Privacy Policy

• Account: your name, email, and a securely hashed password (we never store your password in plain text).
• Sublease details:the address, dates, rent, deposit, and terms you enter, plus your counterparty's name and email.
• Signatures: your typed e-signature and when you signed.
• Payment setup: only the last four digits of a bank account and an opaque token from our payment provider, never your full account or routing number.
• Condition photos: the photos you upload and basic capture metadata (timestamp; camera make/model if present). We do not store GPS coordinates.
• Usage & security logs: events such as logins, signatures, and payments, with timestamps and IP address, for security and to understand the flow.

To provide the service, send you transactional email (confirmations, invites, password resets), prevent fraud and abuse and keep accounts secure, and understand and improve the flow. We do not sell your data or use it for third-party advertising.

Service providers that run Avouchprocess data on our behalf: database & file storage hosting (Supabase), email delivery (Resend), payments (Stripe, test mode), and application hosting (Vercel). We also disclose information when required by law.

Passwords are hashed with scrypt; traffic is encrypted in transit (HTTPS); access to a sublease is limited to its parties; and full bank numbers are never stored. No system is perfectly secure, but we take reasonable measures to protect your data.

We keep your data while your account and sublease are active. You can delete your account yourself from your account settings, or email support@avouchsublease.com to request access to, correction of, or deletion of your data.

We use a single secure, http-only cookie to keep you signed in. No third-party advertising or tracking cookies.

Avouch is currently a prototype in test mode; no real money or real bank credentials are processed.

For privacy questions or a data request, email us at support@avouchsublease.com.