Privacy Policy

This Privacy Policy ("Policy") describes how BOSS HOG RENTAL SPACES LLC, a North Carolina limited liability company ("Company," "we," "us," or "our"), collects, uses, discloses, and retains information when you visit bosshogrentals.com and associated subdomains, use payment or onboarding links, communicate with us, or otherwise interact with our online services (collectively, the "Service").

This Policy applies to the Service only. It does not apply to third-party websites, apps, or services that we do not control, even if linked from the Service.

By using the Service, you acknowledge this Policy. If you do not agree, do not use the Service. This Policy should be read together with our Terms of Service.

For purposes of this Policy, the Company is the entity responsible for personal information collected through the Service in connection with rentals and tenancy administration that we manage.

Questions or requests regarding this Policy may be sent to support@bosshogrentals.com or the contact information published on the Service.

We collect information in the following categories, depending on how you interact with the Service:

Tenant and prospective tenant information: name, email address, phone number, occupation, lease start and end dates, rent and deposit amounts, property assignment, move-out instructions, onboarding status, notes entered by authorized staff, and correspondence you send to us (including email subject lines and message content).

Payment information: amounts due and paid, payment dates, payment status, refund records, payment method type and masked details (for example, card brand and last four digits or bank name and last four digits), Stripe payment identifiers, and manual payment references recorded by staff (such as check numbers or peer-to-peer payment notes). Full payment card numbers and bank account credentials are processed by Stripe, Inc. and are not stored on our servers.

Link and session information: hashed tokens for payment and onboarding links, link expiration and usage timestamps, and limited technical data needed to operate those flows.

Communications metadata: email and, where enabled, SMS delivery logs including recipient address, sender address, subject line, delivery status, and error messages.

Inbound support email: when you email our support addresses, we may store sender name, email address, recipient address, subject, and message body (text and/or HTML), and associate the message with your tenant record when your email matches our records.

Public website use: if you browse our public pages, we may receive standard server and application logs (such as IP address, browser type, referring URL, pages viewed, and timestamps) through our hosting provider.

Authorized admin users: for staff who sign in to the admin dashboard, our authentication provider (Clerk) processes account credentials and session data. We store the Clerk user identifier and work email associated with authorized admin accounts.

We do not intentionally collect sensitive categories of information such as government ID numbers, Social Security numbers, or precise geolocation through the Service, except where you voluntarily include such information in email correspondence.

Directly from you: when you confirm an email on an onboarding link, update information on a payment link, submit payment through Stripe, or email us.

From authorized Company personnel: when staff create or update tenant, lease, and payment records in the admin system.

Automatically: through hosting logs, payment and email webhooks, link access events, and authentication sessions for admin users.

From service providers: such as payment confirmations from Stripe, delivery events from Resend, and inbound email payloads from our email provider.

We use collected information to:

Operate and administer tenancies, including rent billing, deposit tracking, move-out communications, and lease-related support;

Send transactional messages such as payment links, reminders, overdue notices, onboarding invitations, payment confirmations, and move-out instructions;

Process and record payments, refunds, and internal financial reporting;

Respond to inquiries and support requests;

Maintain the public website, including cabin listings and availability displays derived from occupancy data;

Secure the Service, prevent fraud and abuse, troubleshoot errors, and enforce our Terms of Service;

Comply with law, respond to lawful requests, and establish, exercise, or defend legal claims;

Improve and maintain the Service, including through automated or software-assisted workflows.

We do not use your information to sell personal data. We do not use generative artificial intelligence to make binding tenancy decisions on your behalf as of the effective date above.

We use automated, rules-based, and software-driven systems to schedule emails, calculate due dates, display availability, generate administrative summaries, route inbound messages, and perform similar operational tasks.

These systems may process your information without human review before an action is taken (for example, sending a scheduled payment reminder). Outputs may contain errors or outdated information.

We may adopt additional automated or AI-assisted tools in the future. If we do, those tools will be used for operational convenience and will not replace your written lease or applicable law.

Where state or federal law requires notice, disclosure, or an opportunity to opt out of certain automated decision-making or profiling, we will provide any notice required by law. To the extent permitted by law, you agree that operational automation described in this Policy is necessary to provide the Service.

Third-party providers integrated with the Service may use their own automated or AI systems under their own privacy policies. We do not control those practices.

We may disclose information to:

Service providers that help us operate the Service, including payment processing (Stripe), email delivery (Resend), SMS delivery (Twilio, if enabled), admin authentication (Clerk), hosting and storage (Vercel, including Vercel Blob for images), and database hosting (Neon). These providers process information on our behalf subject to their agreements and policies.

Professional advisors (such as attorneys or accountants) where reasonably necessary.

Law enforcement, courts, regulators, or other parties when we believe disclosure is required by law, subpoena, or legal process, or to protect rights, safety, and security.

Successors in connection with a merger, acquisition, financing, or sale of assets, subject to applicable law.

We do not sell or rent personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising.

The public marketing pages of the Service do not use first-party advertising or analytics cookies based on our current implementation.

Admin users who sign in through Clerk may receive session and authentication cookies or similar technologies necessary to maintain a secure login. Clerk's privacy policy governs those technologies.

Stripe and other embedded payment or communication tools may set cookies or use similar technologies when you interact with their components. Please review their policies for details.

You can control cookies through your browser settings. Disabling cookies may limit certain features, especially admin authentication.

We retain information for as long as reasonably necessary to operate the Service, administer tenancies, maintain business and tax records, resolve disputes, enforce agreements, and comply with legal obligations.

Tenant, payment, and communication records may be retained for multiple years after a tenancy ends where required or advisable for accounting, tax, or legal purposes.

Payment link tokens expire by default after a limited period and are stored in hashed form.

Server logs and provider logs are retained according to our and our vendors' standard retention schedules.

When retention is no longer required, we may delete, anonymize, or aggregate information, subject to technical limitations and backup systems that may persist for a limited time.

We use reasonable administrative, technical, and organizational measures designed to protect information, including access controls for admin users, hashed link tokens, and reliance on established payment and hosting providers.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You use the Service and communicate with us at your own risk regarding data security.

You are responsible for safeguarding payment and onboarding links sent to you and for using secure devices and networks when accessing the Service.

Email and contact information: current tenants may request correction of contact information by emailing support@bosshogrentals.com. Some updates may also be made through onboarding or payment links when available.

Transactional communications: payment and lease-related messages may be necessary to administer your tenancy. Opting out of all communications may limit our ability to provide the Service.

Access, deletion, and correction requests: you may contact us to request access to, correction of, or deletion of personal information we hold about you. We will respond as required by applicable law. We may deny requests where we are legally permitted to do so, including where information must be retained for legal, accounting, or tenancy dispute purposes, or where a request is excessive or unfounded.

North Carolina residents and residents of other states with privacy laws may have additional rights regarding access, correction, deletion, and appeal of certain decisions. Contact us to exercise applicable rights. We will not discriminate against you for exercising privacy rights where prohibited by law.

We do not currently respond to "Do Not Track" browser signals because there is no uniform industry standard.

The Service is not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us and we will take appropriate steps to delete it where required.

The Service may link to or embed third-party services. Their collection and use of information is governed by their own privacy policies. We encourage you to review:

Stripe — https://stripe.com/privacy

Clerk — https://clerk.com/privacy

Resend — https://resend.com/legal/privacy-policy

Twilio — https://www.twilio.com/en-us/legal/privacy

Vercel — https://vercel.com/legal/privacy-policy

We are not responsible for the privacy practices of third parties.

The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information may be processed and stored in the United States and other countries where our service providers operate, which may have different data protection laws than your jurisdiction.

We may update this Policy from time to time. The effective date at the top of this page will reflect the latest version. Material changes may be communicated through the Service or by email where appropriate.

Your continued use of the Service after an updated Policy becomes effective constitutes acceptance of the changes, unless applicable law requires a different form of consent.

Privacy questions or requests: support@bosshogrentals.com

BOSS HOG RENTAL SPACES LLC