Privacy Policy

PlaceDock LLC ("PlaceDock," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management software platform, website, mobile applications, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. This Privacy Policy explains how PlaceDock collects, uses, and discloses personal information. By using the Service, your personal information will be processed as described in this Privacy Policy.

PlaceDock LLC is the data controller responsible for processing your personal information under this Privacy Policy.

Data Controller vs. Processor: - For PlaceDock customer accounts: PlaceDock LLC acts as the data controller - PlaceDock acts as a service provider or data processor for tenant information uploaded by landlords or property managers, except where applicable law provides otherwise - PlaceDock determines the purposes and means of processing personal data collected through the Service

Privacy Contact: - Email: privacy@placedock.com - For privacy-related inquiries, please include "Privacy Inquiry" in the subject line

We collect various types of personal data to provide, improve, and protect our Service. The types of personal data we collect depend on how you use the Service.

Data Minimization: We collect only the personal information reasonably necessary to provide and improve our services. We do not collect more data than is required for the purposes outlined in this Privacy Policy.

Personal Data You Provide Directly

When you create an account, use the Service, or communicate with us, you may provide the following personal data:

Account Information: - Full legal name - Email address - Phone number - Passwords are stored using industry-standard one-way hashing algorithms and are never stored in plain text - Profile picture or avatar - Business information (for property managers, vendors, investors) - Physical address

Property-Related Information: - Property addresses and details - Lease agreements and documents - Tenant information (name, contact details, lease terms) - Rental payment history - Maintenance requests and records - Property photos and images - Inspection reports - Financial records and documents

User Content: You may upload and store the following types of content through the Service: - Lease agreements and contracts - Tax forms and tax documents (W-9, W-8, 1099 forms) - Inspection reports - Maintenance photos and documentation - Receipts and invoices - Property photos and images - Other property-related documents

Processing of User Content: - User content is processed solely to provide, secure, maintain, and improve the Service in accordance with this Privacy Policy - We do not use your uploaded documents for purposes other than delivering the Service - We maintain the confidentiality of your uploaded documents - You retain ownership of all content you upload to the Service - Users are responsible for ensuring they have the legal authority to upload personal information and documents to the Service

Payment Information: - Bank account information (for payment processing) - Credit/debit card information (processed through Stripe) - Tax identification numbers (SSN, EIN, ITIN) - Billing address - Transaction history - Tax documents (W-9, W-8 forms)

Sensitive Personal Information: We collect sensitive personal information only when necessary to: - Process payments - Comply with tax obligations - Verify identity - Prevent fraud

We do not use sensitive personal information for profiling or advertising.

Communications: - Messages sent through the Service - Support inquiries and correspondence - Feedback and suggestions - Survey responses

Personal Data Collected Automatically

When you use the Service, we automatically collect certain information:

Usage Data: - Log files and server data - IP address - Device information (browser type, operating system) - Pages viewed and time spent on pages - Click patterns and navigation paths - Feature usage statistics - Error reports and crash data

Location Data: - Approximate geographic location based on IP address - Location data if you enable location-based features

Cookies and Tracking Technologies: - Cookie identifiers and preferences - Web beacon data - Analytics tracking data

Personal Data Collected from Third Parties

We may receive personal data from third-party sources, including:

Payment Processors: - Stripe: Payment processing, fraud prevention, KYC verification

Identity Verification Services: - Background check providers - Credit reporting agencies (with your consent) - Identity verification services

Property-Related Services: - Public property records - Real estate databases - Government property databases

Analytics and Advertising: - Google Analytics - Other analytics providers

We use your personal data for the following purposes:

Service Provision: - To provide, maintain, and improve the Service - To process transactions and payments - To manage your account and preferences - To facilitate communications between users - To provide customer support

Security and Fraud Prevention: - To authenticate users and prevent unauthorized access - To detect, prevent, and address fraud and security issues - To comply with legal obligations and regulations - To protect the rights and safety of our users

Analytics and Improvements: - To analyze usage patterns and improve the Service - To develop new features and services - To perform data analytics and business intelligence - To optimize performance and user experience

Communications: - To send you service-related communications - To respond to your inquiries and support requests - To send marketing communications (with your consent) - To provide important notices and updates

Legal Compliance: - To comply with applicable laws and regulations - To respond to legal requests and court orders - To enforce our terms and conditions - To protect our rights and property

AI and Machine Learning: - To improve AI features (using anonymized and aggregated data) - To train machine learning models (using anonymized data) - To provide AI-powered features and recommendations

We process your personal data based on the following legal bases, in accordance with applicable data protection laws including GDPR:

| Processing Activity | Legal Basis | |-------------------|-------------| | Account creation and management | Contract | | Service provision and access | Contract | | Payment processing | Contract | | Fraud detection and prevention | Legitimate interest | | Security logging and monitoring | Legitimate interest | | Service improvement and analytics | Legitimate interest | | Marketing emails | Consent | | Tax records and reporting | Legal obligation | | Compliance with laws and regulations | Legal obligation | | Legal requests and court orders | Legal obligation |

Contract: Processing is necessary to perform our obligations under our agreement with you.

Legitimate Interest: Processing is necessary for our legitimate business interests, such as security, fraud prevention, and service improvement.

Consent: Processing is based on your explicit consent, which you may withdraw at any time.

Legal Obligation: Processing is necessary to comply with applicable laws and regulations.

PlaceDock does not sell or rent your personal information.

We do not share personal information for cross-context behavioral advertising. We do not sell your data to third parties for advertising or marketing purposes.

Your personal information is only shared as described in the "How We Share Your Personal Data" section of this Privacy Policy.

We may share your personal data with the following third parties:

Service Providers: - Stripe, Inc. - Payment processing, fraud detection, KYC verification - Amazon Web Services (AWS) - Cloud hosting, data storage, infrastructure - SMS Gateway Providers - Text message delivery - Email Service Providers - Email delivery and management - Analytics Providers - Usage analytics and reporting - Support and Help Desk Services - Customer support

Payment Processing: - When you process payments through the Service, we share necessary payment information with Stripe to facilitate transactions - Payment information is shared in accordance with Stripe's privacy policy and PCI DSS requirements

Government Requests: We may disclose information in response to lawful subpoenas, court orders, warrants, or other legal requests. We will review such requests and only disclose information that is legally required or appropriate.

Business Transfers: - In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity - We will provide notice before such a transfer of your personal data

With Your Consent: - We may share personal data with third parties when you give us explicit consent to do so - We may share your data with service providers you authorize

Anonymous and Aggregated Data: - We may share anonymous or aggregated data that does not identify you personally - This data may be used for analytics, research, or business purposes

Our current subprocessors include the following. Your personal data may be shared with these subprocessors in accordance with their privacy policies:

Infrastructure and Hosting: - Amazon Web Services (AWS) - Cloud hosting, data storage, infrastructure

Payment Processing: - Stripe, Inc. - Payment processing, fraud detection, KYC verification, payout processing

Analytics and Monitoring: - Google Analytics - Usage analytics and reporting - Sentry - Error tracking and performance monitoring - Dynatrace - Application performance monitoring

Communications: - Twilio - SMS and text message delivery - Amazon Simple Email Service (SES) - Email delivery and management

Authentication and Identity: - AWS Cognito - User authentication and identity management

AI Services: - OpenAI - AI model services for AI-powered features

Where supported by our agreements with AI providers, customer content is not used to train publicly available AI models. We ensure that our AI service providers do not use your data to train or improve their public AI models to the extent supported by our contractual agreements.

We use cookies and similar tracking technologies to collect information about your use of the Service.

Types of Cookies: - Essential Cookies: Required for the Service to function properly - Performance Cookies: Collect information about how you use the Service - Functionality Cookies: Remember your preferences and settings - Targeting/Advertising Cookies: Used to deliver relevant advertisements

Specific Cookie Examples:

Analytics Cookies: - _ga: Google Analytics identifier for distinguishing users - _gid: Google Analytics identifier for distinguishing users in 24-hour period

Authentication Cookies: - Session cookies: Maintain your session during active use - Authentication tokens: Keep you logged in to your account

Security Cookies: - CSRF tokens: Protect against cross-site request forgery attacks - Security cookies: Help maintain security and prevent fraud

Preference Cookies: - Preference cookies: Remember your settings and preferences

How We Use Cookies: - To authenticate users and maintain sessions - To remember your preferences and settings - To analyze usage patterns and improve the Service - To provide personalized content and advertisements - To track the effectiveness of marketing campaigns

Cookie Preferences: - You can manage cookie preferences through your browser settings - Disabling cookies may affect the functionality of the Service - You can opt out of certain cookies through our cookie consent banner

We currently do not respond to browser "Do Not Track" signals or similar mechanisms. However, we respect your privacy choices and provide you with options to control your data through the settings described in this Privacy Policy.

AI Transparency:

Data Types Processed by AI: PlaceDock may use AI to process the following types of data: - Lease agreements (for summarization and analysis) - Maintenance requests (for classification and prioritization) - Receipts and invoices (for expense categorization) - Tax documents (for data extraction and organization)

AI Training Policies: - We do not train our own AI models on your personal data - Where supported by our agreements with AI providers, customer content is not used to train publicly available AI models - We may use anonymized and aggregated information to evaluate, improve, and enhance AI-powered features - We do not use your specific, identifiable data for AI training without your explicit consent

Automated Decision Making: PlaceDock does not use automated decision-making that produces legal or similarly significant effects without human involvement. AI features are used to provide recommendations, insights, and classifications, but final decisions remain under human control.

The Service integrates with various third-party services. When you use these integrations, your personal data may be shared with the third-party service provider in accordance with their privacy policies.

Payment Processing: - Stripe: Processes payments, handles fraud detection, and performs KYC verification

SMS Messaging: - SMS gateway providers: Deliver text messages to your mobile device

Analytics: - Google Analytics: Provides usage analytics and insights

Cloud Services: - Amazon Web Services: Hosts our infrastructure and stores your data

Third-Party Links: - The Service may contain links to third-party websites - We are not responsible for the privacy practices of third-party websites - We encourage you to review the privacy policies of any third-party sites you visit

We implement reasonable technical, administrative, and physical security measures to protect your personal data:

Technical Security: - Encryption of data in transit using TLS 1.2 or higher - Encryption of data at rest - Secure password requirements and hashing - Two-factor authentication (where available) - Regular security updates and patches - Intrusion detection and prevention systems

Administrative Security: - Employee security training - Access controls and authentication mechanisms - Data access logging and monitoring - Security audits and assessments - Incident response procedures - Access to customer data is restricted to authorized personnel with a legitimate business need

Physical Security: - Secure data center facilities - Access controls and surveillance - Environmental controls and redundancy

Despite our security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your personal data.

We retain your personal data for as long as necessary to achieve the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific Retention Periods:

Active Accounts: - Personal data is retained for the duration of your active account

Deleted Accounts: - After account deletion, personal data is retained for 90 days in production systems - During this period, you may contact us to restore your account - After 90 days, data is permanently deleted from production systems

Backup Retention: - Backup copies of deleted data are retained for 180 days for disaster recovery - Backup data is automatically purged after 180 days

Payment and Financial Records: - Payment transaction records are retained for 7 years as required by tax regulations - Financial records may be retained longer if required by law or ongoing legal proceedings

Legal and Compliance Records: - Records required for legal compliance, tax purposes, or ongoing disputes are retained as required by applicable law - Certain information may be retained longer where necessary to establish, exercise, or defend legal claims

Anonymized Data: - We may retain anonymized or aggregated data indefinitely for analytics and service improvement

What Happens When You Close Your Account: - You will immediately lose access to the Service - Your account and all associated data will be deleted after the retention period - You will lose access to all documents, records, and data stored in your account - Data exports are available for 30 days following account closure - After 30 days, data may no longer be available for export - We recommend exporting your data before closing your account

Data Retention After Closure: - Your data is retained for 90 days in production systems after closure - During this period, you may contact us to restore your account - Backup copies are retained for 180 days for disaster recovery - After retention periods, data is permanently deleted

What You Cannot Opt Out Of: - Operational emails required to provide the Service (e.g., security alerts, payment confirmations, service notifications) - Communications necessary for account security and fraud prevention - Legal and compliance-related communications

You may only stop these communications by closing your account.

Operational vs. Marketing Communications:

Operational Communications (Cannot Opt Out): - Security alerts and authentication notifications - Payment confirmations and transaction receipts - Service notifications and updates - Legal and compliance notices - Account maintenance messages

These communications are necessary to provide the Service and maintain your account. You may only stop these communications by closing your account.

Marketing Communications (Can Opt Out): - Product updates and feature announcements - Promotional emails and special offers - Newsletter subscriptions - Event invitations - Survey requests

You may opt out of marketing communications at any time by: - Clicking the "unsubscribe" link in marketing emails - Updating your communication preferences in account settings - Contacting support@placedock.com

Opting out of marketing communications will not affect your access to the Service or receipt of operational communications.

Your personal data may be transferred to, stored, and processed in countries other than the country where you reside.

Data Storage: - Your data is primarily stored on servers located in the United States - We may use cloud service providers (such as AWS) that operate data centers in various countries

International Transfers: - When we transfer personal data internationally, we ensure appropriate safeguards are in place - We rely on standard contractual clauses or other legally approved mechanisms for international data transfers - We comply with applicable data protection laws when transferring data internationally

Depending on your location, you may have certain rights regarding your personal data:

General Rights: - Access: Request access to the personal data we hold about you - Correction: Request correction of inaccurate or incomplete personal data - Deletion: Request deletion of your personal data (subject to legal retention requirements) - Portability: Request a copy of your personal data in a portable format - Objection: Object to processing of your personal data - Restriction: Request restriction of processing of your personal data - Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

How to Exercise Your Rights: - To exercise these rights, contact us at privacy@placedock.com - We will respond to your request within a reasonable timeframe, typically within 30 days - We may require verification of your identity before processing your request - We may deny certain requests if they are frivolous, repetitive, or legally exempt

General Customer Service: For general customer service inquiries (not privacy-related), please contact support@placedock.com

In addition to California, residents of the following U.S. states have privacy rights under state laws:

Colorado Privacy Act (CPA): - Right to access, correct, and delete personal data - Right to opt out of the sale of personal data (we do not sell personal data) - Right to data portability - Right to appeal our response to your request

Virginia Consumer Data Protection Act (VCDPA): - Right to confirm whether we process your personal data - Right to access, correct, and delete personal data - Right to opt out of the sale of personal data (we do not sell personal data) - Right to data portability

Connecticut Data Privacy Act (CTDPA): - Right to access, correct, and delete personal data - Right to opt out of the sale of personal data (we do not sell personal data) - Right to data portability

Utah Consumer Privacy Act (UCPA): - Right to access, correct, and delete personal data - Right to opt out of the sale of personal data (we do not sell personal data) - Right to data portability

Oregon Consumer Privacy Act (OCPA): - Right to access, correct, and delete personal data - Right to opt out of the sale of personal data (we do not sell personal data) - Right to data portability

Texas Data Privacy and Security Act (TDPSA): - Right to access, correct, and delete personal data - Right to opt out of the sale of personal data (we do not sell personal data)

Montana Consumer Privacy Act: - Right to access, correct, and delete personal data - Right to opt out of the sale of personal data (we do not sell personal data)

How to Exercise State Privacy Rights: - Submit a request to privacy@placedock.com - Include "State Privacy Request" and your state in the subject line - Provide sufficient information to verify your identity - We will respond within the timeframe required by applicable state law

General State Privacy Rights: We will honor applicable privacy rights available under the laws of the state in which you reside, to the extent required by law.

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Categories of Personal Data We Collect: - Identifiers (name, email, phone, address) - Personal information (account details, preferences) - Property information (addresses, lease details) - Financial information (payment history, tax documents) - Commercial information (transaction history) - Internet activity (usage data, log files) - Geolocation data (approximate location) - Audio, electronic, visual, or similar information (support recordings)

Purposes for Collection: - To provide and maintain the Service - To process payments and transactions - To improve and develop the Service - For security and fraud prevention - To comply with legal obligations - For analytics and business purposes

Sources of Personal Data: - Directly from you - Automatically collected through the Service - From third-party service providers

California Consumer Rights: - Right to Know: Request disclosure of categories of personal data we collect, use, and share - Right to Delete: Request deletion of your personal data (with exceptions) - Right to Correct: Request correction of inaccurate personal data - Right to Opt-Out: Opt-out of the sale of your personal data (we do not sell personal data) - Right to Limit Use of Sensitive Personal Information: Request that we limit the use of your sensitive personal information. Because we use sensitive personal information only for permitted business purposes, this right may not apply in all circumstances. - Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

How to Exercise CCPA Rights: - Submit a request to privacy@placedock.com - Include "CCPA Request" in the subject line - Provide sufficient information to verify your identity - We will respond within 45 days of receiving your request

Authorized Agents: - You may designate an authorized agent to make requests on your behalf - The agent must provide proof of your authorization

The Service is not intended for children under 18 years of age. We do not knowingly collect personal data from children under 18.

If You Are a Parent or Guardian: - If you believe we have collected personal data from a child under 18, please contact us immediately - We will take steps to delete such information upon verification

Age Verification: - We require users to be at least 18 years of age to create an account - We do not target the Service to children

If you opt in to receive SMS text messages from PlaceDock, the following terms apply:

SMS Consent: - By providing your phone number and opting in, you consent to receive text messages from PlaceDock - Consent is not a condition of purchasing any goods or services - You may opt out at any time

Types of SMS Messages: - Rent payment reminders - Lease expiration alerts - Maintenance request notifications - Account security alerts - Service updates and announcements - Compliance reminders

Message Frequency: - Message frequency varies based on your activity and notification preferences - You may receive multiple messages per day depending on your portfolio activity

Cost and Charges: - PlaceDock does not charge additional fees for SMS messages - Standard message and data rates may apply from your mobile carrier - You are responsible for any charges from your mobile carrier

Opt-Out: - You may opt out of SMS messages at any time by: - Replying "STOP" to any message - Disabling SMS notifications in your account settings - Contacting support@placedock.com

TCPA Compliance: - SMS messages are sent in compliance with the Telephone Consumer Protection Act (TCPA) - By providing your phone number, you certify that you are the subscriber or authorized user - We do not sell or share your phone number with third parties for marketing purposes

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or other factors.

Notice of Changes: - We will notify you of material changes by: - Posting a notice on the Service - Sending an email to your registered email address - Updating the "Last Updated" date at the top of this Privacy Policy

Review Periodically: - You should review this Privacy Policy periodically - Your continued use of the Service following the effective date of the revised Privacy Policy is subject to the updated Privacy Policy

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

PlaceDock LLC

General Inquiries: Email: support@placedock.com Website: https://placedock.com

Data Protection and Privacy Inquiries: Email: privacy@placedock.com Subject: Data Protection Inquiry

California Consumer Privacy Act Requests: Email: privacy@placedock.com Subject: CCPA Request

State Privacy Rights Requests: Email: privacy@placedock.com Subject: State Privacy Request

General Customer Service: Email: support@placedock.com

Mailing Address: PlaceDock LLC [Replace with actual business mailing address before publishing]

This Privacy Policy is effective as of July 27, 2026. By using the PlaceDock Service, your personal information will be processed as described in this Privacy Policy.