Privacy Policy

How We Collect, Use, and Protect Your Information

Effective Date: December 10, 2025

Last Updated: December 10, 2025

Your Privacy Matters to Us

DepositCompliance.com ("we," "us," or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, share, and protect your information when you use our security deposit compliance document generation service.

1. Information We Collect

A. Information You Provide to Us (Personal Information)

Account and Contact Data:

Email address (for document delivery and account communications)
Name (if provided during account creation)
Contact information (phone number, if provided)

Billing and Payment Data:

Billing name and address
Payment information is collected and processed by our secure third-party payment processor (Stripe)
IMPORTANT: We do NOT store full credit card numbers, CVV codes, or other complete payment card data on our servers
We receive only limited payment information (last 4 digits, card brand, expiration date) for record-keeping

Sensitive Document Data (Landlord and Tenant Information):

To generate your Massachusetts security deposit compliance letter, we collect and process the following sensitive information:

Tenant Information: Full name, mailing address, email address
Landlord Information: Full name, mailing address, contact details
Property Information: Property address, unit number (if applicable)
Financial Information: Security deposit amount, monthly rent, interest calculations
Bank Information: Bank name and account number (if required by state law)
Lease Details: Lease start date, lease end date, termination date
Deduction Details: Itemized list of deductions with descriptions and amounts

This information is essential for generating legally compliant documents and is handled with the highest level of security and confidentiality.

B. Information Collected Automatically (Usage Data)

Technical Data:

IP address and approximate geographic location
Browser type and version
Device type and operating system
Unique device identifiers
Time zone setting

Usage Data and Analytics:

Pages visited and features used
Time spent on pages
Referral sources (how you found our website)
Click patterns and navigation paths
Error logs and performance data

Note: Analytics data is aggregated and anonymized whenever possible to protect your privacy while helping us improve our service.

Google Analytics 4 (GA4) and Google Ads Conversion Tracking:

We use Google Analytics 4 (GA4) to understand how visitors use our website and Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns.

What Google Analytics Collects:

Pages you visit and time spent on each page
Your approximate location (country, state, city)
Device type, browser, and operating system
How you arrived at our website (referral source)
Aggregated demographic information (age range, gender, interests)
Website interactions (button clicks, form submissions, scroll depth)

What Google Ads Conversion Tracking Collects:

Whether you completed a purchase after clicking a Google Ad
The value of your purchase (conversion value)
Your device type and approximate location
The time and date of the conversion

How Google Uses This Data:

Google Analytics helps us understand website traffic patterns and user behavior
Google Ads Conversion Tracking measures advertising effectiveness and ROI
Google may use this data for its own advertising and analytics purposes
Google stores cookies on your device to track your activity across websites

Your Privacy Options:

Opt out of Google Analytics: Install the Google Analytics Opt-out Browser Add-on
Opt out of Google Ads personalization: Visit Google Ads Settings
Clear your browser cookies regularly to remove tracking data
Use browser privacy modes (Incognito, Private Browsing) to limit tracking

IP Anonymization: We have enabled IP anonymization in Google Analytics, which means your full IP address is never stored or transmitted to Google's servers.

For more information about how Google uses data from sites that use their services, visit: Google's Privacy Policy

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Provision:

To generate your Massachusetts security deposit compliance letter
To calculate interest, deductions, and refund amounts
To create and deliver the final PDF document to you via email
To store your document for future reference and account history

Account Management:

To process your payment through our secure payment processor
To maintain your order history and transaction records
To verify your identity and prevent fraud
To provide customer support and respond to your inquiries

Communication:

To send you service-related emails (order confirmations, document delivery)
To respond to your support requests and questions
To notify you of important updates to our service or policies
To send occasional service announcements (you may opt out of non-essential emails)

Analytics and Service Improvement:

To monitor website performance and identify technical issues
To understand how users interact with our service
To improve our user interface, features, and overall experience
To analyze aggregated, anonymized data for trends and insights

3. Data Sharing and Disclosure

✓ We Do NOT Sell Your Personal Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Your sensitive landlord and tenant data is confidential and will never be sold or shared for commercial gain.

We share your information only with the following types of third-party service providers:

Payment Processors:

We use Stripe to process credit card payments securely. Stripe receives your payment information directly and is certified as a PCI Service Provider Level 1, the most stringent level of certification in the payments industry. We do not have access to your full payment card information.

Cloud Hosting and Storage Providers:

We use Vercel for web hosting and Vercel Blob Storage for secure document storage. These providers are contractually obligated to maintain the security and confidentiality of your data and may only use it to provide services to us.

Email Delivery Services:

We use SendGrid to deliver your generated documents and service-related emails. SendGrid receives your email address and the content of the emails we send to you.

Analytics Providers:

We may use analytics services to understand how our website is used. These services collect anonymized or aggregated usage data and do not have access to your personal landlord/tenant information or financial data.

Legal Disclosure Requirements:

We may disclose your information if required to do so by law or in response to:

Valid subpoenas, court orders, or other legal processes
Requests from government authorities or law enforcement agencies
Legal proceedings in which we are involved
Situations where disclosure is necessary to protect our rights, property, or safety, or that of our users or the public

4. Data Security and Retention

Security Measures

We take the security of your personal information seriously and implement industry-standard security measures to protect it from unauthorized access, disclosure, alteration, or destruction:

Encryption: All data transmission between your browser and our servers is encrypted using HTTPS/TLS (Transport Layer Security)
Secure Storage: Sensitive data at rest is encrypted using industry-standard encryption protocols
Access Controls: Strict access controls limit who can view or process your personal information
Regular Security Audits: We regularly review and update our security practices
Secure Infrastructure: We use enterprise-grade cloud hosting providers with robust security certifications

Note: While we implement strong security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information.

Data Retention Policy

Sensitive Document Data (Landlord/Tenant Information):

Document generation data (names, addresses, financial details) is temporarily stored in our secure Redis cache for 7 days to facilitate order processing and document delivery
Generated PDF documents are stored in secure cloud storage (Vercel Blob) and remain accessible through your account for 90 days for your records and reference
After 90 days, documents may be archived or deleted unless you request longer retention
You may request immediate deletion of your documents at any time by contacting us

Account and Transaction Data:

Account information (email, transaction history) is retained for as long as your account is active or as needed to provide services
Financial transaction records are retained for at least 7 years to comply with tax and accounting requirements
After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance)

Usage and Analytics Data:

Anonymized and aggregated analytics data may be retained indefinitely for service improvement
Technical logs (error logs, access logs) are typically retained for 90 days for troubleshooting and security purposes

5. Your Rights and Choices

You have the following rights regarding your personal information:

Right to Access:

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format.

Right to Correct:

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction or update of that information.

Right to Delete:

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations to retain certain records). To request deletion, please contact us using the information below.

Right to Object or Restrict Processing:

You may object to certain types of processing or request that we restrict how we use your information, subject to legal and contractual obligations.

Right to Data Portability:

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another service provider.

Right to Opt-Out of Marketing Communications:

You may opt out of receiving non-essential marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting us directly. Note that you cannot opt out of service-related emails (e.g., order confirmations, important account notifications).

How to Exercise Your Rights:

To exercise any of these rights, please contact us at privacy@depositcompliance.com with your request. We will respond to your request within 30 days and may require verification of your identity before processing your request.

6. Children's Privacy

Our service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a child under 18, please contact us immediately, and we will take steps to delete such information.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Effective Date" at the top of this policy
Notify you via email (if you have an account with us)
Post a prominent notice on our website

We encourage you to review this Privacy Policy periodically. Your continued use of our service after changes are posted constitutes your acceptance of the updated Privacy Policy.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email (Privacy Inquiries): privacy@depositcompliance.com

General Support: support@depositcompliance.com

Website: https://depositcompliance.com

We take your privacy seriously and will respond to all legitimate requests within 30 days.

Last Updated: December 10, 2025

← Return to Home Legal Disclaimer About Us

Home Legal Disclaimer About Us Privacy Policy Terms & Conditions