Privacy Policy

Last updated: October 2026

1. Information We Collect

When you use Rent. or Lend. (the "Services"), we may collect the following categories of information:

  • Account information — your name, email address, and phone number.
  • Property and financial data — property addresses, mortgage terms, rent amounts, loan balances, and related records you enter into the platform.
  • Payment information — payment method details are processed directly by Stripe. We do not store your credit card or bank account numbers on our servers.
  • Tax identification data — if you use Lend, you may enter your Social Security Number or Employer Identification Number when generating tax forms (e.g., Formulario 480.6A). This data is used exclusively to generate the form and is not stored on our servers.
  • Email data — if you set up email forwarding, we receive only forwarded payment notification emails. We do not read, store, or access your email content beyond parsing forwarded payment notifications for amounts and dates.
  • Phone number — if you opt in to WhatsApp notifications, your phone number is shared with Meta through the WhatsApp Business Platform solely for the purpose of delivering transactional messages (payment reminders, receipts, support responses, account alerts, and security codes). Your number is never used for marketing and is not shared with any other third party.
  • Support messages — if you write to our WhatsApp support line (+1 787-674-8586), we keep the messages you send us, our replies, and your WhatsApp profile name, so that our team can follow the conversation and help you. This can include earlier messages in the same chat. These messages are used only to respond to you and are never used for marketing.
  • Usage data — standard analytics data such as pages visited, features used, and device information to improve our Services.

2. How We Use Your Information

We use the information we collect to:

  • Track and record payments between landlords and tenants, lenders and borrowers, and distribute payment shares to co-owners and co-lenders.
  • Send notifications via email and WhatsApp (with your opt-in) about payment status, due dates, and account activity.
  • Respond to messages you send to our WhatsApp support line, including summaries and suggested replies that our AI assistant prepares for our team to review.
  • Generate tax forms (e.g., Formulario 480.6A) and annual interest statements.
  • Bill platform fees to landlords and lenders for payment servicing.
  • Improve and maintain the security and performance of our Services.

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy:

  • Stripe — payment processing and ACH collection via Stripe Connect.
  • Google — Google Sign-In for account authentication (optional).
  • SendGrid — inbound email receiving and parsing.
  • Resend — transactional email delivery (notifications, password resets).
  • Meta (WhatsApp Business Platform) — WhatsApp notifications (opt-in only, transactional messages only) and our WhatsApp support line.
  • Supabase — authentication and database hosting.
  • Vercel — application hosting and deployment.
  • Anthropic — AI processing for platform features (such as listing and pricing tools, lease document analysis, and support) and for drafting replies to business inquiries received by email.
  • xAI and Cursor — our support assistant, which runs on xAI's Grok through Cursor, reads messages received on our WhatsApp support line, summarizes them, and drafts replies for our team to review before anything is sent.
  • Contabo — cloud servers in the United States that run our inbound email processing and AI features.
  • Meta (Facebook) — advertising measurement via the Meta Pixel on our public marketing pages only (see Section 10).

4. Data Sharing

We do not sell or rent your personal information to anyone, and we do not share the account, financial, or contact information you provide with third parties for their own marketing. The only advertising-related data sharing is the Meta Pixel on our public marketing pages (see Section 10), which transmits limited browsing activity on those pre-login pages to Meta to measure our advertising; it never runs on authenticated pages and never receives your financial records. Otherwise, your data is only shared with the third-party service providers listed in Section 3, strictly for the purpose of operating the platform and delivering the Services. We will never monetize your account data or provide it to data brokers. When you use co-owner or co-lender distribution features, limited information (property address, distribution share, payout amounts, and settlement status) is visible to co-owners or co-lenders invited by the property owner or lender. Co-owner and co-lender bank account details are processed by Stripe and are not visible to other users on the platform.

Requests from government authorities: We disclose customer data to government or law enforcement authorities only when a request is legally valid and issued through proper legal process, such as a subpoena, court order, or warrant, and only after reviewing it, with legal counsel where needed. We challenge or decline requests that are unlawful or overly broad, disclose only the minimum data the request legally requires, keep a record of every request and our response, and notify the affected customer before disclosing unless the law prohibits it.

5. Data Security

We take the security of your data seriously. All sensitive data, including OAuth tokens, is encrypted using AES-256-GCM encryption. Social Security Numbers are never stored — they are entered at form generation time and immediately discarded. All data in transit is protected via HTTPS. We use Supabase Row Level Security (RLS) to ensure users can only access their own data. Authentication tokens are stored securely and never exposed to the client.

6. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify affected users via the email address associated with their account within 72 hours of discovering the breach. We will also take immediate steps to contain and remediate the breach, and where required by law, notify relevant authorities.

7. Data Retention

Your data is retained for as long as your account is active. If you deactivate your account, your data will be retained for 90 days to allow for reactivation. After 90 days, deactivated accounts and their associated data become eligible for permanent deletion. Messages to our WhatsApp support line are kept for as long as needed to help you; you can ask us to delete them at any time by writing to <a href="mailto:support@gsquarelabs.com" style="color:#D4A843" class="hover:underline">support@gsquarelabs.com</a>.

8. Your Rights

You have the right to:

  • Access your personal data — you can view all your information from your account dashboard.
  • Correct inaccurate data — you can update your information from Settings.
  • Delete your data — you can deactivate your account from Settings or contact us at support@gsquarelabs.com to request deletion.
  • Export your data — you can download your payment histories, property records, and financial statements from your account dashboard before deactivation.
  • Opt out of WhatsApp notifications at any time from Account Settings → Notifications.

9. California and International Users

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, the right to request deletion, and the right to opt out of the sale of your personal information. As stated in Section 4, we do not sell your personal information. If you are a resident of the European Union or European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR). To exercise any rights under applicable law, please contact us at support@gsquarelabs.com.

10. Cookies

We use session cookies strictly for authentication — these are necessary to keep you logged in. On our public marketing pages (such as our landing pages and signup) we also use the Meta Pixel, which sets cookies and records basic activity such as page views and whether a visitor completes signup, so we can measure how our advertising performs. The Meta Pixel runs only on these public pages and is never loaded on authenticated areas of the app where your financial and account data appear, so that information is never shared with Meta. We do not use advertising cookies anywhere inside the application itself. You can limit this tracking through your browser cookie settings and your Meta ad preferences.

11. Children's Privacy

Our Services are not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide at least 30 days' notice via the email address associated with your account before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy. We encourage you to review this page periodically for the latest information.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@gsquarelabs.com
gSquare Labs LLC
Puerto Rico