Privacy Policy
Draft for attorney review. This document was prepared as a starting point and has not yet been reviewed by a lawyer. It will be finalized before ailandlord accepts its first landlord. Questions: hello@ailandlord.io.
ailandlord ("we," "us") provides AI-powered property management software for landlords who self-manage their rentals. This policy explains what we collect, why, and what control you have. It applies to ailandlord.io and the ailandlord application.
1. Who this covers
Three kinds of people interact with ailandlord, and we treat their data differently:
- Landlords — our customers, who create accounts and manage rentals.
- Tenants and applicants — people who apply to, rent from, or pay a landlord using ailandlord. You are not our customer; the landlord is. We process your data on the landlord's behalf and under the rules below.
- Site visitors — anyone browsing ailandlord.io, including people who apply for founding access.
2. What we collect
From landlords
- Account details: name, email, phone, business name, mailing address.
- Property details: unit addresses, rent amounts, lease terms, expense records, maintenance history.
- Payment routing: the bank account rent is deposited to. Bank credentials are handled by Stripe and Plaid; we never see or store your bank login.
- Rules you set: late-fee amounts, approval thresholds, screening criteria.
From tenants and applicants
- Application details you submit: name, contact information, employment and income, rental history.
- Screening: when you authorize a screening, TransUnion SmartMove generates a credit, criminal, and eviction report. We do not receive your full credit file. We receive the report the landlord is entitled to under the Fair Credit Reporting Act (FCRA) and an AI-generated plain-language summary of it.
- Payments: your payment method is tokenized by Stripe. We store the token and transaction history, not your account number.
- Maintenance requests, messages, and any photos you attach.
From all visitors
- Founding-access application, if you submit one: your email, how many units you manage, the state your rentals are in, what tool you use today, and anything you choose to write in the optional "what eats your time" box. We use it to decide whether we're a fit and to reply to you. We do not sell it, share it, or add you to any list you didn't ask for.
We also save how you found us, stored alongside your application: the address of the page that linked you here, the page on ailandlord.io you landed on, any campaign tags (utm_source,utm_medium,utm_campaign) in the link you clicked, and your browser's user-agent string. This tells us which channels actually reach landlords. We deliberately do not store the rest of the link's query string, so advertising click identifiers (gclid,fbclidand the like) are never saved against your email. While you browse, we keep these few values in your browser's session storage — not a cookie, not shared with anyone, and discarded when you close the tab — so that if you arrive from a link, read a few pages, and then apply, we still know where you came from. - Standard web analytics: pages viewed, approximate location from IP, device type, referrer. We use Vercel Web Analytics, which does not use cookies and does not track you across sites. If you submit an application we also record the unit-count band, current-tool answer, and which channel you came from as an analytics event, so we can see the mix of people applying. That event is not linked to your email address.
3. How the AI uses your data
ailandlord's core feature is software that takes actions on a landlord's behalf: drafting listings, summarizing screening reports, sending late-payment reminders, categorizing expenses, and triaging maintenance requests. To do this, relevant data is processed by large language models. Specifically:
- We send only the data needed for the task at hand — a screening report to summarize it, a maintenance request to classify it — not your entire account.
- We use model providers under contracts that prohibit training on your data.
- Every action the AI takes is logged, timestamped, and visible to the landlord in their ledger, and can be reversed.
- The AI never decides whether to approve or deny an applicant. That decision is always made by the landlord.
4. Why we use it
- To provide the service: listing units, screening applicants, executing leases, collecting rent, keeping books.
- To meet legal obligations, including FCRA requirements around tenant screening and adverse-action notices, and tax reporting.
- To keep the service secure, detect fraud, and debug problems.
- To send landlords product updates and, if you applied for founding access, to reply to you and share launch and pricing news. You can unsubscribe from any of these.
5. Who we share it with
We do not sell personal data. We share it only with providers that are necessary to run the service, each bound by their own privacy obligations. ailandlord is in private beta; the list below describes the service as it is being built. Today, in use: Supabase and Vercel. The remainder will be engaged before the features that depend on them are offered to any landlord.
- TransUnion SmartMove — tenant screening reports.
- Stripe and Plaid — payment processing and bank account verification.
- Dropbox Sign — e-signature of leases.
- Supabase and Vercel — database and hosting.
- AI model providers — for the AI features described above, without training rights.
- Listing syndication partners, when a landlord publishes a listing.
We will also disclose data if required by law, to enforce our terms, or to protect the rights or safety of a landlord, a tenant, or the public.
6. Tenant and applicant rights
Because the landlord is our customer, most requests about your data go through them — but you have rights we honor directly:
- If a landlord denies your application based on a screening report, the FCRA requires that you receive an adverse-action notice naming the reporting agency and your right to a free copy of the report and to dispute inaccuracies. ailandlord generates this notice for the landlord to send.
- You can request a copy of the data we hold about you, or ask us to delete it once it is no longer needed for the landlord's legal record-keeping, by emailing hello@ailandlord.io.
7. Retention
Lease, payment, and screening records are retained for as long as a landlord's account is active and for the period the landlord is legally required to keep rental records afterward (commonly 3–7 years depending on state). Founding-access applications are kept until you ask us to delete them, or until we have finished evaluating whether we're a fit and you have told us you're not interested. Vercel Web Analytics data is aggregated and not retained at an individual level. The exception is the channel information described in section 2, which is stored with your application and kept for as long as the application is.
8. Security
Data is encrypted in transit (TLS) and at rest. Payment credentials are never stored on our systems. Access to production data is restricted to staff who need it and is logged. No system is perfectly secure; if we learn of a breach affecting your data, we will notify affected people and regulators as the law requires.
9. Children
ailandlord is not directed at anyone under 18 and we do not knowingly collect data from minors.
10. Your choices
- Landlords can export or delete their account data from the app or by contacting us.
- Anyone can unsubscribe from email by using the link in any message or writing to us.
- California residents have additional rights under the CCPA, including the right to know, delete, and opt out of sale (we do not sell). Contact us to exercise them.
11. Changes
We will post updates here and, for material changes, notify landlords by email before they take effect.
12. Contact
ailandlord · Firestone, Colorado, USA · hello@ailandlord.io