Privacy policy

Your account. Your email address, the password you set (stored only as a hash by our sign-in provider), and, if you turn it on, an authenticator-app factor. Your name and role on each property, as the owner or manager who invited you entered them.

Property operations data. What the property team enters or uploads about running the property: the daily reports from the property-management system, the rent roll (unit numbers, lease terms and balances, resident reference codes rather than names where the product can), work orders, make-ready cards, tasks and sign-offs, notes a manager records on a balance, walk checklists and their answers, and the owner's financial inputs (the loan, the budget, the reserves).

Photos and voice clips. Photos the team takes during walks and work orders. The product reads only the time taken and the camera model from a photo's metadata, never its location; a large photo is resized before it is stored, which removes the metadata, and a photo already small enough is stored as the camera produced it. A voice clip is taken only when you tap the dictation control; its words are written down and the clip itself is discarded once transcribed.

Your device, for notifications. When the app asks and you allow notifications, a push token that identifies your device to Apple's or Google's notification service. Nothing else about the device is collected.

The camera, the microphone and the photo library are used only when you tap a control that needs them, for that walk, that work order or that note. The app never records in the background.

Everything is stored in a hosted Postgres database and private file storage run by Supabase, in the project's region, over encrypted connections. Sign-in is handled by Supabase Auth. The web app runs on Vercel. Each property's data is separated from every other property's by database rules, not only by the screens.

The people who hold a role on that property, and only what their role is for: the owner and the asset manager see everything about their property, including its money; the regional manager and the property manager see the resident ledger and the team's work; leasing agents and the maintenance team see the units, the work and the walks, never the owner's money or a resident's balance; an investor seat sees the figures the owner shares. These rules are enforced in the database on every read and write.

Multi-Family Maximizer's operators can access the database to run and support the service. Nobody outside the service sees your data unless the law requires it or you ask us to share it.

Two providers are used, each for a specific job, and only when that job runs:

Anthropic (Claude) receives text — the property's figures and notes — to write the daily brief, the weekly investor update draft and, for a report the product cannot read itself, the report's text to extract its numbers. When a property's owner has switched the photo reviewer on, it also receives the photos from a sent walk, one checklist item at a time, to suggest an answer a manager then accepts or rejects.

OpenAI (Whisper) receives a voice clip to turn it into text when you dictate a note.

Both are used through their business APIs under their API terms, which state that content sent this way is not used to train their models. Each provider may keep what it receives for a short period for abuse monitoring under those terms. Nothing is sent to either provider unless a person starts the action that needs it, and the owner can see each month's usage in the product.

Property operations data, walks and photos are kept for as long as the property is on the service, because they are the property's record: a walk that was sent is not altered or removed by the team afterwards, and a photo that is replaced is marked as such rather than erased. Voice clips are not kept. A push token is removed when you sign out of the device or turn notifications off. Sign-in and access changes are logged. When a property leaves the service, its data is deleted on the owner's request, after an export if they want one.

To delete your account, or to ask what the service holds about you, write to privacy@multifamilymaximizer.com from the email address on the account. Your login and its sessions are removed; the walks, photos and sign-offs you made for a property stay with that property's record under the property owner's control, attributed to your role rather than to you where the product can.

No advertising. No sale of data, ever. No tracking or analytics SDK in the app or on the site, and no cross-app or cross-site tracking. No use of the camera, microphone, photos or location except on your own action. The product keeps a technical error log with personal details removed, so that failures can be fixed.

When this page changes, the date at the top changes with it, and a change that affects what is collected or who sees it is told to the owners of every property on the service before it takes effect.