Privacy Policy

Privacy Policy

Privacy Policy

Privacy Policy

DATA FLOW

Information we collect

Information you provide

Technical data

ResiDesk

Operate, improve, and secure our services

Sharing & rights

Trusted service providers under contractual safeguards

We do not sell data

SERVICE PROVIDERS

CATEGORY

PROVIDERS

Cloud Infrastructure

Heroku (Salesforce)

Amazon Web Services

AI/ML Services

OpenAI

Anthropic

Google

Grok

Monitoring

New Relic

Bugsnag

All service providers are bound by contractual obligations to protect your data. For details, see our Data Processing Agreement.

Last updated September 27, 2026

This Privacy Notice for ResiDesk, Inc. (“we”, “us”, or “our”) explains how we collect, store, use, and share your personal information when you use our services. This includes, for example:

  • Visiting our website at hello.theresidesk.com or any site that links to this notice;

  • Using ResiDesk – our AI-powered resident communication and property management platform;

  • Interacting with us through sales, marketing, or events.

We do not sell your personal information. ResiDesk does not sell, rent, or trade your personal information to third parties for their marketing purposes.

Table of Contents

  1. Summary of Key Points

  2. What Information Do We Collect?

  3. How Do We Process Your Information?

  4. What Legal Bases Do We Rely On?

  5. When and With Whom Do We Share Your Information?

  6. Cookies and Tracking Technologies

  7. AI-Based Products

  8. Data Location and Transfers

  9. Data Retention

  10. Data Security

  11. Information From Minors

  12. Your Privacy Rights

  13. Do-Not-Track Signals

  14. U.S. State-Specific Rights

  15. Mobile Text Messaging

  16. Updates to This Notice

  17. Contact Information

  18. Review, Update, or Delete Your Data

  19. Google Chrome extension

Summary of Key Points

  • What We Collect: Personal details you provide and technical data collected automatically.

  • How We Process: To operate, improve, and secure our services and comply with law.

  • We Do Not Sell Data: We never sell or share your personal information for third-party marketing.

  • Sharing Information: Only with trusted service providers under contractual safeguards.

  • AI Data Protection: Customer data is not used to train AI models.

  • Data Location: All data is processed and stored in the United States.

  • Data Security: SOC 2 Type 2 compliant infrastructure with encryption and access controls.

  • Your Rights: Access, correction, deletion, and restriction depending on location.

1. What Information Do We Collect?

We collect personal information that you voluntarily provide, as well as technical details collected automatically via cookies and similar technologies.

Categories of personal data we process on behalf of our customers include:

  • Resident names and contact information (phone, email)

  • Lease information and property details

  • Ledger balances and payment history (no payment card data)

  • Maintenance request records

  • Communication and conversation history

We do not process payment card data. All financial transactions are handled through secure, external payment gateways.

2. How Do We Process Your Information?

Your information is used to deliver and improve our services, communicate with you, prevent fraud, and comply with legal requirements. Specifically, we process data to provide:

  • Resident communication and messaging

  • Maintenance request management

  • Rent collection communication

  • Lease renewal tracking

  • AI-powered resident assistance

3. What Legal Bases Do We Rely On?

We process personal information based on consent, contractual necessity, legal obligation, or legitimate business interests.

4. When and With Whom Do We Share Your Information?

We may share your data with service providers (subprocessors) who help operate our business. These include:

Cloud Infrastructure
Heroku (Salesforce), Amazon Web Services

AI/ML Services
OpenAI, Anthropic, Google, Groq

Monitoring
New Relic, Bugsnag

All service providers are bound by contractual obligations to protect your data. For details, see our Data Processing Agreement.

We do not sell or share your personal information. We do not share information collected through our SMS program with third parties for marketing purposes.

5. Do We Use Cookies and Other Tracking Technologies?

Cookies and similar tools help us analyze usage and improve the experience. You can manage preferences in your browser.

6. Do We Offer AI-Based Products?

Yes. ResiDesk uses artificial intelligence and machine learning to power features such as:

  • AI-powered resident assistance and leasing

  • Conversation analysis and summarization

  • Content safety and moderation

  • Intelligent search and discovery

AI Data Protection: All AI provider integrations operate under enterprise agreements. Your data is not used to train AI models and is not retained by providers beyond what is required for secure processing.

7. Data Location and Transfers

All data is processed and stored within the United States. Our infrastructure is hosted on SOC 2 Type 2 compliant platforms (Heroku and Amazon Web Services) in US data centers.

We do not transfer personal data outside the United States without prior consent.

8. How Long Do We Keep Your Information?

We retain personal information for as long as needed to provide our services to our customers, including maintaining records, conversation history, and related data that our customers rely on for operational, legal, or business purposes.

Retention may therefore depend on the nature of the customer relationship, the type of data involved, and applicable legal or regulatory requirements.

When personal information is no longer required for these purposes, we take steps designed to delete, de-identify, or anonymize it in accordance with our internal practices and applicable law.

Upon termination of a customer agreement, we delete customer data within 30 days unless retention is required by applicable law.

9. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational security measures, including:

  • Encryption of data in transit (TLS/SSL) and at rest

  • Access controls and multi-factor authentication

  • Regular security monitoring and logging

  • SOC 2 Type 2 compliant infrastructure providers

No system is completely secure, but we take reasonable steps to protect your information.

10. Do We Collect Information From Minors?

We do not knowingly collect personal information from individuals under 18.

11. What Are Your Privacy Rights?

Your rights vary by location and may include:

  • Access: Request a copy of your personal information

  • Correction: Request correction of inaccurate information

  • Deletion: Request deletion of your personal information

  • Restriction: Request restriction of processing

  • Portability: Request a portable copy of your data

To exercise these rights, contact us at hello@theresidesk.com.

12. Controls for Do-Not-Track Features

We currently do not respond to browser DNT signals. However, we do not sell your personal information regardless of DNT settings.

13. Do U.S. Residents Have Specific Privacy Rights?

Yes. Residents of California and other U.S. states have additional privacy rights under laws such as the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

California Residents: You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

For business customers, ResiDesk acts as a “Service Provider” under the CCPA, processing data only for the purposes specified in our Data Processing Agreement.

14. Mobile Text Messaging

Recipients may opt out at any time using STOP and opt back in using UNSTOP.

SMS information is not shared with third parties for marketing purposes.

15. Do We Make Updates to This Notice?

Updates will be posted here with a revised “Last updated” date. Material changes will be communicated with reasonable notice.

16. How Can You Contact Us About This Notice?

Contact us at:

ResiDesk, Inc.
hello@theresidesk.com
www.theresidesk.com

17. How Can You Review, Update, or Delete Your Data?

You may request access, correction, or deletion of your data by contacting us at hello@theresidesk.com.

For business customers, please refer to our Data Processing Agreement for data handling procedures.

Last updated September 27, 2026

This Privacy Notice for ResiDesk, Inc. (“we”, “us”, or “our”) explains how we collect, store, use, and share your personal information when you use our services. This includes, for example:

  • Visiting our website at hello.theresidesk.com or any site that links to this notice;

  • Using ResiDesk – our AI-powered resident communication and property management platform;

  • Interacting with us through sales, marketing, or events.

We do not sell your personal information. ResiDesk does not sell, rent, or trade your personal information to third parties for their marketing purposes.

Table of Contents

  1. Summary of Key Points

  2. What Information Do We Collect?

  3. How Do We Process Your Information?

  4. What Legal Bases Do We Rely On?

  5. When and With Whom Do We Share Your Information?

  6. Cookies and Tracking Technologies

  7. AI-Based Products

  8. Data Location and Transfers

  9. Data Retention

  10. Data Security

  11. Information From Minors

  12. Your Privacy Rights

  13. Do-Not-Track Signals

  14. U.S. State-Specific Rights

  15. Mobile Text Messaging

  16. Updates to This Notice

  17. Contact Information

  18. Review, Update, or Delete Your Data

  19. Google Chrome extension

Summary of Key Points

  • What We Collect: Personal details you provide and technical data collected automatically.

  • How We Process: To operate, improve, and secure our services and comply with law.

  • We Do Not Sell Data: We never sell or share your personal information for third-party marketing.

  • Sharing Information: Only with trusted service providers under contractual safeguards.

  • AI Data Protection: Customer data is not used to train AI models.

  • Data Location: All data is processed and stored in the United States.

  • Data Security: SOC 2 Type 2 compliant infrastructure with encryption and access controls.

  • Your Rights: Access, correction, deletion, and restriction depending on location.

1. What Information Do We Collect?

We collect personal information that you voluntarily provide, as well as technical details collected automatically via cookies and similar technologies.

Categories of personal data we process on behalf of our customers include:

  • Resident names and contact information (phone, email)

  • Lease information and property details

  • Ledger balances and payment history (no payment card data)

  • Maintenance request records

  • Communication and conversation history

We do not process payment card data. All financial transactions are handled through secure, external payment gateways.

2. How Do We Process Your Information?

Your information is used to deliver and improve our services, communicate with you, prevent fraud, and comply with legal requirements. Specifically, we process data to provide:

  • Resident communication and messaging

  • Maintenance request management

  • Rent collection communication

  • Lease renewal tracking

  • AI-powered resident assistance

3. What Legal Bases Do We Rely On?

We process personal information based on consent, contractual necessity, legal obligation, or legitimate business interests.

4. When and With Whom Do We Share Your Information?

We may share your data with service providers (subprocessors) who help operate our business. These include:

Cloud Infrastructure
Heroku (Salesforce), Amazon Web Services

AI/ML Services
OpenAI, Anthropic, Google, Groq

Monitoring
New Relic, Bugsnag

All service providers are bound by contractual obligations to protect your data. For details, see our Data Processing Agreement.

We do not sell or share your personal information. We do not share information collected through our SMS program with third parties for marketing purposes.

5. Do We Use Cookies and Other Tracking Technologies?

Cookies and similar tools help us analyze usage and improve the experience. You can manage preferences in your browser.

6. Do We Offer AI-Based Products?

Yes. ResiDesk uses artificial intelligence and machine learning to power features such as:

  • AI-powered resident assistance and leasing

  • Conversation analysis and summarization

  • Content safety and moderation

  • Intelligent search and discovery

AI Data Protection: All AI provider integrations operate under enterprise agreements. Your data is not used to train AI models and is not retained by providers beyond what is required for secure processing.

7. Data Location and Transfers

All data is processed and stored within the United States. Our infrastructure is hosted on SOC 2 Type 2 compliant platforms (Heroku and Amazon Web Services) in US data centers.

We do not transfer personal data outside the United States without prior consent.

8. How Long Do We Keep Your Information?

We retain personal information for as long as needed to provide our services to our customers, including maintaining records, conversation history, and related data that our customers rely on for operational, legal, or business purposes.

Retention may therefore depend on the nature of the customer relationship, the type of data involved, and applicable legal or regulatory requirements.

When personal information is no longer required for these purposes, we take steps designed to delete, de-identify, or anonymize it in accordance with our internal practices and applicable law.

Upon termination of a customer agreement, we delete customer data within 30 days unless retention is required by applicable law.

9. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational security measures, including:

  • Encryption of data in transit (TLS/SSL) and at rest

  • Access controls and multi-factor authentication

  • Regular security monitoring and logging

  • SOC 2 Type 2 compliant infrastructure providers

No system is completely secure, but we take reasonable steps to protect your information.

10. Do We Collect Information From Minors?

We do not knowingly collect personal information from individuals under 18.

11. What Are Your Privacy Rights?

Your rights vary by location and may include:

  • Access: Request a copy of your personal information

  • Correction: Request correction of inaccurate information

  • Deletion: Request deletion of your personal information

  • Restriction: Request restriction of processing

  • Portability: Request a portable copy of your data

To exercise these rights, contact us at hello@theresidesk.com.

12. Controls for Do-Not-Track Features

We currently do not respond to browser DNT signals. However, we do not sell your personal information regardless of DNT settings.

13. Do U.S. Residents Have Specific Privacy Rights?

Yes. Residents of California and other U.S. states have additional privacy rights under laws such as the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

California Residents: You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

For business customers, ResiDesk acts as a “Service Provider” under the CCPA, processing data only for the purposes specified in our Data Processing Agreement.

14. Mobile Text Messaging

Recipients may opt out at any time using STOP and opt back in using UNSTOP.

SMS information is not shared with third parties for marketing purposes.

15. Do We Make Updates to This Notice?

Updates will be posted here with a revised “Last updated” date. Material changes will be communicated with reasonable notice.

16. How Can You Contact Us About This Notice?

Contact us at:

ResiDesk, Inc.
hello@theresidesk.com
www.theresidesk.com

17. How Can You Review, Update, or Delete Your Data?

You may request access, correction, or deletion of your data by contacting us at hello@theresidesk.com.

For business customers, please refer to our Data Processing Agreement for data handling procedures.

18. Google Chrome extension


The ResiDesk Chrome extension opens the ResiDesk web app in a side panel next to the website you are using. You use your existing ResiDesk account and browser sign-in. Your account permissions determine what you can view and do, including whether you can reply to tasks.


The panel shows Tasks and Insights that you can already access in ResiDesk. This may include names and email addresses of users, residents, and prospects, as well as conversation history and task replies. Insights may include account balances and delinquency reports.


The sidePanel permission opens ResiDesk beside the website you are using. The cookies permission and access to https://www.theresidesk.com/* let the panel refresh after you sign in or out. The activeTab and scripting permissions let the extension capture the page where you click its toolbar button.


To detect sign-in changes, the extension checks the names and website domain of two cookies, session and session.sig, on www.theresidesk.com. It does not read, store, send, or display the contents of those cookies. The ResiDesk web app inside the panel uses your session cookies to keep you signed in and load your account data.


Before you first use Tasks or Insights in the extension, ResiDesk explains page matching and data use and asks you to accept. After setup, opening Tasks checks visible text on the page where you opened the extension. It looks for a resident or prospect name, or a property and unit, that matches an open task you can access. If exactly one task matches, ResiDesk opens it with an Undo option. Otherwise, your task list stays open. Opening Insights does not start a page-text check.


Chrome’s activeTab and scripting permissions allow capture after you click the extension button. While Tasks is open, the app can request a fresh capture when that page changes. Chrome may require another toolbar click after you switch tabs or websites. The extension captures up to 32,000 characters of rendered text and 256,000 characters of the page body’s HTML. HTML includes page structure, attributes, links, hidden content, and values stored in markup. It may also contain scripts and application data. The extension treats HTML as data, not code to execute. It does not enter embedded documents, capture screenshots, or read browsing history.


Page capture and uploads are part of Tasks in the extension after setup. ResiDesk sends captured HTML to its servers to improve task matching, including when no task matches or task loading fails. This can include resident or prospect names, unit details, messages, and other data stored in the page. Closing Tasks stops new capture requests. You can use the regular ResiDesk website without this extension functionality. The extension does not change pages in your property management system. Replies and other actions in ResiDesk follow your existing account permissions.


Uploaded page HTML expires after 30 days. An hourly cleanup removes expired copies from the application database. Removing the extension stops future captures. Copies already saved follow the same expiry schedule.


ResiDesk records matching results, task counts, and whether you used Undo in its activity logs. Captured HTML is stored separately, linked to your account and user. It is not sent to a third-party AI service. The snapshot includes a hash and capture status. The extension does not separately collect the page URL or title, but URLs and titles can occur in captured HTML. Your setup acknowledgment is saved in your browser for your ResiDesk account and user.


ResiDesk uses this information to provide your authorized Tasks or Insights workspace and to improve task matching. Existing ResiDesk deletion, rights, and service-provider practices described in this notice apply. The 30-day expiry above applies to saved page content. ResiDesk’s use of information received through Chrome extension permissions complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. ResiDesk does not sell this information or use it for advertising.