Privacy Policy
What we collect
- Account details: name, email address, and optionally a phone number and mailing address you enter on your profile.
- Property management data you enter: properties, leases, tenants, expenses with receipt images, mileage, and trade contacts, all owned by your household.
- Signed payment receipts: when a contractor signs a payment acknowledgment, we record their typed name, IP address, and device information to make the record defensible.
- Operational records: an activity log of account actions and a log of messages the system sends.
How we use it
Only to operate PorchLedger: rendering your dashboard, generating leases and tax paperwork, and sending the emails and text messages described below. We do not sell your data, share it for advertising, or use third-party analytics or tracking. Session cookies are used solely to keep you signed in.
Emails and text messages
PorchLedger emails household members about account activity (expenses logged, statements, renewal reminders, alerts, sign-in codes). If you separately opt in on your profile, we also send text messages for sign-in codes, lease renewal reminders, inspection reminders, and severe weather or disaster alerts. Reply STOP to any text to opt out immediately; reply HELP for help. Message and data rates may apply.
Who processes your data
- Amazon Web Services: hosting and encrypted storage of all application data.
- Amazon SES: email delivery.
- Twilio: text-message delivery. Your phone number is shared with Twilio only to deliver messages you opted into.
- Public data sources (FRED, HUD, NWS, FEMA, Census): property addresses are used to look up market and safety data; nothing else is sent to them.
- Anthropic: reads documents you send to Jarvis. Only what you send it (the document or sentence, plus a short summary of your portfolio used to identify which record you mean) is shared, only when you use that feature, and it is not used to train models.
Household sharing
Properties, leases, expenses, and reports belong to a household. Every member of your household can see that data. Contractors who sign receipts see only the payment they are acknowledging.
AI assistants
If you connect an AI assistant, it acts under your account with a limited, revocable token. A connection is read-only unless you grant it write access when you approve it. A write connection can add and edit records, and can permanently delete expenses, mileage trips, contacts and filed documents; it must confirm each deletion with you before it happens. Every AI-initiated change emails your household. No connection can change your account settings or manage households. You can disconnect assistants or revoke all AI access from your profile at any time.
Jarvis document intake
Jarvis reads documents you choose to send it: a lease, a county record, a mortgage statement, a receipt, or a sentence you type. Those bytes are sent to Anthropic, along with a short summary of your properties, leases, and recent entries so it can tell which record you mean. Nothing else about your household is sent, it is not used to train models, and the uploaded file is deleted as soon as you save or cancel. Jarvis has no ability to change your data by itself: property and lease changes are written only after you confirm them, and a receipt it saves for you emails the household immediately. Using Jarvis is optional; everything it does can be typed in by hand.
Retention and deletion
Your data is kept while your account exists. You can delete your account from your profile; households you solely own are permanently purged with their properties, leases, expenses, and receipt images. You can also export a full backup of your household's data at any time.