Privacy Policy

This Privacy Policy explains how Wesley Kellett, an individual sole proprietor doing business as DepositShield (“DepositShield,” “we,” “us”), collects, uses, and shares information when you use the Service. Your rental records can be sensitive, so we collect only what we need to run the Service and we do not sell your data.

1. Information we collect

• Account information: your email address and password (passwords are handled by our authentication provider and stored only in hashed form).
• Lease and property details: information you enter such as address, landlord name and email, deposit and rent amounts, and lease dates.
• Evidence and records: photos you capture and their metadata (including a cryptographic hash, the time you captured them, and the time our servers received them), room notes, maintenance requests, communications you log, and rent-payment records.
• Payment information: if you subscribe, our payment processor (Stripe) collects and processes your payment details. We do not receive or store your full card number. We store limited billing status (such as your plan and a Stripe customer identifier).
• Usage information: first-party product events (for example, that a walkthrough was completed or a report generated) and basic technical data needed to operate and secure the Service. We do not use third-party advertising trackers.

2. How we use information

• To provide, maintain, and improve the Service and its features;
• To generate the reports, documents, and exports you request;
• To send transactional messages you enable, such as deadline and maintenance reminders;
• To process subscriptions and prevent fraud and abuse;
• To secure the Service, enforce our Terms, and comply with law.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

3. Service providers we share data with

We share information only with vendors who process it on our behalf to run the Service, under obligations to protect it:

• Supabase — database, file storage, and authentication;
• Vercel — application hosting and content delivery;
• Stripe — payment processing for subscriptions;
• Resend — sending transactional and reminder emails.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and property of our users or others. If the Service is ever transferred to another operator, information may transfer as part of that transaction.

4. Sharing you control

Some features let you share information intentionally — for example, emailing a report to your landlord, generating an export with time-limited download links, or inviting a roommate to a shared lease. Once you share information with someone, we cannot control what they do with it. Invite links are time-limited, and you can remove members from a shared lease.

5. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, database row-level security that restricts each user to their own data (and data explicitly shared with them), private file storage with signed, expiring access links, and hashing of photos at upload. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

6. Data retention and deletion

We keep your information for as long as your account is active or as needed to provide the Service. You can export your data at any time and delete your account from your settings. Deleting your account removes your leases, photos, records, and associated data and cancels any active subscription; some limited records may be retained where required by law or for legitimate business purposes such as fraud prevention.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to opt out of certain processing. You can exercise the core of these rights directly in the app (export and account deletion) or by contacting us at support@depositshield.app. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information; we do not sell or share personal information as those terms are defined. We will not discriminate against you for exercising your rights.

8. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising or cross-site tracking cookies. You can control cookies through your browser, but disabling necessary cookies may prevent you from signing in.

9. Children

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. International users

The Service is operated from and intended for use in the United States, and information is processed in the United States. If you access the Service from outside the U.S., you consent to processing here.

11. Changes to this policy

We may update this Privacy Policy. We will update the effective date above and, for material changes, take reasonable steps to notify you. Your continued use after changes take effect means you accept the updated policy.

12. Contact

Questions or privacy requests: support@depositshield.app. See also our Terms of Service.