Deedbox is a logbook for your home, run by Latham Technology LLC ("we", "us"). This policy explains what we collect when you use Deedbox, what we do with it, who else sees it and the choices you have. It goes with our terms of use.
The short version: what you put in Deedbox is yours. We use it to run Deedbox for you, we don't sell it, and we don't show ads.
What we collect
What you give us
- Your account: your name, email address, password (stored only as a hash), two-factor and passkey settings, time zone and preferences such as the weekly digest.
- Your household's records: the homes you add and their addresses, purchase details, loans, appraisals, property tax, maintenance tasks, projects, expenses, vendors, notes and the documents you upload, such as deeds, settlement statements and invoices.
- People you invite: the email address you send an invitation to, and their role in your household.
- Integrations: the usage readings a Home Assistant setup sends, and the tokens you create for it and for calendar feeds.
- Feedback: whatever you write when you send us feedback, with your name and email so we can reply.
What we collect as you use Deedbox
- Error reports. When something breaks, the report includes the error, the page's address, your browser, your name and email, and the ids of your account and household. Reports leave out IP addresses, cookies, the text you typed and the query part of addresses.
- Page views. We count visits with Plausible Analytics, which we host ourselves. It records the kind of page you opened (never the record on it), the referring site, browser, device type and country. It sets no cookies and doesn't keep your IP address.
- Server logs of requests, including IP addresses, which we keep for security and troubleshooting.
Payments
Stripe processes payments for the Plus plan. Your card details go to Stripe directly and never reach our servers. From Stripe we keep your household's customer and subscription ids, the plan and renewal date, and the card's brand and last four digits.
How we use it
- To run Deedbox: keep your records, work out cost basis, remind you of maintenance and tax dates, estimate your home's value and build the exports and reports you ask for.
- To send you email: account and security messages, invitations, notices that an export is ready and, unless you turn it off, the weekly digest.
- To bill households on Plus.
- To keep Deedbox secure, fix problems and decide what to improve.
- To meet legal obligations and enforce our terms.
We don't sell your personal information, share it for targeted advertising, or use your records to train AI models.
Who else sees it
- Your household. Members of a household see its records, within the role and homes an owner gives them.
- RentCast, for households on Plus: we send a home's address to get its public records, assessed value, property tax and a value estimate.
- Stripe, for payments, as described above.
- Sentry, which receives the error reports and feedback described above.
- Providers that run Deedbox for us: hosting, file storage and email delivery. They handle data only to provide their service to us.
- Integrations you connect. Anyone holding a token you create, such as your Home Assistant or a calendar app subscribed to your feed, can read what that token allows. You can revoke a token anytime under Settings → Integrations.
- When the law requires it, or to protect the rights, property or safety of our users, the public or us.
- A successor, if Deedbox is sold or merged, under the protections in this policy.
Cookies and storage in your browser
Deedbox uses a session cookie to keep you signed in, a security token that guards against forged requests, and a cookie and local storage entry that remember your light or dark appearance. The checkout and payment method pages load Stripe, which sets its own cookies to prevent fraud. We use no advertising or cross-site tracking cookies.
How long we keep it
We keep your account and household records until you delete them. Deleting your account under Settings → Profile deletes your account and every household that only you belong to, with its records, documents and integration tokens. A household you share stays with its other members. Exports you download are removed after they expire. Copies in backups and logs are removed as they cycle out. We may keep billing records for as long as tax and accounting rules require.
Your choices and rights
- See and take your data: Settings → Export builds a download of your household's records and documents.
- Correct it: edit records and your profile anytime.
- Delete it: delete records, homes or your whole account.
- Email: turn off the weekly digest under Settings → Profile. Account and security emails can't be turned off while you have an account.
If you live in California or another place that gives you privacy rights, you can ask us to tell you what personal information we hold about you, to correct it or to delete it. Because we don't sell or share personal information, there is nothing to opt out of. We won't treat you differently for using any of these rights. Email [email protected] from the address on your account. We may need to confirm it's you before we act.
Security
Connections to Deedbox are encrypted, passwords are stored as hashes, and documents sit in private storage and open only through links that expire after a few minutes. You can add two-factor authentication or a passkey under Settings → Security. No system is perfectly secure, so if we learn of a breach that affects your information, we'll tell you as the law requires.
Children
Deedbox is for adults. We don't knowingly collect information from children under 13. If you believe a child has given us information, email us and we'll delete it.
Where your data is kept
Deedbox is run from the United States, and your information is stored and processed there.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change matters to how we use your information, we'll also tell you by email or in Deedbox before it takes effect.
Contact
Questions about privacy go to [email protected].