1. Introduction
BiPact ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security deposit compliance platform ("Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.
2. Information We Collect
Personal Information You Provide
We collect information you voluntarily provide when using the Service, including:
- Account Information: Name, email address, phone number, and profile image (if using Google Sign-In)
- Property Information: Property addresses, unit numbers, cities, zip codes, bedroom and bathroom counts
- Tenant Information: Tenant names, email addresses, lease start and end dates
- Financial Information: Security deposit amounts, rent amounts, deduction details, refund preferences and payment method details
- Inspection Documentation: Photographs of property conditions, room descriptions, captions, and timestamps
- Digital Signatures: Electronic signatures for inspection acknowledgments
- Communications: Messages exchanged between landlords and tenants through the platform
Information Collected Automatically
When you access the Service, we automatically collect certain information, including:
- Device Information: Browser type, operating system, device type
- Log Data: IP addresses, access times, pages viewed, and actions taken
- Signature Verification Data: IP address and device information at the time of electronic signature for legal verification purposes
- Session Data: Cookies and session identifiers to maintain your login state
Information from Third Parties
If you choose to sign in using Google OAuth, we receive your name, email address, and profile picture from Google. We only request the minimum information necessary to create and maintain your account. We do not access your Google contacts, calendar, or other Google services.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide the Service: To create and manage your account, process inspections, generate deposit statements, and facilitate landlord-tenant communications
- Compliance Documentation: To help you create and maintain documentation required under California Civil Code Section 1950.5, AB 2801, AB 414, and AB 628
- Legal Verification: To record signature timestamps, IP addresses, and device information for legal verification of inspection acknowledgments
- Communication: To send you service-related notifications, respond to inquiries, and provide customer support
- Security: To detect, prevent, and address technical issues, fraud, and unauthorized access
- Improvement: To analyze usage patterns and improve the Service's functionality and user experience
4. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Between Landlords and Tenants: Property information, inspection photos, deposit statements, and messages are shared between landlords and their tenants as necessary to provide the Service
- Service Providers: We may share information with third-party service providers who perform services on our behalf, such as cloud hosting (database storage), file storage (photos), and email delivery. These providers are contractually obligated to protect your information
- Legal Requirements: We may disclose information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
- Business Transfers: If BiPact is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
5. Data Retention
We retain your information for as long as your account is active or as needed to provide you the Service. Specifically:
- Account Information: Retained until you delete your account
- Property and Inspection Data: Retained for 7 years after lease termination to comply with California record retention requirements and potential legal proceedings
- Photos and Documentation: Retained for 7 years to support potential security deposit disputes or legal claims
- Session Data: Automatically expires after 7 days of inactivity
You may request deletion of your data at any time, subject to our legal retention obligations.
6. Your Privacy Rights (California Residents)
Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information:
Right to Know
You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions (such as legal retention requirements for security deposit documentation).
Right to Correct
You have the right to request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale
BiPact does not sell personal information. We do not share personal information with third parties for their direct marketing purposes.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights.
To exercise these rights, please contact us at support@bipactapp.com. We will respond to verifiable consumer requests within 45 days.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit using TLS/SSL
- Secure database storage with access controls
- Session management with secure, HTTP-only cookies
- Rate limiting to prevent abuse
- Regular security assessments
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
8. Cookies and Tracking Technologies
We use essential cookies to maintain your session and keep you logged in. These cookies are strictly necessary for the Service to function and cannot be disabled. We do not use advertising or tracking cookies. We do not track you across other websites.
9. Third-Party Services
The Service may integrate with or rely on the following third-party services:
- Google OAuth: For account authentication. Subject to Google's Privacy Policy
- Neon (Database): For secure data storage
- Cloud Storage: For secure photo storage
These services have their own privacy policies governing their use of your information.
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a child under 18, we will delete that information promptly.
11. International Data Transfers
The Service is operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.
13. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: support@bipactapp.com
Phone: +1 (951) 496-9466
Mailing address:
BiPact
8 The Green, Suite A
Dover, DE 19901
For CCPA requests, please include "CCPA Request" in the subject line and provide sufficient information for us to verify your identity.