Privacy Policy

When you sign up, we may collect:

• Your name
• Email address
• Account login details

Pretty standard. Nothing wild.

When you ask a question or generate a document, we process what you type — which may include details about your property and your tenants (names, addresses, lease dates, and the situation you describe). We use it to produce your answer or document and to keep your saved conversations and documents in your account.

AI processing: to generate answers and drafts, your inputs are sent to third-party AI providers (for the language model and for search/embeddings), which process them to return a result and are contractually restricted in how they may use your data. Please don't enter anything you wouldn't want processed this way — and remember Dweller IQ is informational only, not legal advice.

Payments are handled by Stripe. That means:

• We do not store your full credit card details
• Stripe handles all the sensitive payment stuff
• We may receive limited info like:
  • Payment status
  • Last 4 digits of your card
  • Transaction history

If you want to know how they handle your data, check their privacy policy.

We automatically collect some technical info, like:

• IP address
• Browser type
• Device info
• Pages you visit and how you interact with the Platform

This helps us fix bugs, improve features, and understand what people actually use (and what they ignore).

Trusted tools that help us run the Platform, like:

• Stripe (payments)
• Hosting providers
• Analytics tools
• AI providers (for the language model, search & embeddings)

They only get what they need to do their job.

We use Cloudflare Turnstile on our contact and signup forms to stop spam and automated abuse without forcing you to solve a CAPTCHA. Turnstile runs invisibly in the background and makes a small number of signals available to Cloudflare to decide whether you're a human or a bot.

By using our forms, you agree to Cloudflare's handling of this data as described in the Cloudflare Turnstile Privacy Addendum. (Required disclosure for sites running Turnstile in invisible mode.)

If the law says we have to share data, we will. Not because we want to — but because ignoring legal requests is a bad business strategy.

If Dweller IQ is ever sold, merged, or acquired, your data may be transferred as part of that deal. No shady backroom deals — just standard business stuff.

If you live in California, the California Consumer Privacy Act (and its update, the CPRA) gives you additional rights:

• Right to know what personal information we collect, use, and (don't) share
• Right to delete personal information we hold about you
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing of personal information
• Right to limit use of sensitive personal information
• Right to non-discrimination — we won't deny you service, charge you more, or downgrade your experience for exercising any of these rights

We do not sell or share your personal information. Not to data brokers, not to advertisers, not to anyone — for money or for any other consideration. We do not run targeted advertising, retargeting, or cross-context behavioral ads. There is therefore no "Do Not Sell or Share" link to click because there is nothing to opt out of.

If California's definition of "sale" or "sharing" ever changes in a way that means we'd start qualifying, we'll update this policy first and add the required opt-out controls before any change takes effect.

To exercise any California-specific right, use the contact form below and mention "California rights request" so we route it correctly. We may verify your identity (typically by confirming you control the account email).

If you're in the EU, EEA, Switzerland, or UK, you have the rights listed above plus:

• Right to restrict processing of your data
• Right to withdraw consent at any time (without affecting prior processing)
• Right to lodge a complaint with your local supervisory authority

Lawful basis: we process your data based on (a) your consent (for analytics cookies and marketing communications), (b) contract (to provide the service you subscribed to), and (c) legitimate interest (for security, fraud prevention, and product improvement) — whichever applies to the specific data point.

We are not currently established in the EU and do not have an Article 27 EU Representative because our processing of EU resident data is incidental rather than primary. If that changes, we'll appoint one and update this policy.