Privacy notice (draft)

We collect the account email, the unit and landlord contact you enter, files you upload, messages sent through the relay, and the records you type. We do not collect Social Security numbers or bank logins.

Lease text and message bodies are encrypted before they are stored. Files are encrypted before they are written to disk or, if configured, to Cloudflare R2. Connections use HTTPS in production. The hosted database design uses row-level security so a tenant sees only their units. Roommates see a unit only after an invite.

If an AI key is set, lease text sent to the model is redacted for email addresses, phone numbers, and SSN-like strings. Use a paid Gemini project so prompts are not used to train models. The shown answer still has to cite a library rule ID or say unsure.

You can download a JSON copy of your data and delete the account from Settings. If you are the only member of a unit, unit records and files are deleted. Shared records remain while a roommate keeps the unit. Backup deletion on a hosted database has to follow that host's backup schedule.

California residents can ask to know, delete, and correct personal information, and to opt out of sale or sharing. Sale and sharing are off by design. Contact the address you configure as the privacy contact before launch.