Privacy Policy

1. Who we are

0key is operated by 0pon LLC. This policy explains what we collect when you use the Service and what we do with it.

2. What we collect

Account data — your name, email, workspace name, and sign-in records (including your Google account identifier if you sign in with Google).

Property records — the properties, units, leases, tenants, owners, vendors, ledger entries, files, and messages you put into your workspace. Sensitive personal fields are encrypted at rest.

Payment data — subscription billing and rent payments are processed by Stripe, or by GoCardless where a workspace uses it. Bank and card credentials go directly to the processor; we store only payment metadata (amounts, dates, statuses) and never see full bank or card numbers. Rent flows through your own processor account, not ours.

Usage data — standard server logs (IP address, browser, pages requested) kept for security and debugging, error reports when something breaks, and page views on our public pages and the landlord console. Page views are tied to a random browser ID, not to your name or account. We never record page views on tenant or owner portals.

3. Tenant and owner information

Landlords enter and control the information about their tenants and owners; we process it on the landlord’s behalf to run the Service. If you are a tenant or owner with questions about your data in a landlord’s workspace, contact your landlord — they control that record.

4. How we use it

To provide and secure the Service, process payments, send transactional email (invites, receipts, notices), respond to support, and improve the product. We do not sell personal information and we do not use your workspace data for advertising.

5. Who we share it with

Only service providers that host and run the product: Stripe (payments), Vercel (hosting and file storage), Neon (database), Resend (transactional email), Sentry (error reports), PostHog (page views), Linear (feedback you send us), GoCardless (bank payments, where a workspace uses it), Twilio (text messages, where a workspace sends them), and OpenStreetMap (map tiles, and address lookup via Nominatim, for property maps). AI features are processed by Anthropic: the text needed for a renewal draft, and any lease you upload to be read. Each provider is bound to use the data only to provide its service. Beyond that, we disclose data only if the law requires it or to protect the Service from abuse.

6. Security

Traffic is encrypted in transit (TLS), sensitive personal fields are encrypted at rest, and access to production systems is restricted. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.

7. Retention and deletion

We keep your workspace data while your account is active. You can export your records at any time. When you close your workspace we delete or anonymize its data within a reasonable period, except records we must keep for legal, tax, or security reasons.

8. Cookies

We use a session cookie to keep you signed in, short-lived cookies during Google sign-in, and a first-party analytics cookie on our public pages and the landlord console to count visits. No advertising or cross-site tracking cookies.

9. Children

The Service is for adults; it is not directed to anyone under 18.

10. Changes

We may update this policy; material changes get notice by email or in-app before they take effect.

11. Contact

Privacy questions: rentals@0pon.com.