1. Who We Are

KuberAssets operates KuberAssets (“Service”), a property management platform. This Privacy Policy explains how we collect, use, share, and protect information when you use our platform. “We,” “us,” and “our” refer to KuberAssets. Contact us at hello@kuberassets.com.

2. Information We Collect

Information you provide

Account data — name, email address, company name, and password when you register
Property data — addresses, unit details, lease terms, and financial information you enter into the platform
Resident and applicant data — names, contact information, rental history, income, and screening information submitted through applications
Payment information — billing details processed by Stripe; we do not store full card numbers
Communications — messages sent through the resident inbox, maintenance requests, and support tickets
Listing content — property descriptions, photos, and availability information submitted to NowRent

Information collected automatically

Usage data — pages visited, features used, actions taken, and session duration
Device data — IP address, browser type, operating system, and device identifiers
Log data — server logs including request times, error reports, and referring URLs
Cookies — authentication tokens and session identifiers necessary for the Service to function

Information from third parties

Payment processors — Stripe provides transaction status and billing information
Market data providers — RentCast provides aggregated rental market statistics; this data is not linked to individuals

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service
Process rent payments and subscription billing
Send transactional emails — rent confirmations, maintenance updates, lease notifications
Respond to support requests and troubleshoot issues
Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations
Generate aggregated, anonymized analytics about platform usage

We do not use your data for advertising or sell it to third-party marketers. We do not use resident or applicant data for any purpose beyond delivering the Service to you.

4. How We Share Your Information

We share information only in the following circumstances:

Service providers — we use Stripe (payments), Firebase/Google (database and authentication), Resend (email delivery), Vercel (hosting), and RentCast (market data). Each is bound by confidentiality agreements and data processing terms.
Within your organization — data you enter is accessible to other members of your workspace (managers, team members) as configured by your account administrator.
Legal requirements — we may disclose information if required by law, subpoena, or to protect the rights and safety of KuberAssets, our users, or the public.
Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

We do not sell, rent, or trade your personal information to third parties.

5. Resident and Applicant Data

Property managers and landlords using KuberAssets collect personal information from residents and applicants (“End User Data”). KuberAssets processes this data as a service provider on behalf of the property manager (“data controller”). If you are a resident or applicant and have questions about how your data is used, please contact your property manager or landlord directly. You may also contact us at hello@kuberassets.com to identify the controller of your data.

We retain End User Data only as long as necessary to provide the Service or as required by law. Property managers can delete resident records through the platform at any time.

6. Data Retention

We retain account data for the duration of your subscription and for up to 90 days after account closure, after which it is deleted or anonymized. You may request earlier deletion by contacting us. Some data may be retained longer if required by law (e.g., financial records) or for legitimate business purposes such as fraud prevention.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access controls, multi-tenant data isolation at the database level, and regular security reviews. We are working toward SOC 2 Type II certification.

No method of transmission or storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

8. Cookies and Tracking

We use strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking cookies. You may disable cookies in your browser settings, but doing so will prevent you from logging into the Service.

9. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete data
Request deletion of your personal data
Object to or restrict certain processing
Receive a portable copy of your data
Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hello@kuberassets.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

10. California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information is collected, the right to delete, the right to opt out of sale (we do not sell personal information), and the right to non-discrimination for exercising privacy rights. To submit a request, email hello@kuberassets.com with the subject “California Privacy Request.”

11. Children’s Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect. The “Effective” date at the top reflects the most recent revision.

13. Contact Us

For privacy questions, requests, or concerns, contact us at hello@kuberassets.com or by mail at KuberAssets, Boston, MA.