Privacy policy
Your home records deserve careful boundaries.
This Privacy Policy explains how DwellPact collects, uses, shares, and protects information when landlords, tenants, authorized payers, and visitors use the service.
Information we collect
We collect account and contact information; role, property, unit, lease, invitation, and membership records; payment, subscription, charge, expense, refund, deposit, and consent records; maintenance and condition records; messages and audio; uploaded photos, documents, signatures, file hashes, and access logs; support communications; and security events. We receive some identity, payment, fraud, delivery, device, country, and transaction information from providers. We do not ask users to place complete card or bank credentials in DwellPact records.
Sources and purposes
Information comes from users, invited property participants, connected service providers, browser or device signals, and records created when a requested workflow runs. We use it to authenticate accounts; enforce role and property access; deliver invitations and communications; process requested payments, returns, and subscriptions; maintain records; provide reports and AI assistance; prevent abuse and fraud; troubleshoot and monitor reliability; respond to requests; and meet legal obligations.
How we use information
We use information to authenticate accounts, provide role- and property-specific workspaces, process requested payments and returns, maintain rental records, support communication, produce requested reports and exports, respond to support requests, protect the service, prevent misuse, comply with legal obligations, and improve reliability.
How access and control work
Landlords, tenants, and authorized payers have different permissions. Property memberships, unit assignments, and document access limit records to an authorized relationship. Landlords control invitations and approve access-code requests. An authorized payer may receive payment access without receiving private lease or conversation access. DwellPact controls platform accounts, security, subscriptions, and service analytics; landlords may independently control and retain lease, property, tenant, and payment records they enter or receive and remain responsible for their own privacy obligations.
Payments and subscriptions
DwellPact uses Stripe to provide subscription billing, rent checkout, connected landlord payout accounts, and eligible returns. Stripe and its financial partners may collect and process identity, contact, payment-method, transaction, subscription, fraud-prevention, refund, and dispute information under their own terms and privacy policies. DwellPact does not store complete card or bank-account credentials in its application database.
Providers and disclosures
Supabase provides database, authentication, and storage services; OpenAI provides AI processing; Cloudflare provides hosting, network protection, and traffic analytics; Google and, when offered, Apple provide sign-in; Resend may deliver email; Twilio may deliver text messages; Sentry may receive privacy-scrubbed application error and uptime data; and Stripe provides payment services. These providers process information under contracts and their own applicable terms. We may also disclose information when a user directs us, to protect rights and safety, in a corporate transaction subject to appropriate safeguards, or when legally required. QuickBooks and Xero files are generated for user-directed export and are not connected automatically.
Invitations and mobile information
Email and text invitations are intended to be functional, relationship-based messages requested by an authorized property representative. Delivery information, consent evidence, status, and limited provider identifiers may be recorded to prevent abuse and document delivery. We do not sell or share mobile numbers or SMS opt-in and consent data with third parties or affiliates for marketing or promotional purposes. We disclose them only to service providers needed to deliver requested messages and for security, compliance, or legal purposes. Recipients may use STOP or HELP where supported and may report unexpected invitations to support.
AI assistance and housing decisions
When you use Della, DwellPact’s AI assistant, your question and relevant authorized context—such as names, properties, leases, payments, refunds, expenses, and maintenance activity—may be sent to OpenAI to generate a response. Provider storage is disabled where supported. AI output may be incomplete or incorrect and is not legal, tax, accounting, or financial advice. Della does not make housing decisions and must not be used as the sole or determinative basis for screening, eligibility, rent approval, eviction, renewal, access, or another housing decision.
First-party analytics
DwellPact records page views and allowlisted product events, a random session identifier stored in browser session storage, referral and campaign parameters, device category, country, and—when signed in—an account identifier. We use this information for acquisition measurement, reliability, security, and product improvement. We intentionally avoid storing raw IP addresses and full user-agent strings in the acquisition table. We do not use this data for cross-context behavioral advertising. If our geographic scope or analytics practices change, we will add any consent or opt-out mechanism required by applicable law.
Customer reviews and testimonials
After meaningful product use, an authenticated customer may be invited to submit a star rating, written review, and public display name. The review form discloses that submission authorizes DwellPact to feature the review publicly after moderation. We store the review with the customer’s account identifier, role, public-use authorization, submission time, and moderation status. Reviews are not published automatically; an authorized owner must approve and feature each one. No compensation is provided for positive sentiment, and low ratings are not excluded merely because they are negative. A customer may withdraw a review by contacting support; withdrawn reviews are removed from public eligibility.
Security
We use encrypted transport, secure authentication, role-aware application controls, database row-level access policies, limited server credentials, and audit-oriented financial workflows. No service can guarantee absolute security. Please use a protected sign-in account and contact us promptly if you believe your account or records have been accessed without authorization.
Retention and deletion
Account and workspace data is generally retained while an account or authorized property relationship is active. Expired invitation and delivery evidence may be retained to prevent abuse and document consent; security and support records are retained for a reasonable investigation period; subscription, payment, refund, tax, and accounting records may be retained for legally required financial periods; and lease, signature, condition, and property records may be retained while authorized parties need them for legal or evidentiary purposes. Backups rotate on the hosting provider’s schedule and may persist briefly after deletion. We delete or de-identify information when it is no longer reasonably needed, subject to fraud prevention, disputes, legal holds, safety, and other lawful obligations. A request cannot require another independent landlord or tenant to delete a record they lawfully control.
Your privacy choices and rights
You may update profile details, manage billing through the secure portal, opt out of text messages where supported, and initiate permanent account deletion from Account settings or the public account-deletion page. We ordinarily complete an account-deletion review within 30 days and confirm completion through the account email. Depending on your location, you may also have rights to access, correct, delete, or receive a portable copy of information; opt out of certain sale, sharing, targeted advertising, or profiling; limit use of sensitive information; use an authorized agent; appeal a denied request; and receive equal service without unlawful discrimination. DwellPact does not sell personal information or share it for cross-context behavioral advertising. We honor legally required browser-based preference signals, including Global Privacy Control, when they apply to our processing. Other requests may be submitted through support; we will verify identity and authority and explain any permitted denial or appeal path.
Children, changes, and contact
DwellPact is intended for adults and is not directed to children under 13. We may update this policy as the service, providers, or law changes and will post the updated date; material changes may also be communicated in the service and may require renewed consent. Questions, appeals, and privacy requests can be sent through the DwellPact support page or to dwellpact@gmail.com.