Privacy Policy

Last updated: May 9, 2026

1. What Information We Collect

EstateFlow collects information necessary to provide our property management platform and related services:

  • Account Information: Name, email address, phone number, and password when you create an account.
  • Property Data: Property addresses, descriptions, rental rates, unit details, and property images.
  • Tenant Information: Tenant names, email addresses, phone numbers, lease terms, and payment history.
  • Financial Data: Payment information, rent payments, expenses, maintenance costs, and financial reports.
  • Communication Data: Messages, support tickets, and communications between landlords and tenants.
  • Maintenance Records: Maintenance requests, vendor information, and repair history.
  • Usage Data: Browser type, IP address, pages visited, time spent, and interaction patterns (via Google Analytics).
  • Payment Processing: Payment method details processed through Stripe for secure transactions.
  • AI Insights: Financial data analyzed by OpenAI, Google Generative AI, Anthropic, and Mistral for generating insights.
  • Authentication: Session tokens and authentication data stored via Supabase.

2. How We Use Your Information

We use your information for the following purposes:

  • Service Delivery: Manage properties, tenants, maintenance, and financial records.
  • Account Management: Create and maintain your account, process payments, and send transactional emails.
  • AI-Powered Insights: Generate financial recommendations and property analytics using AI services.
  • Communication: Send notifications about properties, tenants, maintenance, and account updates.
  • Analytics: Understand how you use our platform to improve features and user experience.
  • Security: Detect fraud, prevent unauthorized access, and protect your data.
  • Legal Compliance: Comply with legal obligations and respond to lawful requests.
  • Marketing: Send promotional content (only if you opt in).

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, remember preferences, and analyze usage patterns. Cookies are small files stored on your device that help us:

  • Remember your login information and preferences
  • Understand how you use our platform
  • Improve our services and user experience
  • Provide personalized content and features
  • Track conversions and marketing effectiveness

For detailed information about cookies we use, including names, purposes, and durations, please visit our Cookie Policy.

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

4. Do Not Sell My Personal Information

California Privacy Rights (CCPA): Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, used, shared, or sold.

Our Commitment: EstateFlow does not sell personal information to third parties for monetary consideration. We do not share your data with data brokers or marketing companies for their independent use.

Data Sharing: We may share information with service providers (payment processors, email services, analytics providers) who process data on our behalf under strict confidentiality agreements.

Your Rights: You have the right to:

  • Know what personal information is collected about you
  • Know whether your personal information is sold or disclosed
  • Say no to the sale or sharing of your personal information
  • Access your personal information
  • Request deletion of your personal information
  • Not be discriminated against for exercising your privacy rights

To exercise these rights or opt out of any data sharing, contact us at privacy@estateflow.com.

5. Your Rights

GDPR Rights (EU Residents):

  • Right to Access: Request a copy of your personal information
  • Right to Rectification: Correct inaccurate or incomplete information
  • Right to Erasure: Request deletion of your personal information
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Opt out of marketing communications and certain processing
  • Right to Lodge a Complaint: Contact your local data protection authority

CCPA Rights (California Residents):

  • Right to Know: Request what personal information is collected
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt out of the sale or sharing of personal information
  • Right to Correct: Request correction of inaccurate information
  • Right to Limit Use: Limit use and disclosure of sensitive personal information

To exercise any of these rights, contact us at privacy@estateflow.com.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Retention periods vary by data type:

  • Account Information: Retained while account is active; deleted upon account deletion
  • Property & Tenant Data: Retained for the duration of property management relationship
  • Financial Records: Retained for 7 years for tax and legal compliance
  • Communication Data: Retained for 2 years or as required by law
  • Consent Records: Stored in browser localStorage until cleared; consent timestamp retained for audit purposes
  • Analytics Data: Retained per Google Analytics retention settings (default 14 months)

You can request deletion of your account and associated data at any time through your account settings or by contacting us.

7. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

We will respond to privacy requests within 30 days or as required by applicable law.

8. Last Updated

This privacy policy was last updated on May 9, 2026. We may update this policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date.