Privacy Policy

Information we collect

• Accounts and contacts: names, email addresses, phone numbers, authentication identifiers, roles, and property or unit associations. A property team may provide resident or contractor details when inviting them.
• Maintenance records: messages, photos and other supported attachments, issue descriptions, locations, availability, access preferences, contact-sharing choices, updates, work-order outcomes, and recorded repair costs.
• Service and technical records: invitation and messaging consent, delivery status, timestamps, security and audit events, IP addresses and device/browser information processed by our hosting and service providers.
• Inquiries: information you send through our contact forms or support email.

Please avoid sending passwords, payment-card information, government identifiers, or unrelated sensitive information in maintenance messages or photos.

Google sign-in

If you choose Google sign-in, Google provides your account identifier, email address and basic profile information, such as your name and profile image. We use this information to authenticate you and maintain your Stead account through Supabase Auth. We do not request access to Gmail messages, Google Drive files, calendars or contacts.

You can remove Stead’s Google access from your Google Account’s third-party connections settings. Revoking access does not automatically delete maintenance records or your Stead account; contact us to request deletion.

How we use information

We use information to identify the appropriate rental, manage access, gather repair details, create and update requests, coordinate work, send invitations and notifications, answer support questions, maintain repair history, and detect or troubleshoot abuse and service failures.

Stead’s messaging assistant uses AI to interpret maintenance conversations and photos, ask follow-up questions, and use authorized tools to manage requests. Relevant conversation context, repair details and accepted images are processed by OpenAI. Automated redaction reduces some contact information in message text, but it does not guarantee that every personal detail is removed, especially from images. AI can make mistakes; residents and property teams should review important details and correct them.

Stead is not an emergency service, and availability or access preferences are not a confirmed appointment.

Who receives information

Maintenance information is shared with the property team responsible for the rental and authorized collaborators. Contractors receive job information within their assigned access. Contact-sharing choices are recorded separately from repair details. Your property team may keep its own records and have its own privacy practices; contact it about how it handles your tenancy information.

We use service providers to operate Stead: Vercel and Railway for hosting; Supabase for authentication, database and file storage; Linq and messaging networks for text delivery; Resend for transactional email; OpenAI for AI processing; Google for optional sign-in and address search; and Zoho for support email. PostHog may process limited usage analytics when enabled. Providers process the information needed for their services under their applicable terms and privacy policies.

Information may also be disclosed when reasonably necessary to comply with law, respond to lawful requests, protect rights or security, or support a business transfer with appropriate protections. Stead does not sell personal information or use maintenance messages and photos for targeted advertising.

Cookies and browser storage

We use cookies and browser storage for authentication, session continuity, invitation handling and app preferences. When enabled, PostHog collects limited usage events; our configuration disables automatic interaction capture and session recording and respects the browser’s Do Not Track setting. Blocking storage may prevent sign-in or other features from working.

Retention and protection

We keep account and repair records as needed to provide the service, maintain property history, resolve disputes and meet applicable obligations. Operational cleanup removes eligible old messaging content and unlinked media; photos attached to tickets and repair or audit records can remain longer. There is no single automatic deletion period for all data, and backups or provider records may persist after deletion from active systems.

Stead uses authenticated access, role and property-based authorization, private attachment storage and encrypted network connections. No service can guarantee absolute security. Our providers may process information in the United States and other countries where they operate.

Your choices and requests

You can correct details through the service or ask your property team for help. To request access, correction, export or deletion of personal information, email hello@withstead.app. We may need to verify your identity and coordinate with your property team. Some records may need to be retained for legitimate operational or legal reasons. Your rights depend on where you live.

Reply STOP to stop Stead text messages, START to request resumption, or HELP for assistance. Opting out does not delete an existing request; contact your property team through another channel for repair updates.

Stead is intended for adults managing or reporting property maintenance, not for children under 13. Contact us if you believe a child has provided personal information.

Changes and contact

We may update this policy as the service changes. The effective date above identifies the latest version. We will provide additional notice of material changes where required. Questions or requests can be sent to hello@withstead.app.