Privacy policy

What we hold about you

Your email address and a bcrypt hash of your password (never the password itself), what Stripe collects at checkout (card numbers never touch us), and the records you keep in your account.

What your instance holds

Buildings and units, tenants (name, phone, email, notes), leases and rent amounts, payments, expenses, repairs and notes. Your tenants never sign up for anything; these are your records, entered by you, and you are responsible for them.

Each customer is separate

Standard accounts use shared application infrastructure. Records are scoped to your account and its authorized members; other customer accounts cannot access them. A private deployment is a separate arrangement.

Processors

Stripe (billing), Vercel (hosting), Neon (database), and ElevenLabs (voice transcripts) on instances with the voice assistant. Each acts under its own policy. Nothing is sold or used for advertising.

Retention and deletion

Ending a trial or subscription stops editing but does not automatically delete your records. You can still view and export them. Email rob@fusiondataco.com to request deletion or help with an export.

Cookies

One httpOnly session cookie after you sign in. It holds a random secret whose hash is stored against a revocable session row, expires after 30 days, and is destroyed when you sign out. No tracking or advertising cookies.

Your rights

Ask what we hold, correct it, export it, or delete it: rob@fusiondataco.com.