Privacy policy

What the free tools collect

Nothing. The vacancy calculator and the ledger screening tool run entirely in your browser. No file you drop into them is uploaded, and no figure you enter is transmitted, logged, or stored. Close the tab and it is gone.

You can verify this yourself: open your browser’s developer tools, switch to the Network tab, and use either tool. No request is made.

What the audit intake collects

When you submit the audit form we receive your name, business or portfolio name, work email, role, portfolio size, the type of data you can export, and your description of the problem you want answered.

If you arrived from the calculator, the figures you saw there travel with your submission. They are numbers you entered — days and dollar amounts — not identifying information.

The form and payment are handled by Tally, whose payment processing runs on Stripe. Card details never reach this site and are never stored by us.

What you upload, and what you must not

After payment you receive a private link to upload your operational exports. Send de-identified data only: unit identifiers, dates, categories, vendors, and costs are all the analysis uses.

Do not upload resident or tenant names, Social Security numbers, dates of birth, financial account numbers, payment card numbers, medical or disability information, immigration status, or any other sensitive personal information.

The upload page screens CSV column headers in your browser before anything is sent, and refuses files whose columns indicate personal data. That screening is a safeguard, not a guarantee — spreadsheet formats are not screened, and no automated check substitutes for your own review before sending.

Retention — 30 days

Source files you upload are deleted 30 days after your findings report is delivered. The report itself, and the record of your engagement, are kept longer for tax and accounting purposes.

You may request earlier deletion at any time by emailing [email protected]. Deletion of source files does not require deletion of the delivered report, which is yours as much as ours.

Where it is stored

Uploaded files go to private cloud storage reachable only through a time-limited link issued to you. Upload links expire after 14 days and are revoked when a replacement is issued. The storage is not public and is not indexed.

Intake records are held in a managed Postgres database with access restricted to server-side credentials.

Who else sees it

Service providers that make the site work: Tally (forms and payment), Stripe (payment processing), Supabase (database and file storage), Resend (transactional email), Netlify and Cloudflare (hosting and delivery). Each sees only what its function requires.

Your data is not sold, rented, or shared for advertising. There is no advertising on this site and no third-party tracking.

California residents

If you are a California resident you may request access to, correction of, or deletion of personal information we hold about you, and you may ask us not to sell or share it. We do not sell or share personal information. Email [email protected] to make a request.

We will not discriminate against you for exercising any of these rights.

Changes

Material changes to this policy will be reflected in the date at the top. Continued use after a change constitutes acceptance of the revised policy.