Legal

Privacy Policy

Effective October 15, 2026

Information we collect

Information you give us

• Waitlist: name, email, mobile number (optional), preferred area, bedrooms, budget, move-in timing, household size and whether you have pets.
• Applications: the information on your rental application, and — only with your written consent — records we review under our screening criteria.
• Residents: lease details, maintenance requests, messages with us, and payment records.
• Payments: card and bank details are entered directly with our payment providers (Stripe and Plaid). We receive only a token, the last four digits and the account type — never your full card or account number.

Information collected automatically

• Usage events: which listings are viewed and searched, used to understand demand and keep pricing the same for everyone.
• Cookies: see Cookies below.
• Server logs: IP address, browser type and pages requested, kept for security and troubleshooting.

How we use it

• To match you with homes and send the notifications you asked for
• To process applications, leases, rent payments and maintenance requests
• To communicate with you about your application or tenancy
• To understand demand for our homes (in aggregate) and improve the site
• To keep the site secure, prevent fraud, and meet legal obligations

We never use protected characteristics to decide who sees a home, what it costs, or how an application is evaluated. See our Fair Housing commitment.

Who we share it with

We share information only with service providers that help us run the business, under contracts that limit their use of it:

• DigitalOcean — hosting, database and file storage
• SendGrid (Twilio) — email delivery
• Twilio — text-message delivery
• Stripe — card payments
• Plaid — bank account linking for ACH payments

We may also disclose information when required by law, to protect rights and safety, or as part of a sale of the business (with this policy continuing to apply). No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party.

Cookies

• bpm_anon — a random visitor ID used to count listing views once per visitor and keep A/B-tested listing descriptions consistent for you. It contains no personal information.
• bpm_resident and bpm_operator — sign-in session cookies for the resident portal and staff tools, set only when you sign in.

We don’t use advertising or cross-site tracking cookies. You can delete cookies in your browser at any time.

Your choices

• Email: every listing email includes an unsubscribe link that works immediately.
• Text messages: reply STOP to any message to opt out, or HELP for help. See our SMS terms.
• Access, correction or deletion: contact us and we’ll respond within 45 days. We may keep records we’re legally required to retain (such as lease and payment records).

How long we keep it

Waitlist information is kept while you’re on the waitlist and deleted on request. Application, lease and payment records are kept as long as needed for the tenancy and as required by law (generally up to seven years after a tenancy ends).

Security

We use encryption in transit (HTTPS), encrypted connections to our database, encryption at rest for stored credentials, and access controls limited to people who need the information. If a breach affecting your personal information occurs, we’ll notify you as required by Iowa law (Iowa Code ch. 715C).

Children

This site isn’t directed to children under 13, and we don’t knowingly collect their information.

Changes

We’ll post any changes here with a new effective date. Material changes will be highlighted on the site.

Contact us