SB Estates LLC

1. Introduction

SB Estates LLC ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management platform.

This policy applies to:

Individual Property Owners: Users who self-manage their properties
Property Management Companies (Organizations): Companies that manage properties on behalf of owners
Managed Owners: Property owners whose properties are managed by a PMC through our platform
Renters: Tenants whose accounts are created by property owners or PMCs
Organization Team Members: Administrative users within property management companies

2. Information We Collect

Information You Provide Directly:

Personal Information: Name, email address, phone number, mailing address
Account Information: Username, password, account type, user role
Property Information: Property addresses, descriptions, photos, lease terms, rent amounts, security deposits
Financial Information: Payment method details (processed by Stripe), transaction history, setup fees, maintenance reserves
Communication Data: Messages, support requests, maintenance requests, document uploads
Organization Information: Company name, business details, subscription plan, team member information
Document Information: Uploaded documents, electronic signatures, document signing timestamps
Consent Records: Terms acceptance, privacy policy acceptance, IP addresses at time of consent

Information We Collect Automatically:

Device Information: IP address, browser type, operating system, device identifiers
Usage Data: Pages visited, features used, time spent on platform, click patterns
Location Data: General location based on IP address (with your permission for precise location)
Cookies and Tracking: Session cookies, authentication tokens, analytics data

3. How We Use Your Information

We use your information for various purposes, including:

Providing and improving our services
Processing transactions
Communicating with you
Personalizing your experience
Analyzing usage patterns
Preventing fraud and ensuring security
Complying with legal obligations

4. Information Sharing and Data Access

General Data Sharing:

Service Providers: Stripe (payment processing), AWS (file storage), email service providers, analytics tools
Legal Authorities: When required by law, court order, or government regulation
Business Transactions: In connection with a merger, acquisition, or sale of assets

Organization-Specific Data Sharing:

Property Management Companies: When you use a PMC's services, they can access:
- Your property information and lease details
- Rent payment history and financial records
- Maintenance requests and property documents
- Security deposit and maintenance reserve information
- Renter information for properties they manage
Managed Owners: Your PMC may share your information with:
- Their team members who need access to provide services
- Your renters (name, contact information as appropriate)
- Service providers for maintenance and repairs
Renters: Your information may be shared with:
- Your property owner or their PMC
- Other service providers as needed for property management
Organization Team Members: Within an organization, administrative users can access information relevant to properties and owners they manage

Important: We are a technology platform provider. Property management companies using our platform are independent data controllers for information they collect and manage. They are responsible for complying with applicable privacy laws in their use of your data.

5. Payment Information and Stripe

We do NOT store payment information on our servers. All payment processing is handled by Stripe, our payment processor. When you make a payment:

Payment card or bank account information goes directly to Stripe
We receive only transaction confirmations and metadata
Stripe maintains PCI-DSS compliance for payment security
You agree to Stripe's Privacy Policy when using payment features

Stripe Connect for Organizations: Property management companies use Stripe Connect to receive payments. This means:

PMCs have their own Stripe Connect accounts
Rent payments flow through their Stripe accounts
Managed owners may have Stripe Express accounts for receiving payouts
Transaction data is shared with the relevant Stripe accounts per Stripe's policies

6. Third-Party Services

We use the following third-party services that may collect and process your data:

Stripe: Payment processing (see Section 5 above)
Amazon Web Services (AWS): File storage for documents, photos, and uploaded content
Email Service Providers: Transactional emails, notifications, and password resets
Analytics Tools: Platform usage analytics to improve our services

Each of these services has their own privacy policies governing their use of your data.

7. Data Security

We implement industry-standard security measures to protect your personal information:

Encryption: Data in transit is encrypted using SSL/TLS
Access Controls: Role-based access ensures users only see data they're authorized to view
Secure Storage: AWS S3 with appropriate access policies for documents
Authentication: Secure password requirements and optional two-factor authentication
Audit Logs: We maintain logs of significant actions for security and compliance

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

Active Accounts: Data retained while your account is active
Financial Records: Transaction data retained for 7 years for tax and legal compliance
Consent Records: Retained permanently for regulatory compliance
Property Documents: Retained as long as the property relationship exists, plus applicable legal retention periods
Deleted Accounts: Most personal data deleted within 30 days; financial records retained as required by law

Organization Data: When a managed owner or renter relationship ends, the PMC may retain historical records as required by property management regulations in their jurisdiction.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

Access: Request a copy of your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your information (subject to legal retention requirements)
Restriction: Request restriction of processing in certain circumstances
Data Portability: Request your data in a portable format
Objection: Object to certain types of processing
Withdraw Consent: Withdraw consent where processing is based on consent

For Managed Owners and Renters: Some of your data is managed by your property management company. You may need to contact them directly for certain data requests. We will work with PMCs to fulfill your rights where applicable.

To exercise your rights, contact us at kjones@sbestatesllc.com. We will respond within 30 days.

10. Electronic Signatures

When you electronically sign documents through our platform:

Your typed name, date, and timestamp are recorded
Your IP address is logged for verification purposes
Signed documents are stored securely in AWS S3
Both you and the requesting party receive copies
Signature records are retained for legal compliance

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform:

Essential Cookies: Required for platform functionality (login, session management)
Analytics Cookies: Help us understand how you use the platform
Preference Cookies: Remember your settings and preferences

You can manage your cookie preferences through your browser settings. Disabling essential cookies may impact platform functionality.

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. State-Specific Privacy Rights

California Residents (CCPA/CPRA): You have additional rights including the right to know what personal information we collect, the right to delete, and the right to opt-out of sale (we do not sell personal information).

Other States: Residents of Virginia, Colorado, Connecticut, and other states with privacy laws may have similar rights. Contact us to exercise these rights.

14. International Users

Our platform is hosted in the United States. If you access our platform from outside the U.S., your information will be transferred to, stored in, and processed in the United States. By using our platform, you consent to this transfer.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending an email notification for significant changes (if you have an account)

Continued use of the platform after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: kjones@sbestatesllc.com
Subject Line: Privacy Inquiry

We will respond to all requests within 30 days.