Privacy Policy

We collect information you provide directly when you:

• Create an account (name, email, password)
• Submit a rental application (full name, phone, ID document, move-in date)
• Schedule a property visit
• Make a payment
• Contact us through forms or email

We also automatically collect limited technical information such as device type, browser, and pages visited to help operate and secure our services.

• To process rental applications, vehicle-financing applications, and bookings
• To generate and deliver lease contracts and store e-signatures
• To send transactional notifications (approval, payments, reminders, visit confirmations)
• To send manual-pay reminders 7 days and 1 day before each due date (administrators receive the same alert so they can assist you)
• To charge your saved card on the due date when Autopay is enabled
• To prevent fraud, enforce our Terms, and block accounts that abuse the Service
• To comply with legal obligations

When required for vehicle financing, Social Security Numbers are encrypted at rest using AES-256-level cryptography (PostgreSQL pgcrypto). SSNs are never stored in plain text, Base64, or any reversible non-encrypted format. We follow strict data minimization: SSNs are collected only when required, stored temporarily, and automatically deleted when no longer needed. Re-collection requires explicit admin action.

Uploaded documents and signed contracts are stored in a private bucket accessible only to you and authorized administrators. Tenants cannot delete contracts or identity documents once submitted; only administrators may remove them. This protects the integrity of the lease record.

Administrators may block an account for fraud, abuse, or violation of our Terms. A blocked user is signed out, cannot sign back in, and cannot create new applications, payments, schedules, reviews, or contract signatures. Contact us if you believe a block was made in error.

Your data is stored on our managed backend infrastructure (Supabase). We use industry-standard encryption in transit and at rest, role-based access controls, and Row-Level Security policies so users only access data they are authorized to see.

Payments are processed securely by Stripe. We do not store full credit card numbers, CVCs, or bank details on our servers. When you enable Autopay, Stripe tokenizes your card and gives us a reference (a payment-method ID) that lets us charge it automatically on the due date — we never see your card number. You can disable Autopay or remove the saved card from your dashboard at any time. When you pay manually, we send you a reminder 7 days before and again 1 day before the due date; an administrator receives the same alert so they can help if needed. Stripe's privacy practices are described at stripe.com/privacy.

We store your interface preferences — including dark mode (light, dark, or system) and notification settings — in your browser's local storage and on your profile. These are not used for tracking or advertising.

We use essential cookies to keep you signed in and to remember preferences. We do not sell your data and we do not run third-party advertising trackers.

We rely on trusted third parties, including:

• Supabase — authentication, database, file storage
• Stripe — payments processing
• Email delivery providers for transactional notifications

These providers receive only the information required to deliver their service.

• Access — request a copy of the data we hold about you
• Correction — update inaccurate information from your dashboard
• Deletion — request deletion of your account and associated data
• Objection — opt out of non-essential communications

To exercise these rights, contact us via the link below.

Questions or requests about this policy? Get in touch.