Privacy Policy

1. Who We Are

AffordableHOA provides software to help homeowners associations manage their communities. This Privacy Policy explains how we collect, use, and protect personal information when you use our Service at affordablehoa.com.

2. Information We Collect

Account information: Name, email address, and password when you register. Board administrators also provide community name and contact information.

Resident information: HOA board members may add resident names, unit numbers, email addresses, and contact details to manage their community. Residents who accept invitations create their own accounts.

Payment information: We do not store credit card numbers. Payment processing is handled by Stripe, Inc. We receive and store payment confirmation records, transaction IDs, and the last four digits of cards saved for auto-pay.

Usage data: We collect standard server logs including IP addresses, browser type, pages visited, and timestamps to operate and improve the Service.

Community content: Announcements, violation notices, documents, and notes that board members and residents create within the platform.

3. How We Use Your Information

We use collected information to: provide and operate the Service; process payments on behalf of HOAs; send transactional emails (account verification, password reset, dues notices, violation notifications); respond to support requests; prevent fraud and ensure security; and improve the Service.

We do not sell your personal information to third parties. We do not use your information for advertising.

4. Third-Party Services

To provide the Service we share data with the following third parties:

Stripe, Inc. - Payment processing and HOA payout management (Stripe Connect). Stripe processes all payment card data under their own privacy policy and is PCI-DSS certified. By making payments through our platform, you agree to Stripe's terms and privacy policy.

Brevo (formerly Sendinblue) - Transactional email delivery. Email addresses and message content are transmitted to Brevo to deliver emails. See their privacy policy.

hCaptcha - Bot protection on signup and password reset forms. IP addresses and browser data are shared with hCaptcha for verification. See their privacy policy.

5. Data Retention

We retain your data for the duration of your account. If your subscription ends, we retain your data for up to 90 days before deletion, in case you wish to reactivate. You may request earlier deletion at any time by contacting our contact form. Financial transaction records may be retained longer as required by law.

6. Your Rights

Depending on your location, you may have rights to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict our processing of your data; and receive a copy of your data in a portable format.

To exercise any of these rights, use our contact form. We will respond within 30 days.

7. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, CSRF protection, and role-based access controls to protect your information. However, no system is perfectly secure and we cannot guarantee absolute security.

8. Cookies

We use a single session cookie to keep you logged in. This cookie is essential for the Service to function and does not track you across other websites. We do not use advertising cookies or third-party tracking cookies.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at our contact form.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application at least 14 days before changes take effect.

12. Contact Us

Questions about this Privacy Policy? Use our contact form.