Privacy Policy

Last updated: March 2026

1. Information We Collect

When you use g²Rent or g²Lend (the "Services"), we may collect the following categories of information:

  • Account information — your name, email address, and phone number.
  • Property and financial data — property addresses, mortgage terms, rent amounts, loan balances, and related records you enter into the platform.
  • Payment information — payment method details are processed directly by Stripe. We do not store your credit card or bank account numbers on our servers.
  • Tax identification data — if you use g²Lend, you may enter your Social Security Number or Employer Identification Number when generating tax forms (e.g., Formulario 480.6A). This data is used exclusively to generate the form and is not stored on our servers.
  • Gmail data — if you connect your Gmail account, we set up email forwarding only. We do not read, store, or access your email content beyond parsing forwarded payment notification emails for amounts and dates.
  • Phone number — if you opt in to WhatsApp notifications, your phone number is shared with Twilio solely for the purpose of delivering payment reminders and account notifications. Your number is not used for marketing or shared with any other third party.
  • Usage data — standard analytics data such as pages visited, features used, and device information to improve our Services.

2. How We Use Your Information

We use the information we collect to:

  • Track and record payments between landlords and tenants, or lenders and borrowers.
  • Send notifications via email and WhatsApp (with your opt-in) about payment status, due dates, and account activity.
  • Generate tax forms (e.g., Formulario 480.6A) and annual interest statements.
  • Bill platform fees to landlords and lenders for payment servicing.
  • Improve and maintain the security and performance of our Services.

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy:

  • Stripe — payment processing and ACH collection via Stripe Connect.
  • Google — Gmail OAuth for email forwarding setup (optional).
  • SendGrid — inbound email receiving and parsing.
  • Resend — transactional email delivery (notifications, password resets).
  • Twilio — WhatsApp notifications (opt-in only).
  • Supabase — authentication and database hosting.
  • Vercel — application hosting and deployment.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes. Your data is only shared with the third-party service providers listed in Section 3, strictly for the purpose of operating the platform and delivering the Services. We will never monetize your data or provide it to data brokers.

5. Data Security

We take the security of your data seriously. All sensitive data, including OAuth tokens, is encrypted using AES-256-GCM encryption. Social Security Numbers are never stored — they are entered at form generation time and immediately discarded. All data in transit is protected via HTTPS. We use Supabase Row Level Security (RLS) to ensure users can only access their own data. Authentication tokens are stored securely and never exposed to the client.

6. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify affected users via the email address associated with their account within 72 hours of discovering the breach. We will also take immediate steps to contain and remediate the breach, and where required by law, notify relevant authorities.

7. Data Retention

Your data is retained for as long as your account is active. If you deactivate your account, your data will be retained for 90 days to allow for reactivation. After 90 days, deactivated accounts and their associated data become eligible for permanent deletion.

8. Your Rights

You have the right to:

  • Access your personal data — you can view all your information from your account dashboard.
  • Correct inaccurate data — you can update your information from Settings.
  • Delete your data — you can deactivate your account from Settings or contact us at support@gsquarelabs.com to request deletion.
  • Export your data — you can download your payment histories, property records, and financial statements from your account dashboard before deactivation.
  • Opt out of WhatsApp notifications at any time from your notification preferences.

9. California and International Users

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, the right to request deletion, and the right to opt out of the sale of your personal information. As stated in Section 4, we do not sell your personal information. If you are a resident of the European Union or European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR). To exercise any rights under applicable law, please contact us at support@gsquarelabs.com.

10. Cookies

We use session cookies strictly for authentication purposes. These cookies are necessary for the platform to function and keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party cookies for analytics or marketing purposes.

11. Children's Privacy

Our Services are not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide at least 30 days' notice via the email address associated with your account before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy. We encourage you to review this page periodically for the latest information.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@gsquarelabs.com
gSquare Labs LLC
Puerto Rico