Privacy Policy

What we collect

We collect what you give us and what's needed to run the service:

• Account info — your name, email address, role, and timezone.
• Business data — the contacts, contracts, tasks, notes, phone call logs, and other records you create in Rehomebase.
• Files — documents, photos, and other files you upload. Stored on Amazon Web Services (AWS).
• Billing — payment is handled entirely by Stripe. We never see or store your card number.
• Technical data — your IP address, browser type, and a session cookie to keep you logged in.

How we use it

• Run the CRM — store your data, send notifications, process task workflows.
• Send transactional emails — task assignments, @mentions, billing receipts.
• Monitor errors and improve the product.

Third-party services

We use a small number of services to operate Rehomebase:

• Stripe — payment processing.
• AWS — file storage and infrastructure.
• SendGrid — email delivery.
• Sentry — error monitoring. Receives stack traces, not your personal data.
• Keen — product analytics. Tracks feature usage so we know what to improve.
• Loops — product announcements and newsletters. We don't use it to email your leads or contacts.
• Google Analytics — traffic verification on public listing websites only. Not used inside the CRM.

We don't sell or share your data with anyone beyond the services listed above.

What we don't do

• We never sell your data.
• We don't use advertising trackers in the CRM.
• We don't share your data with unrelated third parties.

Cookies

We use a small number of cookies to keep you logged in and protect your session. No advertising cookies, no cross-site tracking.

Who sees your data

Your team members see data based on their access level, as configured by your company admin. Our support staff may access your account when troubleshooting an issue you reported, or to resolve errors. We don't browse customer data for any other reason.

Data retention

Your data is kept as long as your account is active. If you cancel, your data is retained for 90 days so you can request an export. After that, we permanently delete it. See our Cancellation Policy for details.

Business transfers

If Rehomebase is acquired by or merges with another company, your data will be transferred to the new owners so the service can continue. We will notify you before any such transfer occurs.

Your rights

You can access, export, correct, or delete your data at any time. For data exports or deletion requests, email support@rehomebase.com.

Security

All connections use HTTPS. Passwords are hashed with bcrypt. Uploaded files are stored on AWS S3, which encrypts all objects at rest by default. Access within the app is controlled by role-based permissions.

Changes to this policy

We may update this policy from time to time. We'll update the date at the top of this page. If we make significant changes, we'll notify you by email.