Privacy

What we collect

We keep collection to a minimum. You can take part under a pseudonym, so we do not need your real name to let you post. The data we hold is the kind a service like this needs to run: the account details you provide, the content you choose to submit, and basic technical records such as a timestamp and a coarse source for each submission, which we keep to handle abuse and to maintain a moderation record.

Things you upload

When you upload a document, a violation letter, financials, or the details of a dispute, we use it for one purpose: to help you with your situation, for example to analyze the document and draft a response. We do not use your uploads to build products for anyone else. We keep them only as long as we need to provide that help, and you can ask us to remove them.

Data minimization

We avoid holding personal information we do not need. Posts are screened for personal data before they publish, and identifiers like names of individuals, addresses, and contact details are redacted so they do not appear publicly. We store as little as the service requires and isolate the sensitive parts.

The services we run on

We do not run our own data centers. A short list of service providers processes data on our behalf, each for one job:

• Hosting and infrastructure.The servers that build and serve the site see standard technical logs — IP address, request, timestamp — the way any website’s servers do. A server-side error-monitoring service receives error reports so we can fix what breaks.
• Database and sign-in (Supabase). Stores your account, your sessions, and the content you submit.
• Payments (Stripe). If you subscribe to Pro, Stripe handles the card and the billing. We never see or store your card number.
• Email (Resend). Sends the transactional email the service needs — sign-in and account messages, and notifications you opted into, each with an unsubscribe link.
• AI processing (Anthropic). When you run one of the AI tools, the text or document you submit is sent to our AI provider and processed to produce the analysis you asked for. We keep a run record for metering — which tool, when, token counts, and a cryptographic fingerprint of the input — but not the raw text of what you submitted.
• Product analytics (PostHog). Usage events that tell us which features get used and where flows break, kept deliberately light on personal detail. The content of your posts and uploads is never an analytics signal.

Each provider processes data to deliver its service to us, nothing broader.

When you ask us to send your request to a vendor

One data flow happens only when you deliberately start it: submitting a request on the find-a-vendor page shares that request — your name, contact details, and what you asked for — with the independent third-party vendor we pass it to, exactly as disclosed on the form when you submit it. The vendor may pay us a referral fee. Nothing else about you travels with the request: not your reviews, stories, uploads, or anything else you did on the site. The full picture is on how we make money.

We never reuse your data for another property

This is a firm commitment, not a nicety. The data you contribute here is for this service and the homeowners it serves. It is never transferred, shared, sold, or used to build data, features, models, training sets, or market intelligence for any sibling or related property, whether in raw, aggregated, anonymized, or derived form. The promise of this platform is that it is on the homeowner’s side, and reusing your fight-back data anywhere else would break that promise. There is no internal-analytics exception.

The only public information that any related project shares is plain public-record fact about associations, such as a legal name and address, which each project gathers independently from primary public sources. That is not your data and carries none of your contributions.

How your content is used publicly

Reviews, ratings, and stories you submit are meant to be published, after screening and redaction, so other homeowners can read them. They are displayed under your pseudonym and are about the association, never a named individual. See how moderation works for what happens before a post goes live.

How long we keep things

Account data stays for as long as you have the account. Published reviews and stories stay up as part of the public record unless they come down through moderation or the notice and takedown process, and we keep an append-only moderation log so decisions about content can be audited. AI-tool run records keep the metering metadata described above, not your raw input. Vendor requests are kept so we can route them and track whether they were handled. We do not yet have an automated, self-service deletion flow; to ask for removal of your content, uploads, or account data, start from the contact page and a person will handle it.

Your choices

You can request removal of your own content and uploads, and you can ask what we hold about your account. For a published post, use the notice and takedown form; for everything else, start from the contact page. Because accounts here are pseudonymous, the simplest way to limit what we know is to share only what you are comfortable making part of the record.

Changes

We may update this notice as the service grows. We will keep it readable, and the commitments above, especially that your contributed data is never reused for another property, are not the kind of thing we walk back.