1. Introduction
Beaverstone Inc (“we,” “our,” or “us”) is a California-licensed property management company committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our rental application platform and related services. This policy is provided in accordance with the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act (CCPA/CPRA).
Beaverstone Inc operates under California Department of Real Estate (DRE) License No. [LICENSE NUMBER].
2. Information We Collect
We collect information you provide directly to us, including:
- Personal Identifiers: Name, email address, phone number, date of birth, Social Security Number (for credit and background checks)
- Residential History: Current and previous addresses, landlord contact information, rental payment history
- Employment & Financial Information: Employer name, income, employment history, bank account information for verification
- Identity Documents: Driver’s license, Social Security card, pay stubs, government-issued ID
- Vehicle Information: If applicable, vehicle details for parking purposes
- Pet Information: If applicable, pet type, breed, and weight
- References: Personal and professional references
- Payment Information: Credit/debit card details processed through our payment provider for application fees and rent payments
- Device & Usage Data: IP address, browser type, pages visited, and access times collected automatically when you use our platform
3. How We Use Your Information
We use the information we collect to:
- Process and evaluate your rental application
- Conduct background and credit checks with your authorization
- Verify your identity, income, and rental history
- Communicate with you about your application status via email and SMS
- Process payments for application fees and rent
- Prepare lease agreements and related documents
- Manage your tenancy if approved
- Send security alerts and two-factor authentication codes
- Comply with legal obligations, including California DRE regulations
- Improve our services and user experience
4. Third-Party Service Providers
We use the following third-party service providers to operate our platform. These providers only receive the minimum information necessary to perform their services:
- Stripe: Payment processing for application fees and rent payments. Stripe processes your payment card information directly and is PCI DSS Level 1 certified. We do not store your full card number on our servers.
- Telnyx: SMS/text messaging for verification codes, application updates, and security alerts. Your phone number is shared with Telnyx solely for message delivery.
- SendGrid: Email delivery for application notifications, account alerts, and communications. Your email address is shared with SendGrid for message delivery.
- DigitalOcean Spaces: Secure cloud storage for uploaded documents (ID, pay stubs, etc.). Documents are stored with encryption at rest.
- Credit Reporting Agencies: TransUnion, Experian, and/or Equifax for credit checks conducted with your written authorization.
- Background Check Services: Third-party screening providers for criminal history and eviction record checks.
5. Information Sharing
We may share your information with:
- Credit Reporting Agencies: To conduct credit checks as part of the application process, with your prior written consent
- Background Check Services: To verify criminal history and eviction records
- Previous Landlords and Employers: To verify your rental and employment history
- Property Owners: To facilitate the rental decision (limited to application summary information)
- Legal Authorities: When required by law, court order, or to protect our rights
- Service Providers: As described in Section 4, solely to perform services on our behalf
We do not sell your personal information to third parties. We do not share your information for cross-context behavioral advertising.
6. Data Security
We implement the following technical and organizational measures to protect your personal information:
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL (HTTPS)
- Encryption at Rest: Sensitive documents and data are encrypted in storage
- Two-Factor Authentication (2FA): Available for account security via SMS verification
- Password Security: Passwords are hashed using bcrypt and never stored in plain text
- Access Controls: Role-based access ensures staff only see data relevant to their function
- Audit Logging: All access to sensitive data is logged and monitored
- Secure Document Upload: Documents are uploaded directly to encrypted cloud storage
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information according to the following schedule:
- Denied/Withdrawn Applications: Records retained for 2 years, then securely deleted
- Approved Tenants: Records retained for the duration of tenancy plus 7 years, as required by California law and DRE regulations
- Financial Records: Payment and transaction records retained for 7 years per IRS requirements
- Account Data: Basic account information retained until you request deletion or the account is closed
- SMS/Communication Logs: Retained for 2 years for compliance purposes
You may request earlier deletion of your data, subject to our legal retention obligations. See Section 8 for details.
8. Your Rights Under California Law (CCPA/CPRA)
As a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions (e.g., legal retention requirements, ongoing tenancy).
- Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale: We do not sell your personal information. If this changes, we will provide a “Do Not Sell My Personal Information” link.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
- Right to Limit Use of Sensitive Personal Information: You may limit our use of sensitive information (SSN, financial data) to purposes necessary for providing services.
To exercise any of these rights, please contact us at privacy@beaverstoneinc.com. We will verify your identity before processing your request and respond within 45 days. For more information, visit our CCPA Rights page.
9. SMS/Text Messages
If you provide your phone number, we may send you SMS messages for verification purposes and important updates about your application or tenancy. You can opt out of non-essential messages at any time by replying STOP. Message and data rates may apply. For full details, see our SMS Terms.
10. Cookies and Tracking Technologies
Our platform uses cookies, localStorage, and similar technologies to maintain your session, remember your preferences, and improve your experience. We use session tokens stored in localStorage for authentication. Third-party services (such as Stripe) may set their own cookies when processing payments. For detailed information about our use of cookies and how to manage them, please see our Cookie Policy.
11. Do Not Track Signals
Our platform does not currently respond to “Do Not Track” (DNT) browser signals. However, we do not engage in cross-site tracking of our users. As required by CalOPPA, we disclose this practice here.
12. Children’s Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. If we make significant changes that affect how we handle your personal information, we will provide notice via email or a prominent notice on our platform.
14. Contact Us
If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at: