Privacy Incident — Information for Our Members
Information about the privacy incident affecting our members and the measures taken by Tatuça.
What happened
On 07/07/2026, while sending an email to a group of our members, a technical error on our part caused the recipients' email addresses to be visible to the other people receiving the same message.
In concrete terms: instead of being hidden, the group's email addresses appeared in the email header. Approximately 80 people were affected.
We want to be transparent with you about this, because trust is at the heart of what we're building with Tatuça.
What data was affected
Only one piece of information was exposed: your email address.
No other information was involved. The following were not affected:
- your name, address, or contact details;
- your payment information (it is handled by our secure provider and never passed through this email);
- your password and account access;
- your rental, lending, or listing history.
What we did
As soon as we identified the error, we:
- Identified and fixed the technical cause so that this type of send can no longer expose addresses. Our group communications now go through a system that sends each email individually, without ever making other members' addresses visible.
- Logged the incident in our internal register, as required by Law 25.
- Assessed the risk to the people affected in order to take appropriate measures.
The risk to you
The exposure of an email address alone presents a limited risk. There is no reason to believe that your account, your payments, or your other information have been compromised.
As a precaution, we still encourage you to:
- Stay alert to suspicious emails. An exposed address can sometimes be used for phishing attempts. Be wary of any message asking for your credentials, a payment, or personal information in an unusual way.
- Remember that Tatuça will never ask you for your password by email, nor for a payment outside the platform.
If you're ever unsure whether a message that appears to come from us is genuine, don't click and write to us directly at contact@tatuca.ca
Your rights
Under Quebec's Act respecting the protection of personal information in the private sector (Law 25), you have rights over your personal information, including the right to access it, to have it corrected, and to ask us questions about how we protect it.
You may also file a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe your rights have not been respected: www.cai.gouv.qc.ca.
Contact us
For any questions about this incident or your personal information, please contact our person in charge of the protection of personal information:
TATUÇA Email: contact@tatuca.ca
We sincerely apologize for this error. We take the protection of your data seriously, and we've put the necessary measures in place to make sure it doesn't happen again. Thank you for your trust.
— The Tatuça team