AedoBuild is a Canadian software company primarily serving Canadian condo boards and property managers, but if you're a resident or user in the European Economic Area (EEA), the General Data Protection Regulation (GDPR) gives you specific rights. This page summarizes them and how to exercise them. For the full picture of what data we collect and why, see our Privacy Policy.
Our role
When a condo board or property manager signs up for AedoBuild and adds resident information, we act as a data processor. The board / property management company is the data controller — they decide what data goes in and why. For residents in the EEA, your privacy requests should usually go to your condo board first. AedoBuild will support them in fulfilling your request.
For people who use aedobuild.com directly (e.g., signing up, contacting sales), AedoBuild is the data controller.
Your rights under GDPR
- Access (Art. 15) — request a copy of personal data we hold about you
- Rectification (Art. 16) — correct inaccurate or incomplete data
- Erasure (Art. 17) — request deletion ("right to be forgotten")
- Restriction (Art. 18) — limit how we process your data
- Portability (Art. 20) — receive your data in a structured, machine-readable format
- Object (Art. 21) — object to processing based on legitimate interest
- Withdraw consent (Art. 7) — for any processing based on consent
- Lodge a complaint (Art. 77) — with your national data protection authority
How to exercise your rights
Email privacy@aedobuild.com with your request and the email address tied to your account. We acknowledge within 5 business days, verify your identity, and fulfill the request within 30 days (or explain why we can't).
Where your data is stored (international transfers)
AedoBuild's database and primary hosting run in the United States (AWS us-east-1, Virginia). For EEA personal data, this is a transfer outside the EEA. We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for these transfers, supplemented by our subprocessors' technical and organizational measures (SOC 2, ISO 27001, PCI-DSS where applicable).
We do not currently offer an EEA-region deployment. If your organization requires EEA data residency to comply with internal policy, please contact sales@aedobuild.com before adding personal data — we'll discuss options or recommend alternatives.
Subprocessors
See the full list with location and purpose in our Privacy Policy, Section 3. Briefly: Neon (database), Vercel (hosting), Stripe (payments), Resend (email), Cloudflare (DNS/CDN/inbound email), Anthropic (AI), Sentry (errors), Twilio (SMS).
Most of these subprocessors offer GDPR-compliant Data Processing Addenda (DPAs). For customers with active GDPR obligations, we will execute a DPA on request — contact privacy@aedobuild.com.
Lawful basis for processing
We process personal data on one of these bases (Art. 6 GDPR):
- Contract performance — delivering the service you (or your condo board) subscribed to
- Legitimate interest — security, fraud prevention, debugging
- Legal obligation — tax records, court orders
- Consent — optional features like AI-powered document Q&A or auto-pay enrollment
Privacy Officer
Email privacy@aedobuild.com. We have not formally designated a DPO (Data Protection Officer) under GDPR Art. 37 because we do not meet the mandatory criteria, but our Privacy Officer handles all data-protection inquiries.
Complaints
If you believe we've mishandled your personal data and we haven't resolved it to your satisfaction, you have the right to lodge a complaint with your national data protection authority. A list of EEA authorities is at edpb.europa.eu.