Privacy

Frontage privacy notice

Last updated 16 October 2026

Frontage is built and operated by SMARTSOL LIMITED, an Ontario corporation. This notice covers the website at frontage.cloud, the Frontage app at app.frontage.cloud, the phone assistant, and the client pages brokers send from Frontage. How SMARTSOL handles billing and company records is in the SMARTSOL privacy notice.

What we collect

When you visit frontage.cloud

Server logs: your IP address, browser and the pages you request, kept for up to 30 days for security. If you allow analytics, Google Analytics cookies too, described below.

When you create an account

Your name, email address and password, which we store only as a one-way hash. If you choose them: a mobile number for sign-in codes, and your broker profile, meaning brokerage, licence details, business phone, office address and the markets you cover. We also keep your plan and billing status.

What you put in Frontage

The records you add: contacts, companies, buildings, spaces, leases, deals, tours, offers, documents, notes, and any email, calls or meetings you choose to log. You decide what goes in.

If you use the phone assistant

For calls to your Frontage number: the caller's number, the call recording, its transcript and summary, and any message or viewing request. Before they speak, callers are told that they are talking to an AI assistant and that the call is recorded.

When a client opens a page you sent

That the page was opened, and any reply, question or tour request the client sends from it.

If you connect another account

If you connect Microsoft, Google or DocuSign, the access we are granted, stored encrypted and used only for what you connected it for.

How we use it

To run Frontage for you: store your book, send the reminders and emails you set up, answer your calls, and produce the drafts and answers you ask for. To protect accounts, with sign-in codes, rate limits and an audit log of sign-ins, exports, shares and deletions. To answer support requests, bill for paid plans, and meet our legal obligations. With your consent, to measure how people find frontage.cloud and whether our advertising works.

We do not sell personal information. What you put in Frontage is not used to train AI models.

People in your book

When you store information about clients, prospects or callers, you decide what is collected and why, and you are responsible for having the right to collect it and to contact those people, under PIPEDA, Quebec's privacy law and CASL. We handle it on your behalf, only to provide Frontage to you.

If a broker using Frontage holds information about you

You may be reading this because a broker who uses Frontage has you in their records: as a tenant, a landlord, a contact, or someone who called or emailed them. In that case the broker decides what is collected about you and why, and SMARTSOL LIMITED holds it only on the broker's behalf. What we may hold is what the broker entered or received: your name and contact details, the notes, messages and documents of your dealings with them, and, if you called their Frontage line after hearing its recording announcement, the recording and transcript of that call.

To see, correct or delete that information, or to withdraw consent to being contacted, ask the broker: they are the organisation accountable for it and can act on your request in Frontage. If you cannot reach the broker, or the answer does not satisfy you, write to [email protected] and we will help, including by forwarding your request and telling you what we hold. You can also complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

Analytics and advertising

frontage.cloud uses Google Analytics. Google sets cookies (_ga, _ga_* and, when you arrive from a Google ad, _gcl_aw) that let us count visits, see which pages and ads brought people here, and tell whether a visit ended in a sign-up. The app sends Google one event, when an account is created, and no other activity inside the app.

Whether those cookies are set before you choose depends on where you are. In Quebec, the European Economic Area, the United Kingdom and Switzerland, they are off until you allow them. Elsewhere in Canada and in the United States, measurement is on when you arrive, a notice tells you so, and you can decline at any time; if you decline, the cookies are not set and Google may still receive basic signals without identifiers, such as that a page loaded. Personalised advertising is off everywhere unless you allow it. A choice you make stays made; dismissing the notice without choosing changes nothing.

We may advertise on Google and use this measurement to see whether an ad led to a sign-up. We do not use advertising tags from other companies, such as Meta or LinkedIn. We will update this notice before we add any.

Your choice is stored in a cookie called frontage_consent for six months. You can change it at any time: Cookie settings.

Cookies

Who processes it, and where

Your account and everything in Frontage is stored in Microsoft Azure's Canada Central region. These service providers process personal information for us, under agreements that require them to protect it. Some process it outside Canada, where the law of that country applies.

Twilio carries the call itself. Once a recording is copied to our storage in Canada, it is deleted from Twilio.

How long we keep it

• Your account and your book: until you delete the records or close your account.
• Closing your account deletes your records, documents and call recordings. The audit trail stays for security, with your name and email removed from it.
• Email, calls and meetings you push in that match no deal: 60 days.
• Server logs: 30 days.
• Billing and tax records: six years, as the law requires.
• Deleted data can remain in encrypted database backups until they expire, within 35 days.

How it is protected

Encryption in transit and at rest, and connected-account credentials encrypted separately. Sessions in HttpOnly cookies with cross-site request protection. Optional two-factor sign-in. Rate-limited sign-in, and an audit log of sensitive actions.

If something goes wrong

If we learn of a security incident involving personal information, we assess it without delay. Where the law requires it — including under PIPEDA and Quebec's Law 25, when an incident creates a real risk of significant harm — we notify the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information where it applies, and the people affected. We keep a register of every incident, whether or not it met that threshold. We tell the account holders whose records were involved as soon as we can, with what happened, what information was involved, and what we are doing about it, so that they can meet their own obligations to the people in their books.

Your choices and rights

You can export everything in your account as JSON or CSV, correct it, or delete your account from the app at any time. You can also ask us to show you the personal information we hold about you, correct it, or stop a use you consented to, subject to legal limits. Write to us at the address below, and we will answer within 30 days.

If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

Children

Frontage is a tool for licensed professionals and is not meant for anyone under 18.

Changes

If we change this notice, we update the date above, and we tell account holders by email about any change that affects them.

Contact

Privacy Officer, SMARTSOL LIMITED
2967 Dundas St. W. #1951
Toronto, ON M6P 1Z2
[email protected]