Privacy Policy

DepositHawk collects the following personal information to operate the Service:

• Account information — name, email address, and password when you create an account.
• Lease and property details — addresses, unit numbers, lease start and end dates, move-in/move-out dates, rent amounts, and security deposit amounts.
• Dispute information — deduction descriptions, state selections, landlord contact information, and demand letter inputs.
• Photos and documents — move-in/move-out condition photos, lease documents, and evidence uploads you provide.
• Communication logs — records of landlord communications you log through the Service (dates, descriptions, and categories).
• Fee audit data — utility bills, recurring charges, and fee records you enter for junk fee analysis.
• Retaliation events — records of potential landlord retaliation events you report.
• Payment records — purchase history and subscription status (payment card details are handled exclusively by Stripe and never touch our servers).

Your data is stored across the following services:

• Supabase (PostgreSQL) — account data, lease details, dispute records, communication logs, fee audit data, and all structured information.
• Supabase Storage — photos and document uploads.
• Stripe — payment method details, transaction history, and subscription records.
• SendGrid — email delivery logs and transactional email records.

All data is transmitted over encrypted connections (TLS). Database access is restricted to authenticated application requests.

We share data with the following third parties solely to operate the Service:

• Stripe, Inc. — processes payments. DepositHawk never sees or stores your payment card number. See the Stripe Privacy Policy.
• SendGrid (Twilio) — sends transactional and lifecycle emails on our behalf.
• Google Analytics (GA4) — collects anonymized usage data to help us understand how the Service is used.
• Anthropic — powers AI-assisted support features. Dispute details may be sent to Anthropic’s API for analysis. Anthropic does not use this data for model training.

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for marketing purposes.

Transactional emails (purchase confirmations, document delivery, dispute updates) and lifecycle emails (lease check-ins, renewal reminders) are sent via SendGrid using the email address associated with your account.

You can manage your email preferences from your dashboard settings. Every non-transactional email includes an unsubscribe link.

DepositHawk uses the following cookies:

• Session cookies — required to keep you logged in and maintain your session.
• Google Analytics cookies — used to collect anonymized usage data (page views, session duration, referral sources). You can opt out using a browser extension or ad blocker.

Your data is stored for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain records for legal or financial compliance purposes (e.g., payment transaction records required by tax law).

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and associated data.
• Data export — request an export of your data in a portable format.

Self-service account deletion and data export features are coming soon. In the meantime, contact us at support@deposithawk.com to exercise any of these rights. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what data we collect and to opt out of any sale of personal information. We do not sell personal information.

DepositHawk is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us at support@deposithawk.com and we will delete it promptly.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service. Your continued use of DepositHawk after changes are posted constitutes acceptance of the updated policy.

Questions about this Privacy Policy or how your data is handled? Email us at support@deposithawk.com.

Prompt Critical, LLC — PO Box 524133, Bronx, NY 10452