How we handle your lease data.

1. What we ask you to upload

You can give industrio your lease information two ways: (a) drop in the signed PDF/DOCX, or (b) type the key terms into our short form (address, size, net rent, term, TI, free rent). Both produce the same outputs — a private lease abstract for your workspace, and (if you opt in) one anonymized data point for our market benchmarks.

2. What we do with the document itself

• It stays in your workspace. Only you and teammates you explicitly invite can see it. industrio never shares the document with landlords, brokers, the landlord-side of our platform, or any other user.
• We don’t train AI on it. Our AI broker and lease-abstract tools use the document to generate your outputs. The document is not used as training data for any model, ours or anyone else’s.
• It’s encrypted at rest and in transit. AES-256 storage, TLS 1.3 in flight.
• You can delete it anytime. One click from your account settings, hard-deleted from our database within 30 days, plus from backups within 90 days.
• We retain it only as long as you keep your account active. If you close your account, your documents are purged.

3. The opt-in: anonymized market benchmarks

When you upload, you can opt in (or not) to contribute to industrio’s market benchmarks. Here’s exactly what that means:

• What gets contributed: a single data point with three fields — submarket (e.g. “Mississauga-East”), size class (e.g. “10,000–15,000 SF”), and rent range bucketed in $1/SF increments (e.g. “$15–16/SF net”). That’s the entire payload.
• What never gets contributed: your address, your unit number, your tenant or company name, your exact rent, your TI dollars, your free rent months, your renewal terms, your term length, the landlord, or any text from your lease.
• Aggregation rules: we do not display any market benchmark for a submarket+size cell unless we have at least 5 underlying comps from at least 3 different buildings. This makes individual deals statistically untraceable.
• Time delay: benchmarks lag by 12 months. A lease you signed today contributes to numbers shown next year. This further reduces commercial sensitivity.
• Withdrawal: remove your contribution from your account settings at any time. Within 24 hours your data point is purged from all aggregates and the next refresh is recomputed without it.

4. What benchmarks look like in practice

You’ll see things like this in the Market Stats panel on the search page:

You’ll never see something like “ACME Manufacturing at 1234 Industrial Dr is paying $15.50.” That kind of identification is structurally impossible — we don’t store the link between your data point and the displayed aggregate.

5. About confidentiality clauses in your lease

Most commercial leases contain some form of confidentiality clause covering economic terms. We’ve designed the upload flow so that, in our reading of typical Canadian commercial leases:

• Generating your private lease abstract is comparable to summarizing the document for your own use — the same as feeding it to ChatGPT, your accountant, or your lawyer. This is generally not restricted by confidentiality clauses, which prohibit disclosure, not analysis.
• Opting into the benchmarks typically falls under the “professional advisor” or “aggregated/de-identified disclosure” exceptions found in most modern CRE leases. Because what’s contributed is structurally non-identifying, the disclosure is functionally similar to participating in industry surveys, which courts have not treated as breach.
• You attest at upload that you have the authority to share this data, or that you’re using the tool for your own analysis. The legal responsibility for compliance with your specific lease’s clause rests with you. If you’re unsure, talk to your CRE counsel before opting in.
• If you withdraw, we remove your contribution within 24 hours, no questions.

None of the above is legal advice. We’re telling you how the system is designed; your specific lease and circumstances may need a lawyer.

6. What landlords can and can’t see

• Landlords on our platform see: aggregated submarket statistics computed from many tenants’ opt-ins. Same as what tenants see.
• Landlords cannot see: any individual tenant’s upload. Even the landlord on your lease cannot see your upload — we have no path in our system that links a building to the contributors at that building.
• Landlords cannot request tenant lists. We don’t have one in a queryable form, and even if we did, our policy and terms prohibit producing it.
• If a landlord serves a court order, we comply with the law, but we will (a) notify you immediately if legally permitted to do so, and (b) push back hard against overly broad requests.

7. Third parties, jurisdictions, retention

• Hosting: Canadian-region servers (AWS ca-central-1) for all tenant-uploaded documents.
• AI providers: when we use a third-party LLM (e.g. Anthropic, OpenAI) to abstract your lease, we use enterprise tiers with no-training data agreements, and we send only the minimum text required for that operation.
• Sub-processors: a current list is published at /sub-processors and updated whenever it changes. You’ll receive notice 30 days before any new sub-processor handles your data.
• Retention: documents kept while account active; benchmarks retain anonymized data points for 5 years (or until you withdraw).

8. Your rights

Under PIPEDA (Canada’s federal privacy law) and where applicable provincial equivalents, you have the right to:

• Access all data we hold about you, in machine-readable form.
• Correct anything that’s wrong.
• Withdraw consent and have your data deleted, including from benchmarks.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we’re mishandling your data.
• Receive notice of any data breach affecting your information within 72 hours of our awareness.

Exercise any of these by emailing privacy@industrio.ai. We respond within 5 business days.

9. Plain-language commitment

We will not:

• Sell your lease data to a third party.
• Display your address, tenant name, or exact rent to any other user.
• Allow landlords to query our system for tenant identities.
• Use your lease as training data for any AI model.
• Hold on to your data after you delete your account.

If we ever change any of the above, we’ll notify everyone affected at least 30 days in advance and give you a clean way to delete your data before the change takes effect.

Questions?

Email privacy@industrio.ai. A real person reads it. Most questions get a same-day reply.