Privacy Policy

eServicePro (“we”, “us”, “our”) provides property-management software to landlords, property managers, and their tenants and vendors. This policy explains what personal information we collect, how we use it, and the rights you have. Data controller: eServicePro Inc., 8 The Green Ste #7255, Dover, Delaware 19901, USA. Contact: privacy@eservicepro.com.

• Account & profile: name, email, phone number, role, password (hashed).
• Property & tenancy data: properties, units, leases, rent balances, maintenance/service requests, messages, documents, inspection records.
• Payment information: bank account details for ACH (routing number / IBAN are encrypted at rest with AES-256-GCM), payment history. Card/subscription billing is processed by Stripe; we do not store full card numbers.
• Tenant screening data (applicants only): with your explicit consent, information used to obtain credit, criminal, and eviction reports through our screening provider. See Section 7 (FCRA).
• Communications: messages, notifications, and SMS/email metadata.
• Technical data: IP address, device/browser information, log and audit data, and error diagnostics (via Sentry).

• To provide and operate the platform (managing properties, leases, payments, maintenance, and communications).
• To process rent and subscription payments.
• To perform tenant screening only with applicant consent.
• To send transactional notifications (email via Resend, SMS via Twilio).
• To secure the platform, detect fraud, and maintain audit trails.
• To comply with legal obligations.

We rely on the following legal bases where applicable: performance of a contract, consent (screening, marketing), legitimate interests (security, service improvement), and legal obligation.

• Service providers / sub-processors: Stripe (payments), Supabase (auth & storage), Microsoft Azure (hosting), Twilio (SMS), Resend (email), Sentry (error monitoring), Anthropic (AI agent processing), and our tenant-screening provider (consumer reporting agency — to be confirmed prior to launch). See our sub-processor register for details.
• Between platform users as required to operate a tenancy (e.g. a manager and their tenants/vendors).
• Legal / safety: when required by law, subpoena, or to protect rights and safety.
• We do not sell personal information.

We retain personal data for as long as your account is active and as required to provide the service and meet legal obligations. Retention periods vary by data type:

• Financial records (payments, leases, related documents): 7 years, to meet tax, anti-money-laundering, and record-keeping obligations.
• Audit & security logs: 400 days (SOC2 requires a 12-month minimum).
• Tenant screening records: 2 years post-decision (FCRA and equivalent).
• Account PII of deleted users: hard-deleted within 30 days of account termination.

You may request deletion as described in Section 8; account deletion is also available in-app.

We use encryption in transit (TLS) and at rest for sensitive fields, role-based access control, tenant data isolation, MFA, rate limiting, tamper-evident audit logging, and continuous error monitoring. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

When a housing provider requests a background or credit screening on an applicant through eServicePro:

• We collect the applicant’s explicit consent before any report is obtained.
• Screening reports are provided by a consumer reporting agency (to be confirmed prior to launch).
• If an adverse action (e.g. application denial) is taken based in whole or in part on a report, the applicant is entitled to an adverse-action notice, a copy of the report, and a summary of their FCRA rights.
• Applicants may dispute the accuracy of information directly with the consumer reporting agency.

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your data, and to withdraw consent or object to certain processing. To exercise these rights, contact privacy@eservicepro.com or use the in-app account-deletion feature.

The platform is not directed to children under 18 and we do not knowingly collect their personal information.

If personal data is processed outside your country, we apply appropriate safeguards for such transfers. [Complete with counsel — e.g. Standard Contractual Clauses.]

We may update this policy from time to time. Material changes will be notified via the platform or email, and the “Last updated” date above will change.

Questions or requests: privacy@eservicepro.com — eServicePro Inc., 8 The Green Ste #7255, Dover, Delaware 19901, USA.