Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Phone numbers — from tenants, landlords, and vendors for SMS communication
• Email addresses — for account creation, notifications, and support
• Names — first name, last name, and business names
• Physical addresses — property and unit addresses for maintenance dispatch
• SMS message content — maintenance requests and related communications sent via our service

2. How We Use Your Information

We use your information to:

• Process maintenance requests and dispatch work orders
• Communicate with tenants, landlords, and vendors via SMS and email
• Provide AI-assisted triage of maintenance requests (see Section 3)
• Process payments through our integrated payment system
• Operate, secure, and improve our services

3. AI Processing Disclosure

Important: We use OpenAI's services to automatically triage maintenance requests. When you submit a maintenance request (including via SMS or our portal), the message content is sent to OpenAI for analysis. This helps us categorize requests, estimate urgency, and route them to appropriate vendors.

Under OpenAI's API terms, data sent via the API is not used to train OpenAI models. We do not share your data with OpenAI for any purpose other than processing your specific requests.

4. Data Sharing with Third Parties

We share personal information with the following third-party service providers who assist in operating our service:

• Twilio — SMS messaging (phone numbers, message content)
• Stripe — payment processing (email, payment tokens)
• OpenAI — AI triage of maintenance requests (message content)
• Resend — email notifications (name, email address)
• Supabase — database hosting and authentication (all PII we collect)
• Upstash — rate limiting (IP addresses)

These providers are bound by contractual obligations to protect your information and use it only for the purposes we specify.

5. Data Residency

Cross-border transfer: All data is stored and processed in the United States. If you are located in Canada or another jurisdiction, your personal information will be transferred to and processed in the United States. By using our service, you consent to this cross-border transfer of your data.

6. Data Retention

We retain your information for the following periods:

• SMS messages: 2 years
• Ticket records: 7 years (for financial and legal compliance)
• Consent records: Indefinite (to demonstrate compliance)
• Account data: Until you request account deletion

7. Your Rights

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal information, subject to legal retention requirements
• Withdraw consent — withdraw your consent at any time where we rely on consent for processing

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by applicable law.

8. How to Contact Us

For privacy inquiries, questions about this policy, or to exercise your rights, contact us at [email protected]. We aim to respond within 30 days.