Her Own Sky LLC ("Company," "we," "us," or "our") operates the Covelight application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.
1. Information We Collect
1.1 Information You Provide Directly
- Account Information: Name, email address, phone number, password, and role (landlord, tenant, host, or guest).
- Financial Information: Bank account details provided through Plaid for bank account linking. We do not directly store your bank login credentials — Plaid handles this securely.
- Property Information: Property addresses, unit details, rent amounts, lease dates, and related documents uploaded by landlords.
- Payment Information: Transaction records, payment schedules, split deposit configurations, and payout history.
- Communications: Messages sent between landlords and tenants through our in-app messaging system.
- Maintenance Requests: Descriptions, photographs, and videos submitted with maintenance requests.
- Identity Verification: Information required by our payment processors (Dwolla, Stripe) for regulatory compliance, including date of birth, Social Security Number (last four digits or full, as required), and government-issued identification.
1.2 Information Collected Automatically
- Device Information: Device type, operating system, unique device identifiers, and mobile network information.
- Usage Data: Pages visited, features used, time spent in the app, crash reports, and performance data.
- Log Data: IP address, browser type, access times, and referring URLs.
- Location Data: General location inferred from IP address. We do not collect precise GPS location.
1.3 Information From Third Parties
- Plaid: Bank account details, account balances, and account holder information for the purpose of linking bank accounts and verifying identity.
- Dwolla: ACH transfer statuses and funding source verification results.
- Stripe: Subscription payment statuses, billing information, and invoice details for landlord subscriptions.
- Credit Bureaus (if opted in): Confirmation of credit report submissions to Experian, Equifax, and TransUnion.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account.
- Process rent payments, split deposits, and landlord payouts via ACH.
- Link your bank account securely through Plaid and Dwolla.
- Process landlord subscription payments through Stripe.
- Report on-time rent payments to credit bureaus (only if you opt in to credit reporting).
- Facilitate communication between landlords and tenants.
- Process and track maintenance requests.
- Store and serve lease documents and property records.
- Send transactional notifications (payment confirmations, reminders, status updates).
- Generate payment reports and summaries.
- Monitor and improve the security, performance, and reliability of our Service.
- Comply with legal obligations and regulatory requirements.
- Prevent fraud, unauthorized transactions, and abuse.
3. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
- Payment Processors: Plaid (bank linking), Dwolla (ACH transfers), and Stripe (subscription billing) receive information necessary to process financial transactions.
- Credit Bureaus: If you opt in to credit reporting, we share on-time payment records with Experian, Equifax, and TransUnion. Late payments are never reported.
- Between Users: Landlords can see tenant names, contact information, payment status (on track, paid, or shortfall), and maintenance requests for their properties. Landlords never see how tenants split their rent — only that the full amount was received.
- Service Providers: Cloud hosting (Railway), file storage (AWS S3 or Cloudflare R2), and analytics providers who assist in operating the Service, bound by confidentiality agreements.
- Legal Requirements: When required by law, regulation, legal process, or governmental request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. You will be notified of any such change.
- With Your Consent: When you explicitly authorize us to share information with a third party.
4. Tenant Privacy Protections
We believe your financial rhythm is private. The following protections are built into the Service by design:
- Landlords never see how tenants split their rent. They only see whether the full payment was received on time.
- Split deposit amounts, schedules, and bank account details are never visible to landlords.
- Credit reporting is strictly opt-in and positive-only. Late payments are never reported to credit bureaus.
- Tenants can view and export their own payment history at any time.
5. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure password hashing using bcrypt.
- Token-based authentication with automatic expiration and refresh.
- Rate limiting to prevent brute-force attacks.
- Separation of financial credentials — bank login credentials are handled exclusively by Plaid and are never stored on our servers.
- Regular security reviews of our codebase and infrastructure.
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
- Account Data: Retained for as long as your account is active, plus 30 days after deletion to allow for recovery.
- Financial Records: Transaction records, payment history, and payout records are retained for a minimum of 7 years as required by federal tax and financial regulations.
- Messages: In-app messages are retained for the duration of the tenancy plus 12 months.
- Maintenance Records: Retained for the duration of the tenancy plus 24 months.
- Lease Documents: Retained for the duration of the lease plus 36 months, or until the landlord deletes the property.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Request your data in a portable, machine-readable format.
- Opt-Out of Credit Reporting: You may opt out of credit reporting at any time from within the app.
- Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, contact us at privacy@herownsky.com.
8. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.
9. Third-Party Links and Services
The Service may contain links to third-party websites or integrate with third-party services (Plaid, Dwolla, Stripe). This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing them with your information.
10. State-Specific Disclosures
California Residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising your rights. To submit a request, contact privacy@herownsky.com.
Minnesota Residents: Under Minnesota law, you have additional rights regarding access to and correction of your personal information. Contact us to exercise these rights.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, for material changes, notify you via email or in-app notification. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Her Own Sky LLC
2688 Rice St, Unit #2108
Little Canada, MN 55113
privacy@herownsky.com