Back to Home

Privacy Policy

Last Updated: January 3, 2026 | Effective Date: January 3, 2026

1. Introduction

TenantChatHub ("Company," "we," "us," or "our") operates the TenantChatHub platform, a tenant pre-screening service for real estate investors and landlords. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

Company Information:
TenantChatHub
366 Upper Ottawa Street
Hamilton, Ontario L8T 3S8
Canada

We are committed to protecting your privacy and handling your data in an open and transparent manner. Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Information from Landlords (Account Holders)

When you create an account, we collect:

  • Account Information: Full name, email address, phone number (optional)
  • Authentication Data: Password (encrypted and stored securely)
  • Payment Information: Payment card details are processed securely through Stripe and are not stored on our servers
  • Property Information: Property addresses, rental amounts, descriptions, availability, and photos
  • Pre-screening Questions: Custom questions you configure for tenant screening
  • Documents: Text content you upload for AI reference (lease terms, building rules, etc.)

2.2 Information from Tenants (Chat Users)

When tenants use our chat interface, we collect:

  • Contact Information: Name, email address, phone number
  • Social Media Profiles: Facebook, Instagram, or LinkedIn usernames (if provided)
  • Pre-screening Responses: Answers to landlord-configured questions including income, employment, rental history, credit score, move-in date, pet ownership, and number of occupants
  • Chat Messages: Full conversation history with our AI assistant
  • Showing Appointments: Scheduled viewing dates, times, and confirmation status

2.3 Information Collected Automatically

  • Device Information: Browser type, operating system, device identifiers
  • Usage Data: Pages visited, features used, session duration, interaction patterns
  • Analytics Events: Session starts, messages sent, questions answered, conversion events
  • IP Address: Used for rate limiting, security, and approximate geolocation
  • Referral Source: How you found the property listing (e.g., Facebook, Craigslist)

2.4 Information from Third Parties

  • Facebook/Meta: If you contact a landlord through Facebook Messenger, we receive your Page-Scoped User ID (PSID), profile picture, and messages
  • Google: If a landlord connects Google Calendar, we access calendar availability to schedule showings

3. How We Use Your Information

We use the information we collect to:

  • Provide Our Services: Facilitate AI-powered pre-screening conversations between landlords and prospective tenants
  • Process Applications: Score and rank tenant applications based on responses
  • Schedule Showings: Coordinate property viewing appointments
  • Send Communications: Deliver SMS reminders, showing confirmations, and landlord responses
  • Improve AI Responses: Train and enhance our AI assistant's ability to answer questions accurately
  • Analytics: Understand usage patterns, measure conversion rates, and improve our Service
  • Security: Detect and prevent fraud, abuse, and unauthorized access
  • Legal Compliance: Comply with applicable laws and regulations
  • Customer Support: Respond to inquiries and resolve issues

4. Third-Party Service Providers

We share your information with the following third-party service providers who process data on our behalf:

ProviderPurposeData Shared
SupabaseDatabase & AuthenticationAll account and application data
OpenAIAI Chat ProcessingChat messages, property details, responses
PineconeVector Search (RAG)Document embeddings, FAQs
TwilioSMS MessagingPhone numbers, message content
ResendEmail NotificationsEmail addresses, notification content
StripePayment ProcessingPayment details (processed securely by Stripe)
GoogleAddress Autocomplete, CalendarAddress searches, calendar availability
SentryError MonitoringError logs, technical diagnostics
Meta/FacebookMessenger IntegrationPSID, messages via Messenger

Each provider processes data according to their own privacy policies. We encourage you to review their policies:

5. SMS Communications

By providing your phone number during the pre-screening process, you consent to receive SMS messages from us, including:

  • Pre-screening reminders to complete your application
  • Showing confirmation and reminder messages
  • Responses from landlords to your questions
  • Post-showing follow-up messages

Message Frequency: Message frequency varies based on your interaction with the Service. You may receive up to 3 reminder messages per application and multiple messages related to showing appointments.

Opt-Out: You can opt out of SMS messages at any time by replying "STOP" to any message. You will receive a confirmation of your opt-out. After opting out, you will no longer receive SMS messages from us unless you re-subscribe.

Standard Rates: Standard message and data rates may apply depending on your mobile carrier plan.

6. Marketing Communications

With your consent, we may send you marketing communications about our products, services, and updates.

Opt-In: Marketing communications are opt-in only. During account registration, you may choose to receive product updates and tips by checking the optional marketing consent checkbox.

Opt-Out: You can unsubscribe from marketing emails at any time by:

  • Clicking the "unsubscribe" link in any marketing email
  • Updating your preferences in your account settings
  • Contacting us at infowisesync@gmail.com

Note: Opting out of marketing communications does not affect transactional emails (such as account confirmations, security alerts, or service-related notifications).

7. Cookies and Tracking Technologies

We use minimal cookies and similar technologies to operate our Service:

7.1 Essential Cookies

We use essential cookies that are strictly necessary for the Service to function:

  • Authentication Cookies: HTTP-only cookies to maintain your login session securely
  • Session Identifiers: To maintain your chat session continuity

7.2 What We Don't Use

We do not use:

  • Third-party advertising or tracking cookies
  • Social media tracking pixels
  • Cross-site tracking technologies

7.3 Local Storage

We use browser local storage to save your chat session ID so you can return to an ongoing conversation. This data remains on your device and is not transmitted to third parties.

7.4 Analytics

We collect analytics data (page views, session events) to improve our Service. This data is stored in our database and is not shared with third-party analytics providers.

8. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide the Service you requested (account management, chat functionality, showing scheduling)
  • Legitimate Interests: Processing for our legitimate business interests, such as improving our Service, preventing fraud, and ensuring security, where these interests are not overridden by your rights
  • Consent: Processing based on your explicit consent, such as marketing communications and optional data sharing
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations

You may withdraw consent at any time where we rely on consent as the legal basis for processing. This will not affect the lawfulness of processing before your withdrawal.

9. Data Controller and Processor Roles

Understanding who controls your data:

9.1 For Landlords

TenantChatHub is the data controller for your account information. We determine how and why your personal data is processed.

9.2 For Tenants

The landlord is typically the data controller for tenant pre-screening data, as they determine the questions asked and how responses are used for rental decisions. TenantChatHub acts as a data processor, processing tenant data on behalf of landlords according to their instructions.

However, TenantChatHub is also a data controller for certain processing activities, such as:

  • Service improvement and analytics
  • Security and fraud prevention
  • Legal compliance

10. Automated Decision-Making

Our Service uses automated processing to assist with tenant screening:

10.1 Lead Scoring

We automatically calculate a "lead score" for tenant applications based on responses to pre-screening questions. The scoring considers factors such as:

  • Income relative to rent amount
  • Credit score range
  • Move-in date alignment with property availability

10.2 How Scores Are Used

Lead scores are provided to landlords as a screening aid only. They are not used to make final rental decisions automatically. Landlords make all rental decisions and are responsible for fair housing compliance.

10.3 Your Rights

Under GDPR, you have the right to:

  • Request information about the logic involved in automated scoring
  • Request human review of decisions significantly affected by automated processing
  • Express your point of view and contest decisions

To exercise these rights, contact us at infowisesync@gmail.com.

11. Data Retention

We retain your information for as long as necessary to:

  • Provide our Services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Improve our AI and Services

Landlord Accounts: Data is retained for the duration of your account and for a reasonable period thereafter for legal and business purposes.

Tenant Data: Chat sessions and tenant information are retained for the landlord's business purposes. Tenants may request deletion of their data (see Section 13).

12. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption in transit (TLS/HTTPS)
  • Secure database hosting with Supabase
  • OAuth tokens encrypted at rest
  • Regular security audits and monitoring
  • Access controls and authentication
  • Webhook signature validation for third-party integrations

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

12.1 Data Breach Notification

In the event of a data breach that affects your personal information, we will:

  • Notify affected users within 72 hours of becoming aware of the breach (as required by GDPR)
  • Notify relevant supervisory authorities as required by law
  • Provide information about the nature of the breach, types of data affected, and steps we are taking
  • Offer guidance on steps you can take to protect yourself

We maintain incident response procedures and conduct regular security assessments to prevent and quickly detect potential breaches.

13. Your Rights and Choices

13.1 For All Users

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data
  • Portability: Request your data in a portable format
  • Opt-Out of SMS: Reply "STOP" to any SMS message

13.2 For Landlords (Account Holders)

  • Account Deletion: Delete your account and all associated data through the dashboard settings or by contacting us
  • Data Export: Export your data through the dashboard or by request

13.3 For Tenants

  • Data Deletion: Request deletion of your chat sessions and personal information by contacting us at the email below

To exercise these rights, contact us at: infowisesync@gmail.com

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we collect
  • Right to Delete: Request deletion of personal information we have collected
  • Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell personal information)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Categories of Information Collected: Identifiers, contact information, commercial information, internet activity, geolocation data, and inferences drawn from the above.

We Do Not Sell Personal Information: We do not sell, rent, or trade your personal information to third parties for monetary consideration.

15. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our service providers may be located in the United States and other countries. These countries may have different data protection laws than your country.

When we transfer data internationally, we implement appropriate safeguards to ensure your data receives adequate protection.

16. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

17. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

18. Chrome Extension Privacy

This section applies specifically to the TenantChatHub Chrome Extension available on the Chrome Web Store. The extension helps landlords automatically respond to Facebook Marketplace rental inquiries with their pre-screening chat link.

18.1 Data Collection

The Chrome Extension collects and processes the following data:

  • API Key: Your TenantChatHub API key, entered by you to authenticate the extension with your account
  • Property Mappings: Information you configure linking your TenantChatHub properties to Facebook Marketplace listing IDs
  • Extension Settings: Your preferences for auto-respond behavior and message templates
  • Facebook Conversation Data (Read-Only): When scanning for unread messages, the extension reads conversation participant names and marketplace listing IDs to determine which property an inquiry relates to

18.2 Data Storage

All extension data is stored locally on your device using Chrome's secure storage API:

  • Local Storage Only: Your API key, settings, and property mappings are stored exclusively in Chrome's local storage on your device
  • No Cloud Sync: Extension data is NOT synced to the cloud or stored on our servers (except when the extension communicates with TenantChatHub APIs for validation)
  • User Control: You can clear all extension data at any time by uninstalling the extension or clearing Chrome's extension storage

18.3 Permissions Justification

The extension requires the following permissions:

PermissionPurpose
storageSave your API key, settings, and property mappings locally on your device
activeTabInteract with Facebook Messenger when you trigger the extension to scan for unread messages
alarmsSchedule periodic scans for new marketplace inquiries when auto-respond is enabled
Host: facebook.comAccess Facebook Messenger pages to read unread marketplace conversations and send auto-responses
Host: tenantchathub.comCommunicate with TenantChatHub servers to validate your API key and fetch your property list

18.4 How the Extension Works

The extension operates as follows:

  1. You install the extension and enter your TenantChatHub API key
  2. The extension validates your API key with TenantChatHub servers and fetches your property list
  3. When you visit Facebook Messenger, the extension scans for unread marketplace conversations
  4. For each unread inquiry, it identifies the related marketplace listing and matches it to your property
  5. If a match is found, it sends your pre-configured response message containing your chat link

18.5 Data NOT Collected

The extension does NOT:

  • Collect, store, or transmit the content of your personal Facebook messages
  • Access your Facebook login credentials or account information
  • Track your browsing history or activity outside of Facebook Messenger
  • Collect any personal data from Facebook users who message you
  • Use remote code or load external scripts
  • Sell or share any data with third parties for advertising or marketing purposes
  • Use data for purposes unrelated to the extension's stated functionality

18.6 Data Sharing

The extension only communicates with TenantChatHub servers (tenantchathub.com) for the following purposes:

  • Validating your API key
  • Fetching your property list and chat URLs

No data is shared with any other third parties. We do not sell, rent, or trade any information collected by the extension.

18.7 Security

  • All communication with TenantChatHub servers uses HTTPS encryption
  • Your API key is stored securely using Chrome's built-in storage API
  • The extension does not have access to your Facebook password or authentication tokens
  • You can revoke your API key at any time from the TenantChatHub dashboard

18.8 Data Retention

Extension data (API key, settings, property mappings) is retained locally on your device until you:

  • Uninstall the extension
  • Clear the extension's storage data through Chrome settings
  • Disconnect the extension from the popup settings

18.9 Your Rights

You have full control over the extension and your data:

  • Disable: Turn off auto-respond at any time from the extension popup
  • Delete: Uninstall the extension to remove all locally stored data
  • Revoke: Regenerate or revoke your API key from your TenantChatHub dashboard

18.10 Contact for Extension Issues

For questions or concerns about the Chrome Extension's privacy practices, contact us at infowisesync@gmail.com.

19. Facebook Data Deletion

If you have interacted with our Service through Facebook Messenger, you can request deletion of your Facebook-related data by:

We will delete your Messenger-related data within 30 days of receiving a valid request.

Facebook App ID: 944962891308165

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice (such as email notification for account holders).

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

21. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.