  • Provide, operate, and improve the Subhub platform
  • Verify student status and promote user safety
  • Enable communication between subletters and renters
  • Analyze performance and develop new features
  • Personalize content or promotions
  • Comply with legal, regulatory, and security obligations

We do not use or disclose your information for new purposes without your consent, except where required by law, as required by PIPEDA.

7. Sharing Your Information

We do not sell your personal information. We may share limited data with:

  • Service providers: For platform operation and security
  • Law enforcement: If legally required or necessary to protect users
  • Other users: When you post or interact with listings, others may see your listing details, profile information, and messages you choose to send. All sharing is restricted to what is required for the platform to function.

8. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, loss, or misuse. While no system is perfectly secure, we continuously refine our security practices.

9. Data Retention

We retain personal information only as long as necessary for:

  • Operating and improving the platform
  • Fulfilling legal requirements
  • Preventing fraud and ensuring safety
  • Resolving disputes

You may request deletion of your personal information at any time.

10. Accuracy

We take reasonable steps to ensure that personal information is accurate, complete, and up to date, in accordance with PIPEDA. You may request corrections at any time.

11. Your Rights

Under PIPEDA, you may request to:

  • Access your personal information
  • Correct or update inaccurate data
  • Delete or withdraw consent for certain processing
  • Export your data (where applicable)
  • Ask questions about our privacy practices

Requests can be made at [email protected]. We respond within the time periods required by PIPEDA (typically within 30 days).

12. Student Verification

If you choose to verify your student status, we collect your university email address solely to confirm enrollment. Verification information is used only for safety and is never shared with other users.

13. Children's Privacy

Subhub is intended for individuals aged 16 or older. We do not knowingly collect personal information from anyone under this age.

14. International Data Transfers

Your personal information may be stored or processed outside your region, including countries with different data protection laws. By using Subhub, you consent to these transfers.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted. Continued use of Subhub after changes are published means you accept the updated Policy.