Privacy Policy

1. Introduction

Lava Loop LLC, a Delaware limited liability company, operates lavaloop.app and its associated services (collectively, the “Platform”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Platform. By using Lava Loop, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following categories of information:

• Identity information: full name, email address, and phone number
• Property and lease information: property addresses, unit details, rent amounts, lease dates, and late fee terms
• Payment information: payment method type, transaction amounts, and payment history — we do not store full card or bank account numbers directly
• Maintenance information: maintenance request descriptions, status updates, and photos
• Communications: messages sent between landlords and tenants, and announcements posted on the Platform
• Device information: device type, operating system, and push notification tokens
• Usage data: pages visited, features used, and interaction timestamps

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Platform, including rent collection, maintenance tracking, messaging, and announcements
• Process payments and verify identities through Stripe Connect
• Send transactional notifications and platform communications
• Respond to support requests and resolve disputes
• Improve the Platform and develop new features
• Comply with legal obligations

4. Payment Processing

All payment processing on the Platform is handled by Stripe, Inc., a PCI-DSS compliant payment processor. When you make or receive a payment, you interact directly with Stripe's infrastructure. Lava Loop LLC never stores credit card numbers, bank account numbers, or routing numbers on our servers. Payment method details are tokenized and managed entirely by Stripe. You can review Stripe's privacy policy at stripe.com/privacy.

5. Data Storage

Your data is stored securely using Supabase, a database and authentication platform built on Amazon Web Services (AWS) infrastructure. Data is encrypted at rest and in transit. Access to your data is controlled through Row Level Security (RLS) policies that ensure each user can only access data they are authorized to view.

6. Sharing Your Information

We share your information only with the following third-party service providers, and only to the extent necessary to provide the Platform:

• Stripe: for payment processing and identity verification
• Supabase: for database storage, authentication, and file storage
• Resend: for transactional email delivery

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share your data with advertisers.

7. Landlord and Tenant Relationship

Landlords on the Platform can view payment status, maintenance requests, and messages for tenants in their properties. Tenants can view only their own data. Neither landlords nor tenants can view the financial account details of the other party. Lava Loop LLC acts as a neutral platform facilitating the landlord-tenant relationship and does not take sides in disputes.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Platform services. If you request account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes such as resolving disputes or complying with our legal obligations.

9. Your Rights

You have the following rights regarding your personal information:

• Access: you can request a copy of the personal information we hold about you
• Correction: you can update your information directly through your account settings
• Deletion: you can request deletion of your account and associated data by emailing support@lavaloop.app
• Portability: you can request an export of your data in a machine-readable format

To exercise any of these rights, please contact us at support@lavaloop.app.

10. Security

We implement industry-standard security measures to protect your information. All data is encrypted in transit using TLS and encrypted at rest in our database. Access controls are enforced through Row Level Security policies at the database layer, ensuring that users can only access data they are explicitly authorized to view. We regularly review our security practices and infrastructure.

11. Children's Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@lavaloop.app and we will promptly delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by sending an email to the address associated with your account at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of the updated policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: