Privacy Policy

1. What we collect

Waitlist visitors. Your email address, if you join the waitlist.

Landlords. Your name, email, and password (handled by Supabase Auth — we never store your password), plus the property records you create: properties, units, leases, rent amounts, lease PDFs, maintenance records, and messages.

Tenants. Your name, email, and password; your rent payment status and history in Keyhold; maintenance requests and photos you submit; and messages with your landlord. Your landlord may enter your email address into Keyhold before you create an account — we process that information on your landlord’s behalf to set up your lease. Card details go directly to Stripe; Keyhold never stores card numbers or bank credentials.

2. How we use it

• to provide the service: accounts, leases, rent tracking, maintenance, messaging;
• to send service email, like rent payment requests a landlord directs to a tenant;
• to send waitlist members occasional product updates (you can opt out of these at any time);
• to secure, debug, and improve Keyhold.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

3. Who we share it with

Only service providers that host and operate Keyhold, under their own contractual obligations:

• Supabase — database, authentication, and file storage (lease PDFs, maintenance photos);
• Stripe — payment processing;
• Resend — transactional email delivery;
• Vercel — application hosting.

We may also disclose information if required by law, or as part of a merger, acquisition, or sale of assets (we’d notify you first). Within the product, information is shared as you’d expect: your landlord or tenant sees the leases, payments, requests, and messages that involve them.

4. Cookies

Keyhold sets only first-party cookies required to keep you signed in (Supabase auth session). Your theme preference is stored in your browser’s localStorage. There are no advertising, analytics, or tracking cookies, so there’s no cookie banner.

5. Retention and deletion

Account data is kept while your account is active. Landlords control their property records: deleting a property or unit permanently deletes its associated leases, payment records, maintenance requests, and messages, so export anything you need first. Waitlist emails are kept until you ask to be removed. To request access to, correction of, or deletion of your personal information, email legal@getkeyhold.com. If your information was entered by your landlord (for example, on a lease), we may direct the request to them as the record owner, but we’ll help either way.

6. Security

Traffic is encrypted in transit (HTTPS). Data access is scoped by role-based rules at the database layer, and files like lease PDFs and maintenance photos live in private storage reachable only through short-lived signed links. No system is perfectly secure — use a strong, unique password.

7. California residents

California residents may request to know, correct, or delete the personal information we hold about them (contact above; we don’t discriminate for exercising these rights). We don’t sell or “share” personal information as those terms are defined in the CCPA/CPRA.

8. Children

Keyhold is for adults involved in a tenancy and isn’t directed to anyone under 18. We don’t knowingly collect information from children.

9. Changes

If this policy materially changes, we’ll notify account holders by email or in-product notice before the change takes effect, and update the date at the top.

10. Contact

Privacy questions and requests: legal@getkeyhold.com. See also our Terms of Service.