Legal

Privacy policy

Effective August 27, 2026

This policy covers the EstateTend web dashboard at estatetend.app, the EstateTend iPhone app, and this website. It is written to be read, not to be survived — if anything here is unclear, write to us and we will explain it.

1. Who we are, and who controls your data

EstateTend is a property management platform operated by Chowen Labs, LLC ("EstateTend", "we", "us"). It is used by property management companies ("managers") to look after second homes on behalf of the people who own them ("owners").

That structure matters for privacy, because two different parties are responsible for different things:

Your property manager controls the property data. They decide which properties exist in their workspace, which owners are invited, what is recorded about each home, and how long it is kept. For that data we act as their service provider — we process it on their instructions and do not use it for our own purposes.
We control our own account and billing data. The manager's account details, their subscription, and the operational records we need to run the service are ours to answer for.

In practice: if you are a home owner, your manager is the first place to go with questions about your property record. If you are a manager, come to us. Either way, you can always write to hello@estatetend.com and we will help or point you to the right party.

2. What we collect

Everything below is collected because a specific feature needs it. Nothing is collected speculatively.

What	Why	Where it comes from
Name and email address	To create and identify your account, sign you in, address you correctly, and send account email such as invitations and password resets.	Entered by a manager when they create their account, or by a manager when they invite an owner.
Phone number (optional)	So the people responsible for a property can reach each other. Displayed on contact cards inside the product.	Entered by you or your manager. You can leave it blank.
Account identifier	The internal ID every record is keyed to. It is what makes a message yours and a visit theirs.	Generated by us when the account is created.
Password	To authenticate you. Stored only as a salted hash — we cannot read your password, and neither can your manager.	Chosen by you.
Property records	The substance of the product: addresses, access details, appliances, warranties, documents, vendors, service intervals, visits, checklists, and stays.	Entered by the manager, and by owners where the product allows it.
Photos you take or upload	Visit documentation, property photos, and images attached to service requests.	Captured with the camera or chosen from your photo library, only when you initiate it.
Messages and other text you write	In-app messages between owners and managers, service request descriptions, checklist notes, and photo captions.	Written by you inside the product.
Push notification token (app only)	A device identifier issued by Apple so a notification can reach the right phone. Stored against your account and deleted when you sign out or remove the app.	Issued by Apple when you allow notifications. It is not an advertising identifier.
Billing details (managers only)	To run the subscription: plan, billing interval, subscription status, and the last four digits and brand of the card. Payment is processed by Stripe.	Entered by the manager into Stripe's own payment form.
Security and operational logs	Sign-in events, IP address, and server request logs kept by our infrastructure providers so we can keep accounts secure and diagnose faults.	Generated automatically when you use the service.

A note on property addresses. A property address is a record about a house, not about you personally, and it is entered by the manager as part of their business records. We mention it here because it is the kind of thing people reasonably ask about.

3. What we do not collect

This list is as much a part of the policy as the one above.

No analytics or tracking of any kind. There is no Google Analytics, no product-analytics SDK, no session recording, and no advertising SDK in the web dashboard or in the iPhone app.
No advertising, and no data sold or shared for advertising. We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy laws.
No tracking across other companies' apps or websites. The iPhone app contains no advertising identifier and does not ask for App Tracking Transparency permission, because it has nothing to ask for.
No location services. The app never requests your location. Property addresses are shown as text you or your manager typed.
No access to your contacts, your browsing history, your search history, your health data, or your files beyond the specific photos and documents you choose to attach.
No reading of your email or text messages. "Messages" in EstateTend means messages written inside EstateTend.
No card numbers. Card details go directly to Stripe. They never touch our servers, and we never see the full number.

4. How we use it

We use the information above to:

Provide the service — show you your properties, visits, messages, requests, and statements;
Authenticate you and keep accounts secure, including optional two-factor authentication;
Send account and service email: invitations, password resets, and notifications you have asked for;
Send push notifications to your phone, if you allowed them;
Bill managers for their subscription and handle plan changes, invoices, and cancellations;
Diagnose faults, prevent abuse, and keep the service running;
Meet our legal obligations.

We do not use your content to train machine learning models, and we do not use it to market to your owners.

5. Photos and property records

Photos are the part of the product people are most rightly protective of, so they get their own section.

The camera and photo library are used only when you actively choose to add a photo. The app does not access your photo library in the background and does not read photos you have not selected.
Uploaded photos are stored in a private storage bucket. They are not publicly addressable — there is no URL that lets a stranger view them, and they are not indexed by search engines.
A photo attached to a property is visible to the management company that owns the workspace and to the owners assigned to that specific property. It is not visible to other managers using EstateTend, and it is not visible to other owners.
Photos may carry metadata such as the time they were taken. We use the timestamp as part of the visit record.

The same isolation applies to every other property record. Each management company's workspace is separated at the database level, and that separation is enforced by the database itself rather than by application code alone.

6. Push notifications

If you allow notifications, Apple issues your device a push token, which we store against your account so that a new message or a request update reaches your phone rather than someone else's. Notification payloads are delivered through Apple Push Notification service.

You can turn notifications off at any time in iOS Settings, and the permission is entirely optional — the app works without it. Signing out or deleting the app removes the token.

We share personal information with the service providers below, and with nobody else. Each one processes data only to perform its function for us.

Provider	What it does for us	What it sees
Supabase	Database, authentication, file storage, and server functions	All application data, encrypted in transit and at rest
Netlify	Hosting for the web dashboard	Request logs, IP addresses
Cloudflare	Hosting and DNS for this website	Request logs, IP addresses
Stripe	Subscription payments for managers	Manager billing details and payment card data, which it handles directly
Resend	Sending transactional email such as invitations	Recipient name, email address, and message content
Apple	Push notification delivery, and App Store distribution of the iPhone app	Device push tokens and notification payloads

Beyond those providers, we will disclose information only:

to the people your data is meant for — your management company, and the owners assigned to a property;
when the law requires it, or to respond to a valid legal process;
to protect the rights, property, or safety of our users or the public;
in connection with a merger, acquisition, or sale of assets — in which case we will give notice before your information becomes subject to a different policy.

We do not sell personal information.

8. Where it is stored and how it is protected

Data is stored on servers in the United States. If you are using EstateTend from outside the US, you are sending your information to the US, where privacy law differs from your own country's.

Protections we consider table stakes and therefore actually implement:

All traffic runs over HTTPS/TLS. The apps use no proprietary or non-exempt cryptography.
Data is encrypted at rest by our infrastructure provider.
Passwords are stored as salted hashes and are never readable by us or by your manager.
Access between management companies is isolated at the database level, so one manager's credentials cannot reach another manager's data.
Photos and documents live in private storage that requires an authenticated, time-limited link to view.
Two-factor authentication is available on every account, and the iPhone app offers an optional Face ID lock.

No system is perfectly secure, and we would rather say so than imply otherwise. If we discover a breach affecting your personal information, we will notify you and any regulator that the law requires, without undue delay.

9. How long we keep it

Property records, photos, and messages are kept as long as the management company keeps them. They control deletion, and deletion by them is permanent.
Account details are kept while the account is active.
Billing records are kept for as long as tax and accounting law requires, typically seven years, even after an account closes.
Security and server logs are kept on a short rolling window by our infrastructure providers.
Push tokens are removed when you sign out, delete the app, or turn off notifications.

When a management company closes its EstateTend account, we delete or anonymise its workspace data within 90 days, other than records we are required to keep.

10. Your choices and rights

Whatever jurisdiction you are in, you can ask us to:

Access the personal information we hold about you;
Correct anything inaccurate — much of it you can edit yourself in your profile;
Delete your personal information;
Export a copy in a portable format;
Object to or restrict certain processing;
Opt out of non-essential email. Some account email, such as password resets, is not optional while you hold an account.

We do not sell or share personal information for advertising, we do not use it for profiling or automated decision-making, and there is no financial incentive programme — so there is nothing for you to opt out of on those fronts.

We will not discriminate against you for exercising any of these rights. To make a request, write to hello@estatetend.com. We will verify your identity through the email address on your account and respond within the time the applicable law allows — 45 days under US state privacy laws, 30 days under the UK and EU GDPR.

If your data was entered by a property manager, we may need to forward your request to them, as they are the party that controls it. We will tell you when we do that.

If you are in the UK or the EU, you also have the right to complain to your local data protection authority. We would appreciate the chance to put it right first.

11. Deleting your account

Accounts in EstateTend are not self-serve: managers create them, and managers invite owners into them. Deletion follows the same route.

Owners: ask your property manager to remove your access, or write to us at hello@estatetend.com and we will action it and tell your manager.
Managers: write to hello@estatetend.com to cancel and delete your workspace. You can also cancel the subscription yourself at any time from your billing settings.

Either way, ask us and we will do it. You will never have to argue with a retention team.

12. Children

EstateTend is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, write to hello@estatetend.com and we will delete it.

13. Changes to this policy

If we change this policy we will update the effective date at the top, and for any material change we will notify account holders by email or in the product before it takes effect. We will not quietly broaden what we collect.

14. Contact us

Questions, requests, or complaints about privacy go to hello@estatetend.com, and a person reads them.

Chowen Labs, LLC
hello@estatetend.com