Privacy Notice
Effective Date: September 8, 2026
This notice explains the personal data Verde Homes currently processes, why it is needed, who receives it, how long it is kept, and the choices available to you. It applies to Verde's website, owner and property-manager workspace, tenant portal, payments, support, and related services.
Submit a Privacy RequestWe process account and contact identifiers such as names, email addresses, phone numbers, authentication identifiers, roles, and organization relationships. We use them to create and secure accounts, authenticate users, send invitations and service notices, provide support, and keep each user's access within the correct organization and role.
We process property addresses and details; tenant and lease records; application information such as income, employment status, current address, household count, pets, vehicles, and desired move-in date; maintenance, vendor, utility, expense, deposit-ledger, and other rental-operation records. We use this data to provide the rental-management features requested by owners, managers, and tenants.
We process charges, payments, allocations, fees, refunds, subscription status, and Stripe identifiers to collect rent and other eligible charges, reconcile transactions, maintain accounting records, address disputes, prevent fraud, and support legally required reporting. Security deposits are recorded as externally held and are not collected through Verde's online payment rails.
Bank connection and payments use Stripe-hosted flows. Verde does not ask for or store your online banking username or password, banking credentials, full bank account number, or routing number. Stripe collects and processes those details. Verde stores payment records, Stripe references, and—when available—the bank name, account type, and last four digits needed to display a saved account.
We process uploaded property and lease files, completed lease copies, electronic-signature images or marks, signer consent and audit events, timestamps, and related document metadata to store records, route signing requests, authenticate signing sessions, and reproduce completed agreements. Users should not upload identity documents or other sensitive information unless it is necessary for the rental workflow.
We process support messages, privacy requests, payment and AutoPay lifecycle events, security and audit records, IP addresses captured for signing or security purposes, and ordinary request logs such as time, route, browser, and device information. We use these records to answer requests, operate and protect the service, troubleshoot failures, investigate incidents, and demonstrate consent or transaction history.
We receive data directly from users; from owners, property managers, tenants, and authorized organization members who enter records; and from service providers such as Stripe when they return transaction status or account-display details. Vercel Web Analytics also provides Verde with anonymous, aggregate page-view and traffic reports. Verde does not use a separate advertising, behavioral-tracking, or cross-site analytics vendor.
Supabase provides authentication, database, and private file storage and may process account data and customer content. Vercel hosts the application and may process request metadata, logs, and data transiently needed to serve requests. Vercel Web Analytics also processes anonymous page-view data—such as time, page path, filtered query parameters, referrer, coarse location, browser, operating system, and device type—to produce aggregate traffic reports; it does not associate those data points with an IP address or identified person, and its temporary visitor hash expires after 24 hours. Stripe provides membership billing, bank connection, payment processing, connected-account transfers, and related financial services. Resend processes recipient names, email addresses, and notification content to deliver transactional email.
Within Verde, rental records are made available to authenticated owners, managers, tenants, and other organization users according to their role and property relationship. We may also disclose data at a user's direction, to advisers or authorities when reasonably necessary to comply with law or protect rights and safety, or as part of a business transaction subject to appropriate safeguards. We do not disclose personal data to advertising or analytics vendors.
Verde does not sell personal data, use it for cross-context or targeted advertising, or profile people to make decisions that produce legal or similarly significant effects. Those opt-outs therefore require no change to current processing. We honor a recognized Global Privacy Control signal as an opt-out request for every visitor, regardless of location. Vercel's Web Analytics documentation does not state that its anonymous page-view collection is suppressed by GPC, so Verde does not claim that it is; the service is cookieless, aggregate, and not tied to an identified visitor.
The current rental-application flow does not ask for citizenship or immigration status, Social Security numbers, driver's-license numbers, passport information, biometric identifiers, health information, or precise geolocation. Citizenship and immigration status are sensitive data under multiple state laws. Verde does not sell sensitive data—including to any government entity engaged in civil immigration enforcement—and will not add processing of citizenship or immigration status without first establishing a lawful need, required opt-in consent, and appropriate safeguards. Free-form uploads or notes could contain sensitive data; users must submit only what is necessary.
Verde is a rental-operations service for adults and is not directed to children. We do not knowingly collect personal data directly from children. Adult users may enter limited household information or upload rental documents that incidentally refer to minors; they should provide only what is necessary. If we learn that a child submitted personal data directly, a parent or guardian may contact us to request review and deletion.
You may ask Verde to confirm and provide access to personal data about you, correct inaccuracies, delete eligible data, or provide data you supplied in a portable format. You may also request the opt-outs described above. Email support@verde-homes.com with the subject “Privacy request.” You do not need to create a new account, but we may verify your identity and authority before acting. Legal exceptions and retention duties may limit a request.
Verde will respond without undue delay and within 45 days. If reasonably necessary because of complexity or request volume, we may extend once by up to 45 additional days and explain the extension during the first 45 days. If we decline a request, we will explain why and how to appeal. Submit an appeal to support@verde-homes.com with the subject “Privacy appeal”; Verde will provide a written appeal decision within 60 days and, if denied, explain how to contact the appropriate Attorney General where available.
Operational property, maintenance, vendor, document, and AutoPay records are deleted when an eligible organization closure is completed. Direct identifiers in organization, property, tenant, user, lease, application, and privacy-request records are deleted, anonymized, or tombstoned. Anonymized financial and accounting records are retained for seven years; anonymized security, audit, consent, and minimized lifecycle records for two years. Managed backups expire on the provider's lifecycle, currently eight daily snapshots. Stripe may retain transaction records under its own legal and provider obligations.
Retention can be extended for an active lease, payment reconciliation, deposit, tax or accounting duty, dispute, fraud or security investigation, legal hold, or another legal obligation. Executed legal-document retention and exact provider-side retention settings remain under formal review; Verde will not represent those unresolved periods as settled. When data is no longer required, the account-deletion process deletes, anonymizes, or lets provider-managed copies expire according to the applicable record class.
Verde uses role- and organization-scoped access controls, authenticated server operations, encryption in transit, and provider-managed encryption at rest. No Internet service can promise absolute security. Please do not send passwords, full bank account numbers, routing numbers, Social Security numbers, or identity-document images by email.
Privacy requests and questions may be sent to support@verde-homes.com. Verde Homes has not yet designated a public postal mailing address; that is a known launch-readiness gap that will be completed before broad public launch. Until then, email is the active contact method. We will post material changes to this notice and update its effective date.