Last updated: 2026
Account data: your name, email, phone, and the properties, units, leases, tenants, and payments you record.
Authentication data: hashed passwords, passkey credentials, MFA secrets, trusted device fingerprints, login history. We never see your raw password.
Payment data: we use Stripe (Connect, Customers, Payment Methods). We don't store full card numbers — Stripe does. We store identifiers and metadata so we can show you what's happening.
Screening data: when you request a TransUnion screening, the report sits with the vendor; we store the status and a copy you can share with the applicant. Applicants consent to the FCRA disclosure before any pull.
Usage data: server logs (IP, user-agent, route, timing) for security and debugging. Retained 90 days.
You can export your full data — ledger, leases, tenants, documents — as CSV/PDF from your account, on any plan including Free. You can delete your account; we honor a 30-day grace period in case you change your mind, then we hard-delete (financial records may be retained where law requires).
Privacy questions: privacy@rpmtogo.com.