Privacy Policy

1. What Information Do We Collect?

We collect personal information that you voluntarily provide, as well as technical details collected automatically via cookies and similar technologies.

Categories of personal data we process on behalf of our customers include:

• Resident names and contact information (phone, email)
• Lease information and property details
• Ledger balances and payment history (no payment card data)
• Maintenance request records
• Communication and conversation history

We do not process payment card data. All financial transactions are handled through secure, external payment gateways.

2. How Do We Process Your Information?

Your information is used to deliver and improve our services, communicate with you, prevent fraud, and comply with legal requirements. Specifically, we process data to provide:

• Resident communication and messaging
• Maintenance request management
• Rent collection communication
• Lease renewal tracking
• AI-powered resident assistance

3. What Legal Bases Do We Rely On?

We process personal information based on consent, contractual necessity, legal obligation, or legitimate business interests.

4. When and With Whom Do We Share Your Information?

We may share your data with service providers (subprocessors) who help operate our business. These include:

All service providers are bound by contractual obligations to protect your data. For details, see our Data Processing Agreement.

5. Do We Use Cookies and Other Tracking Technologies?

Cookies and similar tools help us analyze usage and improve the experience. You can manage preferences in your browser.

6. Do We Offer AI-Based Products?

Yes. ResiDesk uses artificial intelligence and machine learning to power features such as:

• AI-powered resident assistance and leasing
• Conversation analysis and summarization
• Content safety and moderation
• Intelligent search and discovery

7. Data Location and Transfers

All data is processed and stored within the United States. Our infrastructure is hosted on SOC 2 Type 2 compliant platforms (Heroku and Amazon Web Services) in US data centers.

We do not transfer personal data outside the United States without prior consent.

8. How Long Do We Keep Your Information?

We retain personal information for as long as needed to provide our services to our customers, including maintaining records, conversation history, and related data that our customers rely on for operational, legal, or business purposes.

Retention may therefore depend on the nature of the customer relationship, the type of data involved, and applicable legal or regulatory requirements.

When personal information is no longer required for these purposes, we take steps designed to delete, de-identify, or anonymize it in accordance with our internal practices and applicable law.

Upon termination of a customer agreement, we delete customer data within 30 days unless retention is required by applicable law.

9. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational security measures, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and multi-factor authentication
• Regular security monitoring and logging
• SOC 2 Type 2 compliant infrastructure providers

No system is completely secure, but we take reasonable steps to protect your information.

10. Do We Collect Information From Minors?

We do not knowingly collect personal information from individuals under 18.

11. What Are Your Privacy Rights?

Your rights vary by location and may include:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Restriction: Request restriction of processing
• Portability: Request a portable copy of your data

To exercise these rights, contact us at hello@theresidesk.com.

12. Controls for Do-Not-Track Features

We currently do not respond to browser DNT signals. However, we do not sell your personal information regardless of DNT settings.

13. Do U.S. Residents Have Specific Privacy Rights?

Yes. Residents of California and other U.S. states have additional privacy rights under laws such as the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

California Residents: You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

For business customers, ResiDesk acts as a "Service Provider" under the CCPA, processing data only for the purposes specified in our Data Processing Agreement.

14. Mobile Text Messaging

Recipients may opt out at any time using STOP and opt back in using UNSTOP.

15. Do We Make Updates to This Notice?

Updates will be posted here with a revised "Last updated" date. Material changes will be communicated with reasonable notice.

16. How Can You Contact Us About This Notice?

Contact us at:

17. How Can You Review, Update, or Delete Your Data?

You may request access, correction, or deletion of your data by contacting us at hello@theresidesk.com.

For business customers, please refer to our Data Processing Agreement for data handling procedures.