This policy explains what personal information GNB Scanner (Govscanner, the "Operator") collects, why, who receives it, and your rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). New Brunswick has no private-sector privacy statute of its own, so PIPEDA applies to the Service; if you live in Quebec, British Columbia or Alberta, that province's private-sector privacy law may also apply and gives you at least equivalent rights.
We do not collect payment card data, government identifiers, or location data from your device, and we do not use advertising or analytics trackers.
The listings in the Service — including the names of assessed owners — are reproduced from records that the Government of New Brunswick and Service New Brunswick make available to the public by law: tax-sale notices published in The Royal Gazette under the Real Property Tax Act, the Expression of Interest list, surplus-property listings, and GeoNB property-assessment and parcel data. We reproduce this information unchanged, for the purpose for which it was published (informing the public about the sale of the property), and we do not combine it with other sources to build profiles of individuals. If you are an assessed owner and believe a record is inaccurate, the authoritative correction is made with Service New Brunswick or the Department of Finance and Treasury Board; you may also contact us and we will review the entry and, where a listing is no longer current, remove it from the active view.
To create and operate your account, process payments, provide the Service, send transactional emails (welcome, password reset, payment and account-change confirmations, account deletion), respond to your requests, and protect the Service from abuse. Under Canada's anti-spam legislation (CASL) these are transactional messages; we do not send marketing or promotional email and we do not sell or rent personal information.
We use service providers who process data on our behalf and only for the purpose described. Some are located in, or store data in, the United States and other countries; while your information is there it may be accessible to that country's courts, law-enforcement and national-security authorities under local law.
We keep your account data while your account is active. When you delete your account (from the account page) your account record and saved notes are permanently removed and any active subscription is cancelled. Security/audit-log entries are kept for up to 24 months and payment records are kept by Stripe and by us as required by tax law (generally 7 years). Backups are rotated on a 30- to 120-day cycle, after which deleted data no longer exists in any backup.
You can view and correct your account information on your account page and delete your account there at any time. You may ask us for access to, or correction of, any personal information we hold about you, and for a copy of it in a portable format; we respond within 30 days. You may withdraw consent to our collection, use or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice — withdrawing consent needed to operate your account will normally mean closing it.
If you have a concern about how we handle your personal information we want to hear it first, at the contact below. You also have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or to your provincial privacy commissioner.
Passwords are hashed, never stored in plain text. Sessions use secure, HTTP-only cookies; all traffic is served over HTTPS; the application is protected against cross-site request forgery; sign-in and password-reset attempts are rate-limited. Administrative access uses a separate credential and every administrative action is logged. No system is perfectly secure, but we take safeguards appropriate to the sensitivity of the information we hold.
If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and tell you what steps you can take.
We use one essential session cookie to keep you signed in and to protect forms against cross-site request forgery, and an optional "remember me" cookie so you stay signed in on your own device. The dashboard stores display preferences (such as which columns are shown) in your browser's local storage. We do not use third-party advertising or tracking cookies.
The Service is intended for adults engaged in property research and is not directed to children. We do not knowingly collect personal information from anyone under the age of majority; if you believe a child has created an account, contact us and we will delete it.
Material changes to this policy will be announced by email to account holders and reflected in the "Last updated" date above.