Privacy Policy
Last updated: August 2026
1. Information We Collect
When you use TenantShield, we collect:
- Form data you provide: Your name, landlord name, property address, and issue description, and—when using the deposit product—move-out dates, deposit amounts, mailing addresses, deduction disputes, and evidence status. This information is used to generate your selected documents.
- Payment information: Processed entirely by Stripe. We do not store card numbers or payment details.
- Optional checkout-recovery email: Collected only when you request the one-time recovery link. It is used to prefill Stripe and send that link, not to add you to a marketing list.
- IP address / approximate location: Used only to detect your country for pricing purposes (CAD vs USD). Not stored persistently.
- Anonymous funnel events: Page path and actions such as starting the builder, reaching preview, beginning checkout, or downloading. Names, addresses, and issue descriptions are not included in these events. We may also record the referring website hostname and campaign labels or advertising click identifiers placed in a landing-page URL so we can understand how visitors found TenantShield and which visits produce purchases. Google Ads conversion measurement may receive a page path, referral information, device information, and Google advertising click identifiers. Secure download query parameters are removed before measurement data is sent.
2. How We Use Your Information
We use the information you provide exclusively to:
- Generate your demand letter and any purchased supporting worksheets
- Process your payment via Stripe
- Deliver your PDF download and purchase confirmation email
- Send one response-deadline reminder when a Repair Proof Pack customer expressly opts in
- Send one abandoned-checkout recovery link when a customer expressly opts in
- Measure where visitors leave the purchase journey so we can improve the service
We do not sell your data or use letter contents or form data to personalize third-party advertising. We share information only with service providers needed to operate and measure TenantShield, including Stripe (payments and purchased-letter metadata), Resend (transactional email), Vercel (hosting and country-level pricing detection), and Google Ads (advertising attribution and conversion measurement).
3. Data Retention
Before checkout, an unfinished repair-letter draft is stored in your browser for up to seven days. A repair timeline handoff is stored for up to 24 hours, and an unfinished security-deposit draft for up to fourteen days, so you can return without starting over. You can remove it immediately with the builder's Start over control. At checkout, the information needed to recreate your purchased letter is stored in Stripe checkout metadata so your secure receipt link can continue to work. Stripe retains that data according to its policies and our account retention settings.
4. Cookies and Local Storage
We use browser local or session storage to recover an unfinished draft, preserve form data across the Stripe redirect, remember a checkout session for subscription access, and cache your country for pricing. Referral and first-touch campaign information may also be stored for up to 30 days so a later purchase can be attributed. Vercel Web Analytics does not use third-party cookies; its pageview identifiers are derived from request information. Names, addresses, issue descriptions, and secure download identifiers are excluded from analytics events. Deposit amounts, deduction details, and mailing addresses are also excluded from analytics events. Google Ads conversion measurement may set or read advertising-measurement cookies when permitted by the browser. We disable ad-personalization signals in our Google tag.
5. Third-Party Services
- Stripe: Payment processing. Stripe’s privacy policy applies to payment data.
- Vercel: Hosting and privacy-oriented aggregate pageview analytics. Standard server access logs may also be retained by Vercel per its privacy policy.
- Resend: Transactional delivery of purchase and download emails.
- Google Ads: Advertising attribution and aggregate conversion measurement. Letter contents, names, addresses, and secure download identifiers are not sent through the Google tag.
6. Your Rights
To ask about access, correction, or deletion of information associated with a purchase, contact us at the address below. Some payment and transaction records may need to be retained for legal, accounting, fraud-prevention, or dispute-resolution purposes.
7. Children
The Service is not directed to children under 13. We do not knowingly collect information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The updated date at the top of this page reflects the most recent revision.
9. Contact
Questions about this Privacy Policy? Contact us at support@tenant-letter.com.