Privacy Policy

1. Introduction

Rock Realty, LLC (“we,” “us,” or “our”) operates the property management platform at rockrealtyhawaii.com. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services as a tenant or visitor.

2. Information We Collect

We collect the following categories of personal information:

• Identity Information: Name, email address, phone number, emergency contact details.
• Lease Information: Unit assignment, lease terms, rent amounts, lease dates.
• Payment Information: Payment method (ACH or card), transaction history, payment amounts and dates. We do not store full bank account numbers or credit card numbers — these are processed by our PCI-compliant payment processor (Stripe).
• Bank Account Verification: When you link a bank account for ACH payments, we use Plaid Inc. to verify your account. Plaid collects your bank credentials directly — we only receive a tokenized reference, your bank name, and the last four digits of your account number.
• Usage Data: Login timestamps, IP addresses, and session data for security monitoring.

3. How We Use Your Information

• To manage your lease and provide property management services.
• To process rent payments and maintain accurate financial records.
• To verify your bank account for ACH payment processing via Plaid.
• To communicate with you about your lease, payments, and maintenance requests.
• To comply with legal and regulatory obligations, including tax reporting.
• To protect the security of your account and our systems.

4. Third-Party Service Providers

We share your information with the following service providers who assist in delivering our services:

• Stripe: Payment processing. Stripe is PCI DSS Level 1 certified. Stripe Privacy Policy
• Plaid: Bank account verification for ACH payments. Plaid End User Privacy Policy
• Supabase: Secure database hosting and authentication (SOC 2 Type II certified).
• Vercel: Application hosting (SOC 2 Type II certified).
• Resend: Email delivery for payment confirmations and notifications.
• Twilio: SMS delivery for rent reminders, maintenance notifications, and other tenancy-related communications. Twilio Privacy Policy

We do not sell your personal information to third parties.

SMS / mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All categories described above (including SMS opt-in data) exclude consumer mobile information.

SMS / Text Message Communications

If you provide your phone number and consent to receive text messages, we may send you SMS notifications related to your tenancy. This includes rent reminders, past-due notices, maintenance scheduling, building service alerts, and lease renewal reminders.

• Consent: You provide consent at lease signing or by texting an opt-in keyword. Consent is recorded in our system before any messages are sent.
• Frequency: Message frequency varies by need; most tenants receive 0-4 messages per month.
• Opt-out: You may opt out at any time by replying STOP to any message. We will confirm your opt-out and send no further messages.
• Help: Reply HELP to receive contact information for support, or email rockrealtyhawaii@gmail.com.
• Costs: Standard message and data rates from your wireless carrier may apply. Rock Realty, LLC does not charge for these messages.
• Carriers: Carriers are not liable for delayed or undelivered messages.

We do not sell, rent, or share your phone number or SMS opt-in data with third parties for marketing purposes under any circumstances. Phone numbers are used solely for the property-management communications described above and are processed by Twilio for delivery on our behalf.

5. Plaid Data Usage

When you connect your bank account through Plaid, you authorize Plaid to access your financial account information for the purpose of verifying your account for ACH rent payments. Specifically:

• Plaid accesses your account and routing numbers to enable ACH transfers.
• We store only a tokenized reference to your bank account, the bank name, and the last four digits of your account number.
• We do not access your bank transaction history, balances, or any other financial data beyond what is necessary for payment processing.
• You may disconnect your bank account at any time from the Security settings in your tenant portal.

Plaid's collection and use of your data is governed by the Plaid End User Privacy Policy.

6. Data Security

• All data is encrypted in transit using TLS 1.2 or higher.
• All data is encrypted at rest using AES-256 encryption via our cloud infrastructure.
• Multi-factor authentication (TOTP) is required for all tenant accounts.
• Row-level security policies ensure tenants can only access their own data.
• We do not store raw bank account numbers or credit card numbers in our systems.

7. Data Retention

We retain your personal information for the duration of your active lease and for seven (7) years following lease termination, as required for tax, legal, and regulatory compliance. Payment records are retained per IRS requirements. Upon expiration of the retention period, data is securely deleted.

8. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data, subject to legal retention requirements.
• Disconnect your linked bank account at any time.
• Opt out of non-essential communications.

To exercise any of these rights, contact us at rockrealtyhawaii@gmail.com.

9. Consent

By creating an account and using our services, you consent to the collection, processing, and storage of your personal information as described in this Privacy Policy. When you link a bank account via Plaid, you provide explicit consent for Plaid to access your financial account information for payment verification purposes.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: