Privacy Policy

Effective September 11, 2026 · Turnhouse · San Antonio, Texas · support@turnhouse.io

Turnhouse coordinates property turnover and maintenance work between property management companies, their vendors, tenants, and owners. This policy explains what we collect, why, and the choices you have. Plain English on purpose.

1. Information we collect

• Account information: email, password (stored as a secure hash), company name, trades, and — if you add it — a phone number for text notifications.
• Workspace data entered by users: properties, job details, scope notes, estimates, bids, invoices, deposits, messages, contact-attempt logs, and uploaded photos and documents (like insurance certificates and W-9s).
• Tenant and owner information provided by property managers: names, phone numbers, emails, and property notes that a property management company imports or enters to run its operations. For this data, the property management company decides what's collected and who sees it — we process it on their behalf. Tenants and owners with questions about their information should contact their property manager first; we'll support any correction or deletion the manager directs.
• Information tenants submit directly: when a tenant files a maintenance request — name, contact info, the issue, availability, and access notes.
• Technical basics: log data such as IP address, browser type, and timestamps, used for security and keeping the Service running. We use only essential cookies/storage for sign-in — no advertising trackers.

2. How we use information

• To operate the Service: routing jobs, showing the right information to the right role, generating tenant and owner links, and keeping the timestamped record that is the product's purpose.
• To send notifications: in-app alerts and, for users who opt in (and tenants who provide a phone number with a request), transactional text messages about job events. Reply STOP to opt out of texts anytime, or turn them off in settings. We don't send marketing texts.
• To provide support, prevent abuse, and improve the Service.
• We do not sell personal information, and we don't use your data for advertising. Workspace data is your business's data; we use it to run the Service for you, not to build profiles.

3. Who can see what inside the Service

Visibility follows the roles the property management company controls: staff see their company's jobs; vendors see jobs they're eligible for or assigned to; tenants see only what's published to their private request link (messages marked team-only are never shown to tenants); owners see only jobs at their properties via their private link. Links are unguessable tokens — anyone who holds a link can view what it shows, so recipients should treat links as private.

4. Service providers we share with

We use a small set of processors to run Turnhouse, each receiving only what their function requires:

• Supabase — database, authentication, and file storage (hosting the workspace data described above).
• Twilio — delivery of text notifications (phone numbers and message content).
• Payment processing — when subscription billing runs through a processor such as Stripe, your payment card details go to the processor directly; we don't store card numbers.
• Web hosting and email — for the website and support mailbox.

Beyond these, we disclose information only if required by law, to protect rights and safety, or as part of a business transition (with notice).

5. Retention and deletion

Workspace data is retained while the company's account is active, because the permanent record is the product. When a company cancels, we'll delete its workspace data on request (or after a reasonable wind-down period), except minimal records we must keep for legal, billing, or security purposes. Individual users can request deletion of their account data at support@turnhouse.io; for tenant/owner data controlled by a property manager, we'll route the request to them and follow their direction.

6. Security

Data is encrypted in transit, access is controlled by role-based rules enforced at the database layer, passwords are hashed, and files live in access-controlled storage with expiring share links. No system is perfectly secure, but security decisions here are made like the records matter — because they do.

7. Your choices and rights

• See, correct, or update your account details in the app; turn text notifications on or off anytime.
• Request a copy or deletion of your personal information: support@turnhouse.io. We'll respond within 30 days. Depending on where you live, you may have additional rights (such as access, correction, deletion, and portability under state privacy laws); we honor verified requests regardless of state.

8. Children

The Service is for business use and isn't directed to children under 13 (accounts require users to be 18+). We don't knowingly collect children's information; if you believe a child provided information, contact us and we'll delete it.

9. Changes

If we make material changes to this policy, we'll notify account holders before the changes take effect and update the date above.

10. Contact

support@turnhouse.io — Turnhouse, San Antonio, Texas.