Privacy Policy

1. Who we are

Asset Pal is operated by BRT Publications LLC, Berlin, Maryland (“we,” “us”). This policy explains what information we collect when you use Asset Pal, why we collect it, and the choices you have.

2. Information we collect

Account information: your name, email address, and password (stored only as a secure hash) when you sign up.

Association information: association name, address, number of units, association type (HOA or condo), and management type, provided during setup.

Your content: documents, photos, invoices, contracts, chat conversations, and task reports you or your members add to the workspace, plus the text and search embeddings we derive from them to power search and AI answers.

Billing information: your plan, billing period, and payment status. Card numbers are collected and stored by our payment processor, Stripe — we never see or store your full card number.

Usage information: pages visited, features used, and diagnostic logs that help us fix errors. If the platform administrator enables Google Analytics, anonymized usage statistics are sent to Google; you can ask us whether it is currently enabled.

Communications: emails you send us, and records of the emails we send you (such as sign-up confirmations and treasurer notifications).

3. How we use information

We use the information above to: operate and secure the service; enforce document access levels and roles; process payments and manage subscriptions; send service emails (sign-up confirmation, password reset, invitations, and treasurer activity notices); send optional marketing emails you can unsubscribe from at any time; and improve the product.

We do not sell your personal information. We do not use your documents or association data to train AI models for other customers, and one association's content is never used to answer another association's questions.

4. AI processing

To answer questions, Asset Pal sends relevant excerpts of your documents and your question to AI models through Lovable's AI gateway. These providers process the data to generate an answer and do not retain it to train their models. Scanned documents and photos may be processed the same way to extract text and condition estimates.

5. Who can see your information

Within your association: members see documents according to each document's visibility level (All Association Members, Board Only, or Private). Only Treasurers and Accountants can see billing details.

Service providers: we use a small number of vendors to run Asset Pal — cloud hosting and database (Lovable Cloud), payment processing (Stripe), transactional email, and marketing email (Brevo, if you join our mailing list). Each is bound by its own privacy and security commitments and may process data only to provide its service to us.

Legal: we may disclose information if required by law, subpoena, or to protect the rights and safety of our users.

6. Data retention and deletion

We keep your data while your subscription is active. After cancellation, workspace data remains available for export for 90 days and is then deleted. You may delete individual documents at any time. To delete your account or an entire workspace, contact support@assetpal.ai.

Backups and logs are retained for a limited period and then overwritten.

7. Security

We use encryption in transit, row-level access controls in the database, and role-based permissions throughout the app. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you without undue delay.

8. Your rights and choices

You may access, correct, export, or delete your personal information at any time from within the app or by emailing support@assetpal.ai. Depending on your state (including California, Virginia, Colorado, and others), you may have additional rights regarding your personal data; we honor those requests for all users regardless of state.

Marketing emails include an unsubscribe link. Service emails (such as password resets) are necessary to operate your account and cannot be switched off while you have one.

9. Children

Asset Pal is for association boards and their members. It is not directed at children under 18, and we do not knowingly collect their information.

10. Changes and contact

We may update this policy from time to time. We will notify subscribers of material changes by email or in-app notice at least 14 days before they take effect.

Privacy questions or requests: support@assetpal.ai, or BRT Publications LLC, Berlin, Maryland.