Privacy

Last updated: October 9, 2026

KeyFlow is software that rental real-estate agents in Ontario use to answer enquiries, book viewings, collect application documents and prepare leases. This page says what KeyFlow handles, where it goes, and how to see, correct or delete it.

Who we are

KeyFlow is operated by Keshav Jindal in Toronto, Canada. For anything about your information, write to hello@keyflowrentals.com.

Whose information this is about

If you wrote to an agent, that agent (and their brokerage) decides how your information is used. KeyFlow handles it for them, and only to do what this page describes.

What KeyFlow handles

What KeyFlow never records. Race, ancestry, place of origin, colour, ethnic origin, citizenship, religion, sex, sexual orientation, gender identity or expression, age, marital or family status, disability, pregnancy, receipt of public assistance, source of income or immigration status, even if you mention them. It never records a Social Insurance Number.

Application documents

What it's used for

Emails from KeyFlow

Where your information goes

Everything KeyFlow keeps is stored in Canada. Some of it is handled outside Canada, or by companies based outside Canada, on its way in or out:

WhatWhoWhat happens
Reading emails with AIAmazon Web ServicesThe text of each email is read by an AI model on Amazon's computers in the United States or Canada. Amazon keeps no copy and doesn't use it to train AI. The company that makes the AI (Anthropic) doesn't receive it.
Checking PDF documents with AI (only if your agent turns it on and you agreed)Amazon Web ServicesOnly the text of the document, with ID, bank account and Social Insurance numbers blanked, is read by an AI model in the United States or Canada. Never your photo ID, never the file itself. Amazon keeps no copy.
Addresses and mapsGoogleAddresses of rental properties, and an agent's own business address, are checked with Google Maps. Nothing about a tenant is sent.
Receiving email and serving these pagesCloudflareEmails to an agent's KeyFlow address pass through Cloudflare's network on their way to KeyFlow in Canada; KeyFlow keeps nothing there. Cloudflare also serves KeyFlow's pages and, like any web host, sees visitors' IP addresses.
The databaseSupabaseSupabase, a US company, runs KeyFlow's database in Canada. Its own technical logs record that requests happened, not what your emails say.
Sending emailAmazon Web Services, then your email providerKeyFlow sends email from Amazon's Canadian data centre. Once delivered, an email sits wherever your own email provider keeps it.
Agents' subscriptionsStripeStripe, a US company, handles agents' payments: the agent's name, email, billing address and card. Never anything about a tenant, a listing agent or a landlord.
The previous version of KeyFlow (being retired)Supabase (United States) and AnthropicAn earlier version of KeyFlow, still in use by its operator until it is retired, keeps its data in the United States and uses Anthropic's AI to draft replies.

While information is in the United States, it may be subject to the laws of the United States.

How long it's kept

Application documents: as described above (deleted automatically a set time after the deal ends, or sooner if you delete them). Everything else: for as long as the agent is working with you, and afterwards for as long as the agent needs their records. You can ask for it to be deleted sooner, and your agent can delete everything about you in one step.

Your choices

How it's protected

This website

This website uses no cookies, no analytics and no trackers, and loads nothing from other companies.

Changes

When what KeyFlow does changes, this page changes with it, and the date at the top is updated.