Version 2026-09-17 · effective 2026-09-17

Privacy Policy

Effective 17 September 2026 — DRAFT. Not yet reviewed by Florida counsel.

1. Editors (board members and managers)

1.1 We hold: email address, name if given, password hash or Google account identifier, when you signed up and last signed in, each device session, which version of the agreement you accepted and when and from which IP address, and an audit log of what you changed on each association's site.

1.2 Why: to run the account, to show the association who posted what, and to keep the evidence of the agreement.

1.3 For how long: while the account exists. Audit entries keep the actor's email after the account is deleted, because they are the association's record.

2. Unit owners

2.1 The association gives us: unit label, owner name and email address, so we can invite the owner to the protected area. We hold sign-in sessions and a log of which documents each owner opened.

2.2 The association is the controller of this information and we process it on its behalf under the Data Processing Addendum. Owners who want their information corrected or removed contact their association; we act on the association's instruction.

2.3 We do not sell, share or use owner information for anything but running the portal.

3. The records themselves

Documents uploaded to an association's site are held in encrypted storage, served through short-lived signed links, and are readable by the association's editors and owners and by our operators when supporting the association or when required by law.

4. Who we use

Railway (hosting), Cloudflare (storage and domains), Stripe (billing; we never see card numbers), Google Workspace (email). Each is bound by its own terms and holds only what its role needs.

5. Security

Passwords are hashed with bcrypt. Sessions expire. Every document download is logged. Report a concern to security@dtrworks.net.

6. Children

The Service is for adults acting for associations. We do not knowingly hold information about anyone under 18.

7. Changes

Material changes require re-acceptance by editors.

8. Contact

privacy@dtrworks.net