Privacy Policy

1. Introduction

Blue Collar Capital LLC, doing business as NoticePM (“Company,” “we,” “us,” or “our”), is committed to protecting the privacy and security of the personal information we collect and process. This Privacy Policy describes how we collect, use, store, share, and protect personal information when you use our website at noticepm.com and our rent increase notice compliance platform (collectively, the “Service”).

This Privacy Policy applies to two categories of individuals: (a) “Customers” — property managers, landlords, and management company employees who create accounts and use the Service; and (b) “Tenants” — individuals whose personal information is uploaded to the Service by Customers for the purpose of generating and delivering rent increase notices.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

2. Data Controller and Processor Roles

For Customer account data (your name, email, login credentials, billing information): Blue Collar Capital LLC acts as the data controller. We determine the purposes and means of processing this data to provide and improve the Service.

For Tenant data (tenant names, addresses, lease terms, rent amounts, and related information uploaded by Customers): Blue Collar Capital LLC acts as a data processor. The Customer is the data controller and determines the purposes for which Tenant data is processed. We process Tenant data only on behalf of and at the instruction of the Customer, solely to provide the Service.

3. Information We Collect

3.1 Customer Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored in hashed form by our authentication provider, Supabase)
• Organization/company name
• Business address (street, city, state, ZIP)
• Phone number (optional)
• Property portfolio size (unit count)
• Property management software used

3.2 Billing Information

Payment processing is handled by Stripe. We do not store complete credit card numbers on our servers. Stripe collects and stores your payment information in accordance with PCI-DSS standards. We receive and store a limited record from Stripe including last four digits of your card, card brand, billing address, and transaction history.

3.3 Tenant Information (Uploaded by Customers)

Customers upload tenant information to the Service for notice generation and delivery. This may include:

• Tenant names (first and last)
• Tenant email addresses
• Tenant phone numbers
• Mailing addresses (for notice delivery)
• Lease terms (start date, end date, lease type, lease duration)
• Current and proposed rent amounts
• Unit and property information (unit number, property address, city)
• Notice delivery preferences (combined or individual)
• Digital signatures (when tenants sign notice acknowledgments)

3.4 Property and Lease Data

Customers may provide or import the following property and lease data:

• Property names, addresses, and identifiers
• Unit details (number, floorplan, bedrooms, bathrooms, square footage)
• Lease dates, rent amounts, and status information
• Data imported from third-party property management platforms (Appfolio, Buildium, DoorLoop)
• CSV/XLSX file uploads containing property, unit, and tenant data

3.5 Usage and Technical Data

We automatically collect certain technical information when you use the Service:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and features used within the Service
• Date and time of access
• Referring URL
• Session duration

3.6 Cookies

We use essential cookies required for the Service to function, including authentication session cookies managed by Supabase. We do not use advertising cookies or third-party tracking cookies. We may use analytics cookies to understand how the Service is used. You can control cookie settings through your browser preferences, but disabling essential cookies may prevent you from using the Service.

4. How We Use Your Information

4.1 To Provide the Service

We use Customer and Tenant data to:

• Calculate rent increase notice deadlines based on lease terms and jurisdiction
• Generate PDF notice documents from templates
• Dispatch certified mail via SendCertifiedMail.com (SCM)
• Track notice delivery status (tracking numbers, delivery confirmation)
• Maintain compliance audit trails
• Import and synchronize data from property management platforms
• Process digital signatures
• Send notification emails related to deadlines and service activity

4.2 To Manage Your Account

We use Customer account information to:

• Authenticate your identity and manage access
• Process subscription payments and mailing fees
• Send account-related communications (billing confirmations, security alerts, service updates)
• Provide customer support

4.3 To Improve the Service

We use aggregated, anonymized usage data to:

• Understand how the Service is used and identify areas for improvement
• Monitor system performance and diagnose technical issues
• Develop new features and functionality

We do not use Tenant personal information for marketing, advertising, profiling, or any purpose other than providing the Service on behalf of the Customer.

5. How We Share Your Information

We do not sell personal information to third parties. We share personal information only in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who assist us in operating the Service:

• Supabase — authentication and database hosting. Receives Customer credentials and stores all Customer and Tenant data.
• SendCertifiedMail.com (Certified Mail Envelopes, Inc.) — certified mail delivery. Receives tenant names and mailing addresses, notice documents via SFTP. SCM guarantees Washington State postmarks for letters with WA return addresses, as required by RCW 59.12.040.
• Stripe — payment processing. Receives Customer billing information.
• Resend — transactional email delivery. Receives Customer email addresses for account notifications and deadline alerts.
• Vercel — application hosting. Processes requests containing Customer and Tenant data in transit.

Each service provider is contractually obligated to use personal information only for the purpose of providing their respective services and in accordance with their own privacy and security practices.

5.2 Property Management Platforms

When you connect a property management platform (Appfolio, Buildium, DoorLoop), we access data from that platform via API using credentials you provide. We receive property, unit, lease, and tenant data from these platforms. We do not share your data back to these platforms unless you explicitly initiate such a transfer.

5.3 Legal Requirements

We may disclose personal information if required to do so by law, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent fraud or protect against a threat to safety; or (d) protect the rights, property, or safety of our users or the public.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

6. Data Security

We implement commercially reasonable technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest (database-level encryption provided by Supabase)
• Hashed password storage (bcrypt via Supabase Auth)
• Role-based access controls within the Service
• Multi-tenant data isolation (all database queries scoped by organization)
• Regular security updates and dependency patching
• Audit logging of data access and modifications

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Customer account data is retained for the duration of your subscription and for 30 days following account termination (to allow data export), after which it is deleted from active systems. Backup copies may persist for up to 90 days.
• Tenant data is retained for the duration of the Customer's subscription. When a Customer deletes tenant records or terminates their account, tenant data is deleted following the same 30-day grace period and 90-day backup retention.
• Audit log data (notice send confirmations, tracking numbers, delivery status, compliance records) may be retained for up to 7 years to support the Customer's legal compliance obligations, even after account termination, unless the Customer requests earlier deletion.
• Billing records are retained as required by applicable tax and accounting laws.
• Usage and technical data is retained in aggregated, anonymized form for up to 24 months.

8. Your Rights

8.1 Customer Rights

As a Customer, you have the right to:

• Access your personal information and request a copy of the data we hold about you.
• Correct inaccurate or incomplete personal information through your account settings or by contacting us.
• Delete your account and personal information by contacting us at support@noticepm.com. Deletion will be processed subject to our retention obligations.
• Export your data in a machine-readable format. Data export tools are available within the Service.
• Withdraw consent to optional data processing activities (such as analytics cookies) at any time.
• Object to processing of your personal information in certain circumstances.

8.2 Tenant Rights

If you are a Tenant whose information has been uploaded to the Service by a property manager or landlord:

• Your property manager or landlord is the data controller for your information. Please direct data access, correction, and deletion requests to them in the first instance.
• If you are unable to resolve a request with your property manager or landlord, you may contact us at support@noticepm.com, and we will assist in facilitating your request to the extent we are able as a data processor.
• We do not use your personal information for marketing, advertising, profiling, or any purpose other than providing the Service on behalf of the Customer who uploaded your data.

8.3 Washington State Residents

If you are a Washington State resident, you may have additional rights under the Washington Privacy Act or other applicable Washington state privacy legislation, including the right to know what personal information is collected, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

8.4 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact us at support@noticepm.com.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information. If you believe we have collected information from a child under 18, please contact us at support@noticepm.com.

10. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your personal information may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers. We take commercially reasonable steps to ensure that personal information is protected in accordance with this Privacy Policy regardless of where it is processed.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website, updating the “Effective Date” at the top, and sending a notification to your account email at least 30 days before material changes take effect. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

13. Do Not Track Signals

The Service does not currently respond to “Do Not Track” browser signals. We do not track users across third-party websites and therefore do not respond to DNT signals.

14. Data Breach Notification

In the event of a data breach that affects personal information, we will notify affected Customers in accordance with applicable breach notification laws, including Washington State's breach notification law (RCW 19.255.010). We will also cooperate with Customers in notifying affected Tenants as required.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: