Terms of Use Agreement

5. Customer responsibilities

5.1 Fair housing and tenancy law. You will make sure that the questions you configure, the pre-qualification criteria you set, the listings and information you provide, and the way you use information collected through the Service comply with fair-housing, human-rights, tenancy, consumer-protection and anti-discrimination laws that apply to you. The Service collects answers and passes them to you; it does not accept or reject anyone and does not make rental decisions. You make those decisions, and you will keep a way for a Renter to reach a person about them and to request accommodations.

5.2 Listings and property information. You confirm that you are entitled to market each property you add, that listings are accurate and not misleading, and that you have any consent you need from property owners and current tenants, including for showings and tenant notifications.

5.3 Self-showings and lockboxes. You decide which properties are offered for self-guided showings, who may enter, and what verification is required. You are responsible for the condition and safety of the property, for complying with laws about entry and notice to current tenants, for the lockbox or smart-lock hardware and its provider's terms, and for revoking codes. LetHub provides scheduling and code delivery; it is not present at showings and has no control over who enters a property or what happens there.

5.4 Identity verification. You will use identity-verification results only to decide whether to release access for a showing, and not for any other purpose. You will not require verification where the law prohibits it, and you will offer another way to view the property to a Renter who cannot or does not wish to verify.

5.5 Messaging consents. For every text message, email or call sent through the Service you are responsible for having the consent the law requires, for identifying yourself as the sender, and for honouring opt-outs. Section 8 has the details.

5.6 Information you must not collect. Unless we agree in writing first, you will not configure the Service to request social security or social insurance numbers, government ID numbers (the identity-verification provider collects ID images under its own flow), payment card or bank details, health information, or information about children.

5.7 Acceptable use. You will not, and will not allow anyone else to: use the Service for anything unlawful, deceptive, harassing, threatening or discriminatory; send marketing or bulk messages that the law or carriers do not allow; impersonate another person or business; resell or offer the Service to businesses other than your own and the property owners whose properties you manage without an order form that allows it; copy, modify, reverse engineer or try to extract the source code, prompts or models of the Service, or use it to build a competing product; probe or test the security of the Service or bypass limits, authentication or billing without our written permission; introduce malware or place an unreasonable load on the Service; or use the Service if you are subject to Canadian or United States sanctions.

5.8 Limits. We may set and change reasonable limits on properties, users, messages, showings, verifications and similar measures, and may throttle or block traffic that exceeds them or looks abusive. Where practical we will tell you first.

6. Renters and Customers: dealings with each other

6.1 LetHub is a tool that Customers use to communicate with Renters and schedule showings. We are not a party to any tenancy, application, showing or other dealing between a Customer and a Renter, we do not screen properties or people, and we make no promise that a Renter will find housing or that a Customer will find a tenant.

6.2 Each of you is responsible for your own dealings with the other. Without limiting that, LetHub is not responsible for: a showing that is cancelled, missed or late; damage, loss or injury before, during or after a showing; false or misleading information a Customer or Renter provides; a Customer's compliance with human-rights or tenancy law; or a listing that is withdrawn.

6.3 A booking or confirmation through the Service is not a tenancy agreement or an offer of tenancy. Whether a tenancy exists between a Customer and a Renter is decided by their own dealings and the law, which may recognize written, oral or implied agreements.

7. Renter terms

7.1 Your information. You will give accurate information when you ask about or book a showing. Lockbox and access codes are personal to you; you will not share them, and you will use them only for the showing you booked and only during the time booked.

7.2 Identity verification. Before a self-guided showing or when a Customer requires it, you may be asked to verify your identity through our identity-verification provider, Persona. In Persona's flow you photograph a government-issued ID and take a selfie; Persona compares them and tells LetHub whether the check passed, the name on your ID, the email and phone number you entered, and signals about your connection used to detect fraud (IP address, approximate location, whether the network is masked). LetHub does not receive your ID images or selfie. Before it collects anything, Persona's flow shows you the notice and obtains the written consent the law requires, including for biometric information. Persona keeps the images and facial geometry for 12 months (Privacy Policy, section 4); Illinois law in any case requires their destruction within three years of your last interaction with us. Verification is a fraud-prevention tool, not a guarantee that a person is who they claim to be. If you do not want to verify, ask the Customer for another way to view the property.

7.3 Conduct. You will treat the property and anyone you meet with respect, follow the Customer's instructions for the showing, and leave the property as you found it. You are responsible for any damage you cause.

7.4 Messages. We and the Customer use the phone number or email you give through the Service to answer your enquiry and arrange showings, including automated replies from the assistant and reminders. Giving your contact details is not consent to marketing or to unrelated automated messages. Reply STOP to stop automated texts, use the unsubscribe link in an email, or tell the Customer another way; after that, the only automated message you receive is a confirmation of the opt-out where the law allows one.

7.5 No guarantee. LetHub does not guarantee that a property is available, accurately described, or will be rented to you.

8. Messaging and identity-verification features

8.1 Messaging Services. "Messaging Services" means any part of the Service that sends or receives text messages (SMS, MMS, RCS), emails or calls, including automated and AI-generated messages. A "Lead Instance" means one prospective renter (identified by phone number) interacting about one listing; where messaging is at portfolio level, the Lead Instance is counted at that level.

8.2 Allowances and overage. Each Customer plan includes a monthly allowance of outbound messages as shown on the pricing page or order form. Messages beyond the allowance are billed monthly in arrears at the overage rate agreed for the current term, which may vary by destination and message type, plus carrier surcharges passed through under section 8.6. A "message" is one outbound submission for cap purposes; for billing, segments, MMS, international messages and carrier surcharges are counted as recorded in our logs and carrier reports.

8.3 Automated cap. Automated outbound messages are capped at twenty per Lead Instance in any rolling 30-day period. Replies to STOP, UNSUBSCRIBE and HELP, and one-time verification codes, do not count. Manual messaging is subject to the per-account and per-user limits shown in the app. We may throttle, queue or block messages when limits are reached, and may require a plan change or suspend Messaging Services for a Customer whose traffic materially exceeds typical patterns.

8.4 Compliance. Customers are solely responsible for complying with telecommunications, privacy, anti-spam and carrier rules that apply to their messages, including the TCPA and CAN-SPAM in the United States, CASL in Canada, CTIA guidelines and A2P 10DLC registration. Customers will obtain valid consent, identify themselves as the sender, include opt-out instructions where required, honour STOP and unsubscribe requests promptly, and keep consent records. We may suspend Messaging Services for non-compliance. Carrier fines, rejections or surcharges attributable to a Customer's traffic or registration information are passed through to the Customer.

8.5 Prohibited content. Customers will not send messages that are unlawful, deceptive, harassing, or that promote goods or services carriers restrict. We may block or filter messages we reasonably believe violate law or carrier policy.

8.6 Deliverability. Delivery is not guaranteed. Carriers may block, rate-limit, filter or modify traffic or pricing at any time. We may pass through a carrier's changed surcharges without markup after telling the Customer the new charge and its effective date; this does not let us change our own fees or included allowances during the current term.

8.7 Identity-verification allowance. Each Customer plan includes a monthly allowance of identity-verification events as shown on the pricing page or order form. Events beyond the allowance are charged at the overage rate shown there and appear on the next invoice. If overage exceeds three times the allowance in two consecutive months, we may throttle or suspend the feature until usage normalizes or the Customer upgrades. Verification allowances and overage rates are fixed for the current term and may change at renewal under section 9.6.

9. Fees, billing and term

9.1 Plans. Customer pricing is set by the number of on-market units or the size of the portfolio, as shown on the pricing page or in the Customer's order form, plus any add-ons, messaging and verification overage, and taxes. Where the pricing page and an order form differ, the order form governs.

9.2 Term and renewal. Each Customer subscription has an initial term of twelve months starting on the billing start date in the order form, and then renews for successive twelve-month terms unless either of us gives notice of non-renewal at least 30 days before the renewal date. We email the account owner a renewal reminder 45 days before the renewal date, stating the renewal price, the term, the billing frequency, how to cancel and the deadline. If the reminder reaches you late, you may still give notice of non-renewal until 15 days after you receive it, with no charge for the unwanted renewal. Before you subscribe, your order form sets out the price, the twelve-month term and what it adds up to, the billing frequency, the first charge date, the renewal date and rule, the 30-day cancellation window, the non-renewal deadline and how to cancel, and you confirm the recurring charge when you sign it.

9.3 Billing. Fees are billed in advance at the frequency chosen in the order form: monthly, every three months, every six months, or for the full term up front. Overage is billed monthly in arrears. You pay by the method in your order form or invoice; where you pay by card, Stripe processes the payment, and by providing a payment method you authorize us and Stripe to charge it for the amounts due, including renewals. Invoices are due on receipt unless the order form says otherwise. Fees are in the currency stated in the order form and exclude taxes, which we add where we must collect them.

9.4 30-day opt-out, then a fixed term. A Customer may cancel for any reason within 30 days after the billing start date by writing to info@lethub.co or through the app. If you cancel in that window, charges stop immediately, we keep the first month's fee, and we refund within 30 days any subscription fees you prepaid for periods after that first month; no further instalments for the cancelled term become payable, while usage, overage and separately agreed services already incurred remain payable. After the 30-day window the subscription is a commitment for the rest of the twelve-month term: fees for the whole term remain payable on the chosen billing schedule, and cancellation takes effect at the end of the term. Nothing in this section limits your rights under section 3.4, 13.3 or 14.2.

9.5 Late payment. If a payment fails or is not made when due, we may suspend the account after 10 days' notice until it is paid, and may charge simple interest at 1% per month (12% per year, not compounded) on overdue amounts, or the highest rate the law allows if lower, plus reasonable collection costs. A chargeback without a valid reason is a breach of these Terms.

9.6 Price changes. Any change to prices or allowances for a renewal term is stated in the renewal reminder, and you may decline the renewal within the notice period in section 9.2. Prices and allowances for the current term do not change, except carrier surcharges passed through under section 8.6.

9.7 Set-up and services. Onboarding, configuration, data import and migration assistance are provided as described in the order form or as a courtesy, with reasonable care and on an "as is" basis. We do not guarantee feature parity with a previous provider, timelines or outcomes, and we are not responsible for limits or defects in third-party systems. The exclusive remedy for deficient onboarding services is re-performance.

9.8 Utter voice credits. Section 12 of these Terms incorporates the Utter Terms of Use at tryutter.ai/terms-of-use. Fees, credits and wallet rules for the voice add-on are in section 9 of the Utter Terms.

10. Data

10.1 Ownership. As between us, Customers own the information they and their Renters put into the Service ("Customer Data"), including leads, messages, bookings, listings and verification results. This does not transfer or limit any individual's privacy, access, correction or deletion rights.

10.2 Our licence. Customers grant us a non-exclusive, worldwide, royalty-free licence to host, copy, transmit, display, process and analyze Customer Data, and to let our service providers do the same, in order to provide, secure, support and bill the Service; to review conversations, measure errors and improve the assistant and the Service, for the Customer and for the Service generally, including by training LetHub's own AI (AI that only LetHub uses, including AI we build with our AI providers' tools; those providers may use the data only to build LetHub's AI, not to train their own AI, and must delete it when we ask) with data from accounts that have accepted this version of the Terms, after removing names, contact details and other direct identifiers and excluding information about people in Quebec; to create de-identified data under section 10.4; to syndicate listings where the Customer has asked us to; to produce reports for the Customer; and to comply with law and enforce these Terms. Only the people who need it for that work can access identifiable conversations, and we do not use identifiable conversations for advertising or show one Customer's data to another. A Customer can ask us to leave its data out of AI training by emailing info@lethub.co, and we will exclude it from future AI training within 30 days.

10.3 What we will not do. We will not sell Customer Data. We will not use Customer Data to train general-purpose or foundation AI models, and we do not allow our AI providers to do so: we only send Customer Data to a provider whose contract and account settings reflect that restriction. We will not market to Renters.

10.4 De-identified data. We may create de-identified or aggregated data from Customer Data that does not identify any Customer or individual, following a written de-identification standard. Once data no longer identifies anyone, it is not Customer Data. We own it and may use and disclose it for any lawful purpose, during and after the term. It never includes audio recordings, and it does not include information about people in Quebec unless anonymized to the standard Quebec law requires. We will not try to re-identify anyone from it, and we require anyone we share it with to agree in writing not to. Data used for AI training under section 10.2 stays Customer Data.

10.5 Roles. For personal information about Renters and tenants, the Customer is the controller (or "business") and LetHub is the processor (or "service provider"). Schedule A sets out our data-processing commitments and forms part of these Terms.

10.6 Security and breaches. We protect Customer Data with measures appropriate to the risk, described in the Privacy Policy. If we become aware of a security breach affecting a Customer's data, we will notify the account owner without undue delay and in any case within 72 hours after we become aware of it, without waiting to finish our investigation; we keep them updated as we learn more, preserve the relevant records and cooperate with their response.

10.7 Retention and deletion. Customer Data is available in the Service for the retention period in section 8 of the Privacy Policy, which for most records is the life of the account. After cancellation or termination, the Customer keeps read-only access to export it for 30 days, and may ask us to delete it sooner. Customers are responsible for exporting anything they need to keep; we do not keep Customer Data beyond those periods and are not responsible for data deleted after they end. We delete Customer Data within 90 days after the account ends, except backups (deleted on the backup cycle) and records we must keep by law.

10.8 Where data is processed. We handle Customer Data from Canada, and our providers process it in the locations listed for each in section 7 of the Privacy Policy, mainly the United States. These Terms do not promise that data stays in one country.

11. Intellectual property and confidentiality

11.1 Ours. We and our licensors own the Service, including software, prompts, models, designs, documentation and the LetHub and Utter names and logos. These Terms give you no rights in them except the licence in 11.2.

11.2 Your licence. Customers receive a limited, non-exclusive, non-transferable licence to access and use the Service for their internal business of managing and marketing rental properties, through the accounts and users permitted by their plan, during the term. Renters receive a limited licence to use the Service to enquire about, book and attend showings.

11.3 Your materials. You grant us a licence to use the names, logos, listings, photos and other materials you provide so that the Service can display, send and syndicate them as you direct.

11.4 Customer reference. We may identify a Customer by name and logo on our website and in sales materials. A Customer can withdraw that permission at any time by emailing info@lethub.co, and we will remove it within 10 business days. We will not publish a quote or case study without written approval.

11.5 Feedback. If you give us ideas or suggestions, we may use them without obligation to you.

11.6 Confidentiality. Each of us will use the other's non-public information only to perform under these Terms, protect it with reasonable care, and share it only with people and providers who need it and are bound by confidentiality. This does not apply to information that is public without breach, already known, lawfully received from someone else, or independently developed, and either of us may disclose when the law requires after giving notice where allowed. These duties last three years after the Terms end, and indefinitely for Customer Data and trade secrets. De-identified data created under section 10.4 is not Confidential Information of the Customer.

11.7 Copyright complaints. If you believe content on the Service infringes your copyright, send a notice containing the information required by 17 U.S.C. § 512(c)(3), or a notice under the Canadian Copyright Act's notice-and-notice regime, to our designated agent: Copyright Agent, Grit AI Tech Inc., 722 Cormorant Street, Victoria, British Columbia V8W 1P8, Canada; email info@lethub.co; telephone +1 778 677 8456. Our registration in the US Copyright Office DMCA Designated Agent Directory is number DMCA-1084054. We will remove or disable access to material that is the subject of a valid notice, forward notices where Canadian law requires, accept counter-notices, and terminate the accounts of repeat infringers.

12. Utter voice add-on

If a Customer turns on an Utter voice agent, buys a phone number or loads voice credits, from inside LetHub or at tryutter.ai, those features are governed by the Utter Terms of Use at tryutter.ai/terms-of-use and the Utter Privacy Policy at tryutter.ai/privacy-policy, which are incorporated into these Terms. For anything about the voice agents the Utter Terms control. In particular, every call the agent handles is recorded and transcribed; the agent's first sentence tells the caller that the call is recorded and that they are speaking with an AI assistant, the Customer must not remove or weaken that notice, and a caller who does not agree can hang up and use the Customer's other contact method (section 6.1 of the Utter Terms has the detail, and section 8 of the Utter Privacy Policy says how long recordings are kept); the agent can make mistakes and must not be used as an emergency line; voice usage is prepaid and deducted per minute; paid voice credits expire six months after they are loaded (where the law allows expiry) and are refundable only as set out in sections 9.4 and 9.5 of the Utter Terms, and trial credits expire 12 months after they are granted, have no cash value and may be withdrawn for abuse under section 9.3(d) of those Terms; and callers' personal information is processed under the data-processing terms in the Utter Terms.

13. Term, suspension and termination

13.1 These Terms start when you accept them and continue until your account is cancelled or terminated. Section 9.4 governs Customer cancellation. A Renter may stop using the Service at any time and may ask the Customer or us to delete their information.

13.2 We may suspend all or part of the Service for a failed or overdue payment only after the 10 days' notice in section 9.5. On other grounds we may suspend with notice where practical: if we reasonably believe your use breaks the law, these Terms or carrier rules; if a carrier, provider, regulator or court requires it; or if your use creates a security or operational risk. We lift the suspension once the cause is resolved.

13.3 We may terminate these Terms (a) on notice, if you materially breach them and the breach is not cured within 10 days after we tell you about it, or at once if the breach cannot be cured; or (b) for any other reason on 30 days' notice. If we terminate under (b), or stop offering the Service, we refund prepaid fees for the period after termination.

13.4 When the Terms end, your right to use the Service ends and section 10.7 governs your data. Sections that by their nature should survive (including 5, 6, 8.4, 9, 10, 11, 14, 15, 16 and 17) survive.

14. Warranties and disclaimers

14.1 Each of us warrants that it has the authority to enter into these Terms.

14.2 We warrant to Customers that we will provide the Service with reasonable skill and care and in accordance with these Terms. The sole remedy for a breach of this warranty is for us to correct the problem or, if we cannot within a reasonable time, to refund prepaid fees for the period after the Customer cancels.

14.3 EXCEPT AS STATED IN 14.2, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE". TO THE FULLEST EXTENT THE LAW ALLOWS, WE DISCLAIM ALL OTHER WARRANTIES AND CONDITIONS, EXPRESS, IMPLIED OR STATUTORY, INCLUDING MERCHANTABILITY, MERCHANTABLE QUALITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE OR SECURE; THAT THE ASSISTANT WILL GIVE ACCURATE, COMPLETE OR APPROPRIATE RESPONSES; THAT ANY MESSAGE WILL BE DELIVERED; THAT IDENTITY VERIFICATION WILL DETECT EVERY FRAUD; THAT A LOCKBOX OR SMART LOCK WILL WORK; OR THAT THE SERVICE WILL PRODUCE ANY NUMBER OF LEADS, SHOWINGS, APPLICATIONS OR LEASES.

14.4 Beta features are provided without any warranty.

15. Indemnification

15.1 A Customer will defend us, our affiliates and our and their directors, officers, employees and contractors against any claim, demand, investigation or proceeding brought by a third party, including a Renter, tenant, property owner, carrier or regulator, and will pay the resulting damages, fines, penalties, settlements and reasonable legal costs, to the extent it arises from: the Customer's configuration, listings, Customer Data or instructions; a failure to obtain consents or give notices required for messaging, showings, tenant notification or identity verification; a breach of section 5 or 8, including fair-housing, tenancy, telemarketing, anti-spam or privacy laws; a self-showing or access to a property; a dispute between the Customer and a Renter, tenant or owner; or use of the Service in breach of these Terms. This obligation does not apply to the extent a claim is caused by our breach of these Terms, our negligence or our wilful misconduct.

15.2 A Renter is responsible for losses caused to third parties by the Renter's deliberate misuse of an access code, unlawful conduct at a showing, or knowingly false information given through the Service. This does not cover losses caused by our breach, negligence or wilful misconduct, and section 6.2 does not excuse our own acts or omissions where the law holds us responsible.

15.3 We will notify you promptly of a claim, give you control of the defence and settlement, and cooperate reasonably at your expense. A settlement that admits fault on our behalf or imposes obligations on us needs our written consent.

16. Limitation of liability

16.1 TO THE FULLEST EXTENT THE LAW ALLOWS, NEITHER OF US WILL BE LIABLE TO THE OTHER FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST BUSINESS, LOST LEADS OR TENANTS, LOSS OF DATA, OR COST OF SUBSTITUTE SERVICES, HOWEVER CAUSED AND UNDER ANY THEORY OF LIABILITY, EVEN IF ADVISED OF THE POSSIBILITY.

16.2 TO THE FULLEST EXTENT THE LAW ALLOWS, OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS PAID TO US FOR THE SERVICE BY THE CLAIMANT IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM AND (B) US$100.

16.3 Nothing in these Terms excludes or limits liability for fraud or wilful misconduct, or any liability or remedy the law does not let us exclude or limit. The exclusions and cap in 16.1 and 16.2 do not reduce a refund these Terms promise, do not limit a Customer's payment obligations or indemnification obligations under section 15, and do not bind a person who is not a party to these Terms.

16.4 You agree that these limits are a fair allocation of risk given the price of the Service and that we would not offer it at that price without them.

17. Governing law and disputes

17.1 Talking first. Either of us may ask the other to discuss a complaint for up to 30 days before going further. That is voluntary: it does not stop either of us from starting a proceeding, meeting a limitation deadline, contacting a regulator or seeking urgent relief.

17.2 These Terms, and any dispute arising out of or relating to them or the Service, are governed by the laws of the Province of British Columbia and the federal laws of Canada that apply there, without regard to conflict-of-law rules.

17.3 Subject to laws that cannot be contracted out of, the courts of British Columbia sitting in Victoria have jurisdiction over disputes under these Terms, and each of us submits to them. This does not take away a court or tribunal's jurisdiction under a law that cannot be waived, stop a complaint to a regulator, or remove protections that apply where you live. Either party may still seek an injunction or other urgent relief from any court with jurisdiction.

17.4 No waivers. These Terms do not take away any right to bring or join a class, collective or representative proceeding or any right to a jury trial, and they do not require arbitration.

18. Changes to these Terms

We may update these Terms. For a material change we will email Customer account owners and post a notice in the Service at least 30 days before the change takes effect; for other changes we will update the "Last updated" date. The current version is always at lethub.co/terms-of-use. If you do not agree to a material change, tell us before it takes effect: you may end the affected service on that date with no further term charges and a pro-rated refund of any prepaid period, or we may keep your existing terms until your current term ends. Where the law requires it we ask for your agreement; silence alone is not acceptance.

19. General

19.1 Notices. We send notices to the account owner's email address on file; if a notice bounces, we use another reasonable way to reach you. You may send notices to us by email at info@lethub.co or by mail to Grit AI Tech Inc., 722 Cormorant Street, Victoria, British Columbia V8W 1P8, Canada; a cancellation or privacy request made by email or in the app needs no mailed copy. Service of legal proceedings follows the applicable law.

19.2 Assignment. You may not assign these Terms without our written consent, except to a successor of your whole business that accepts them in writing. We may assign them to an affiliate or to a successor in a merger, acquisition or sale of assets, and will tell you if we do.

19.3 Force majeure. Neither of us is liable for a failure caused by events beyond its reasonable control, including carrier, provider or internet failures, power failures, labour disputes, epidemics, government action, war or natural disaster. Payment obligations are not excused.

19.4 Independent parties; no third-party beneficiaries. We are independent contractors. These Terms create no partnership, agency or employment relationship, and no one other than you and us has rights under them.

19.5 Entire agreement and precedence. These Terms, the Privacy Policy, Schedule A, the Utter documents incorporated by section 12, and any order form are the whole agreement between us and replace any earlier agreement or statement, including statements in sales calls, demos and marketing. If they conflict, an order form prevails for what it covers (but cannot reduce the protections in Schedule A below what the law requires), then Schedule A for data-processing matters, then these Terms, then the Privacy Policy.

19.6 Severability and waiver. If a court finds a provision unenforceable, it will be limited to the minimum extent necessary and the rest will remain in effect. Not enforcing a provision is not a waiver of it.

19.7 Electronic agreement. You agree to electronic contracting and to receiving notices, invoices and records electronically.

19.8 Language. These Terms are in English. Where the law requires a French version (for example in Quebec), we provide it before you accept, and a version in another language governs only if you have expressly chosen it as the law allows.

19.9 Contact. Questions about these Terms: info@lethub.co.

Schedule A: Data Processing Terms

These Data Processing Terms apply when we process personal information about Renters, tenants and other individuals on a Customer's behalf ("Customer Personal Information").

A1. Roles. The Customer is the controller (or "business") and LetHub is the processor (or "service provider"). The Customer instructs us to process Customer Personal Information as needed to provide the Service as described in the Terms, the documentation and the Customer's configuration. The subject matter is leasing communication, scheduling and showing access; the duration is the term plus the deletion period in section 10.7; the individuals are Renters, tenants and the Customer's staff; the categories are those listed in the Privacy Policy. The Customer's instructions include improving the Service, including AI training for LetHub's own AI as section 10.2 of the Terms describes, and creating de-identified data as section 10.4 describes.

A2. Our commitments. We will: (a) process Customer Personal Information only on the Customer's documented instructions, unless the law requires otherwise, in which case we will tell the Customer first where the law allows, and we will say if we believe an instruction breaks the law; (b) bind the people we authorize to process it to confidentiality; (c) maintain appropriate security measures, including encryption in transit, encryption at rest provided by our hosting provider, role-based access and logging; (d) notify the account owner without undue delay, and in any case within 72 hours after we become aware of it, of a breach of security affecting Customer Personal Information, without waiting to finish our investigation, with the information the Customer reasonably needs for its own notifications and updates as we learn more; (e) help the Customer respond to individuals' privacy-rights requests and with impact assessments and regulator consultations, to the extent reasonable; (f) at the Customer's choice, return or delete Customer Personal Information as described in section 10.7; and (g) make available the information reasonably necessary to demonstrate compliance, including completing a security questionnaire once per year, and allow an audit by the Customer or an independent auditor at the Customer's cost once per year on 30 days' notice, and additionally after a breach affecting the Customer's data or when a regulator requires it.

A3. Sub-processors. The Customer authorizes the sub-processors listed in our Privacy Policy. We will update that list and email every account owner at least 15 days before adding a sub-processor that will process Customer Personal Information, impose data-protection obligations on each sub-processor at least as protective as these, and remain responsible for their performance. If the Customer reasonably objects on data-protection grounds and we cannot address the objection, the Customer may cancel the affected part of the Service with a pro-rated refund of prepaid fees.

A4. United States state privacy laws. Where the California Consumer Privacy Act or a similar US state privacy law applies, we are the Customer's service provider or processor. We will comply with those laws, provide the same level of privacy protection as they require of the Customer, and flow the same obligations down to our sub-processors, and we certify that we will not: sell or share Customer Personal Information; retain, use or disclose it for any purpose other than the business purposes in the Terms, or outside our direct business relationship with the Customer, except as those laws permit; or combine it with personal information from others, except as those laws permit. We will tell the Customer if we can no longer meet these obligations, and the Customer may take reasonable steps to stop and remedy unauthorized use. Improving the Service and creating de-identified data as sections 10.2 and 10.4 of the Terms describe are business purposes the Customer has authorized; de-identified data that meets the legal standard is not personal information.

A5. Canada. We will process Customer Personal Information in accordance with the Personal Information Protection and Electronic Documents Act and the private-sector privacy laws of British Columbia, Alberta and Quebec as they apply to a service provider, and will tell the Customer if we receive a request or order from a foreign authority to disclose it, unless we are prohibited from doing so.

A6. Precedence. If this Schedule conflicts with the Terms on a data-processing matter, this Schedule prevails.