Privacy Policy

Last updated: March 2026

1. Information We Collect

When you use Rent. or Lend. (the "Services"), we may collect the following categories of information:

  • Account information — your name, email address, and phone number.
  • Property and financial data — property addresses, mortgage terms, rent amounts, loan balances, and related records you enter into the platform.
  • Payment information — payment method details are processed directly by Stripe. We do not store your credit card or bank account numbers on our servers.
  • Tax identification data — if you use Lend, you may enter your Social Security Number or Employer Identification Number when generating tax forms (e.g., Formulario 480.6A). This data is used exclusively to generate the form and is not stored on our servers.
  • Email data — if you set up email forwarding, we receive only forwarded payment notification emails. We do not read, store, or access your email content beyond parsing forwarded payment notifications for amounts and dates.
  • Phone number — if you opt in to SMS or WhatsApp notifications, your phone number is shared with Twilio solely for the purpose of delivering transactional messages (payment reminders, receipts, support responses, account alerts, and security codes). Your number is never used for marketing and is not shared with any other third party.
  • Usage data — standard analytics data such as pages visited, features used, and device information to improve our Services.

2. How We Use Your Information

We use the information we collect to:

  • Track and record payments between landlords and tenants, lenders and borrowers, and distribute payment shares to co-owners and co-lenders.
  • Send notifications via email and WhatsApp (with your opt-in) about payment status, due dates, and account activity.
  • Generate tax forms (e.g., Formulario 480.6A) and annual interest statements.
  • Bill platform fees to landlords and lenders for payment servicing.
  • Improve and maintain the security and performance of our Services.

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy:

  • Stripe — payment processing and ACH collection via Stripe Connect.
  • Google — Google Sign-In for account authentication (optional).
  • SendGrid — inbound email receiving and parsing.
  • Resend — transactional email delivery (notifications, password resets).
  • Twilio — SMS and WhatsApp notifications (opt-in only, transactional messages only).
  • Supabase — authentication and database hosting.
  • Vercel — application hosting and deployment.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes. Your data is only shared with the third-party service providers listed in Section 3, strictly for the purpose of operating the platform and delivering the Services. We will never monetize your data or provide it to data brokers. When you use co-owner or co-lender distribution features, limited information (property address, distribution share, payout amounts, and settlement status) is visible to co-owners or co-lenders invited by the property owner or lender. Co-owner and co-lender bank account details are processed by Stripe and are not visible to other users on the platform.

5. Data Security

We take the security of your data seriously. All sensitive data, including OAuth tokens, is encrypted using AES-256-GCM encryption. Social Security Numbers are never stored — they are entered at form generation time and immediately discarded. All data in transit is protected via HTTPS. We use Supabase Row Level Security (RLS) to ensure users can only access their own data. Authentication tokens are stored securely and never exposed to the client.

6. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify affected users via the email address associated with their account within 72 hours of discovering the breach. We will also take immediate steps to contain and remediate the breach, and where required by law, notify relevant authorities.

7. Data Retention

Your data is retained for as long as your account is active. If you deactivate your account, your data will be retained for 90 days to allow for reactivation. After 90 days, deactivated accounts and their associated data become eligible for permanent deletion.

8. Your Rights

You have the right to:

  • Access your personal data — you can view all your information from your account dashboard.
  • Correct inaccurate data — you can update your information from Settings.
  • Delete your data — you can deactivate your account from Settings or contact us at support@gsquarelabs.com to request deletion.
  • Export your data — you can download your payment histories, property records, and financial statements from your account dashboard before deactivation.
  • Opt out of SMS or WhatsApp notifications at any time from Account Settings → Notifications. You can also reply STOP to any SMS to unsubscribe immediately, or HELP for support.

9. California and International Users

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, the right to request deletion, and the right to opt out of the sale of your personal information. As stated in Section 4, we do not sell your personal information. If you are a resident of the European Union or European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR). To exercise any rights under applicable law, please contact us at support@gsquarelabs.com.

10. Cookies

We use session cookies strictly for authentication purposes. These cookies are necessary for the platform to function and keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party cookies for analytics or marketing purposes.

11. Children's Privacy

Our Services are not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide at least 30 days' notice via the email address associated with your account before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy. We encourage you to review this page periodically for the latest information.

13. SMS / Text Message Communications

If you provide a mobile phone number and opt in during signup or in Account Settings → Notifications, you consent to receive transactional SMS messages from gSquare Labs at that number. Messages may include payment reminders, payment receipts, support responses, billing alerts, and security codes. Message frequency varies based on your account activity and is typically 1–10 messages per month per obligation you manage. Message and data rates may apply from your carrier. Reply STOP to any message to unsubscribe; reply HELP for support. You can also disable SMS at any time from Account Settings → Notifications. Carriers are not liable for delayed or undelivered messages. We never sell or share your mobile number for marketing, and we do not send promotional or third-party messages on this channel.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@gsquarelabs.com
gSquare Labs LLC
Puerto Rico