Privacy Policy

1. Information we collect

• Account data: name, email, phone, password (stored only as a bcrypt hash), preferred language.
• Marketplace activity: listings you publish, homes and searches you save, inquiries and messages you send, tour requests, reviews, reports.
• Application data you choose to submit: employment status, income range, occupants, move-in date, and any documents you upload (stored in a separate private system).
• Consent records: which terms/privacy/cookie versions you accepted, when, and from which IP address.
• Technical and optional analytics data: IP address, browser/device type, page URL, referrer, UTM parameters, session identifier, time on page, and security logs. Optional analytics and CRM-attribution data is collected only after the matching cookie consent.

2. How we use it

• Operate the marketplace: show listings, deliver your inquiries and tour requests to listers, process applications.
• Keep the platform safe: moderation, fraud prevention, rate limiting, audit trails.
• Communicate with you: transactional emails (verification, tour confirmations, application updates) and — only with your consent — marketing emails.
• Send transactional SMS you request (such as appointment reminders and service updates) and, only under a separate unchecked opt-in, promotional SMS. Message frequency varies; message and data rates may apply; reply STOP to opt out or HELP for help.
• Improve the service using aggregate, de-identified usage information.

3. Cookies and tracking

We use strictly necessary cookies (session, security, language, your cookie choice) and, only after an anonymous visitor accepts both Analytics and Marketing, the GoPipelinePro external-tracking script on an explicit set of public marketing pages. It measures page activity and approved public search/newsletter forms; it is not loaded on account, property-inquiry, dashboard, application, message, verification, or upload pages. Details and controls are in the Cookie Policy.

4. Third-party services

• Hosted checkout provider — lister subscription payments are completed on an external checkout page. Payment-card details are handled by that provider and never stored on DRApartmentFinder servers. Paid access remains pending until an administrator verifies the transaction.
• GoPipelinePro (CRM and consent-gated external tracking) — when you contact a lister, your inquiry (name, contact details, message, move-in preferences) is synchronized through our server-side CRM integration for follow-up. After an anonymous visitor accepts both optional cookie categories, the separate browser tracker may process public marketing-page/session/UTM data and approved public search/newsletter submissions for analytics and attribution. It is blocked from private routes. Passwords, payment-card data, private chat attachments, walkthrough evidence, reports, and application documents are not sent through that tracker.
• OpenStreetMap — map tiles are loaded from OpenStreetMap servers when you view maps; your IP address is visible to them like to any website you load content from.
• Email and hosting providers — process data on our behalf under contract.
• Mobile opt-in data and consent are not sold, rented, or shared with third parties for their own marketing. Communications providers may process them only to deliver messages on our behalf.

5. Your rights (GDPR / CCPA where applicable)

Wherever you live, we honor these requests; if you are in the EEA/UK (GDPR) or California (CCPA/CPRA), they are your legal rights:

• Access / portability: download a copy of your data (Dashboard → Privacy → Download my data).
• Correction: edit your profile, or ask us to fix anything you cannot edit yourself.
• Deletion: request account deletion (Dashboard → Privacy → Delete my account).
• Objection / restriction: opt out of marketing at any time; we do not sell or share your personal information for cross-context behavioral advertising.
• Non-discrimination: exercising these rights never reduces your service.

6. Data retention

We keep data only as long as needed: account data until deletion; inquiries and messages while your account is active; consent and audit records and billing data for the legally required period after deletion; security logs up to 12 months; CRM webhook payloads 30 days. Full table: Data Retention Policy.

7. Children's privacy

DR Apartment Finders is not directed to anyone under 18, and we do not knowingly collect data from minors. Renting requires legal capacity to contract. If you believe a minor has created an account, contact support@drapartmentfinder.com and we will delete it.

8. Operator and contact

DRApartmentFinder.com is operated by Elevate Concierge d/b/a Eccentric Enterprise. Privacy requests and general support: support@drapartmentfinder.com or +1 829-529-8736. We confirm privacy requests within 72 hours and complete verified requests within 30 days.