Q — Privacy Policy (PILOT DRAFT — pending attorney review)

Effective: [DATE] · Operator: [LEGAL ENTITY NAME] · Contact: privacy@molicia.com

What we collect

• Account: email, display name, role, password (stored hashed by our auth provider), two-factor settings.
• What you create: assistants (search rules), saved properties, client records you enter (name and optional email/phone/notes), rental listings, portfolio data (purchase numbers, monthly income and expenses, leases, value estimates), support tickets and survey answers.
• Rental applications (if you apply): employment, monthly income, rental history, number of occupants, pets, vehicles, and move-in date, plus your consent record. We never collect Social Security numbers, dates of birth, ID numbers, or information about race, color, religion, sex, national origin, familial status or disability.
• Property public records: for properties (not for you as a user), Q shows public-record facts: county parcel data published by the State of Utah (UGRC) such as lot size, year built, assessed value and whether the county lists the home as a primary residence; flood zone and Opportunity Zone status; county tax-sale notices and city code/permit records; and, from licensed providers, owner names and mailing addresses (paid plans only), tax assessments and recorded sales. Licensed-provider owner data is never exported or resold. Census tract figures are shown for context only and are never used to score or rank properties or people.
• Owner opt-out and corrections: anyone can use Q's public opt-out page to stop their property from being shown as a seller lead or to request a correction. We keep the address, the request, an email to reply to, and a one-way hash of the network address (for abuse limits, not identification).
• Billing (paid plans only): your plan, subscription status, payment dates and amounts, invoice numbers and the Stripe customer id. We do not receive or store card numbers.
• Notifications: what Q has alerted you about and whether you read it, and your email preferences.
• Agent contact requests and the public seller page (if you ask to be contacted): your name, contact details, ZIP or address, and the consent text you agreed to, shared only with the one agent your request is routed to. You do not need an account. Requests are rate-limited using a one-way hash of your network address.
• Usage events: a small, fixed set of in-app events (for example "search" with the search mode and result count). We do not record addresses or text you type in these events.
• Technical: sign-in and security logs kept by our hosting provider.

How we use it

To run Q (search, matching, alerts, calculations, listings, applications, portfolio tracking), to keep it secure (MFA, audit logs), to support you, and to measure whether the pilot is useful (aggregate pilot metrics). We do not sell personal information and do not use it for third-party advertising.

Anonymized benchmarks (opt-in only). If you turn on "Share my numbers anonymously" for a property, its actual monthly rent, insurance, taxes, maintenance and vacancy are combined with other owners' numbers to show ZIP-level medians. Benchmarks are shown only when at least 5 properties from at least 3 different owners are included, and never include your name, address, or any individual property's figures. It is off by default and you can turn it off at any time.

Rental screening. Q never charges renters an application or screening fee. If a landlord accepts it, you can tell them you already have a screening report from the last 30 days instead of buying another.

Who sees it

• Other users: only what a feature is meant to share — a landlord sees applications sent to their listing (with your name and email); a renter never sees a landlord's account identity. Agents' client records are visible only to the agent and their organization's owners/admins.
• Service providers: hosting and database (Supabase), app delivery (Expo), listing and public-record data (RentCast — we send ZIP codes and property addresses, never your personal data), map tiles (OpenStreetMap — your device loads map images directly), email delivery (Resend: your email address and the message), payments (Stripe: your email address and account id; Stripe collects card details directly on its own pages — Q never receives your card number), website hosting (Cloudflare), and business email (Google Workspace). They process data on our behalf.
• Legal: when required by law or to protect rights and safety.

Retention

Application details are erased 3 years after a decision or withdrawal (decision record kept); unfinished application drafts after 90 days. Rejected raw data records after 30 days. Account data is kept while your account is active and deleted on request, except where we must keep records by law. Backups roll off on our backup schedule.

Your choices and rights

You can view and edit most of your data in the app, withdraw applications, and request access, correction, export, or deletion by contacting privacy@molicia.com. Depending on your state, you may have additional rights; we will honor them as required. [ATTORNEY: state-law specifics, e.g. Utah Consumer Privacy Act applicability thresholds.]

Security

Two-factor authentication, row-level access controls on every table, an append-only tamper-evident audit log, encrypted transport, and no secrets in the app. No system is perfectly secure; tell us at security@molicia.com if you find a problem.

Children

Q is not for anyone under 18.

Changes

If we make material changes, we will ask you to review and accept the new version in the app.