CondoStatBack to CondoStatYOUR DOCUMENTS. A CLEAR PURPOSE.
Privacy &
document handling.
A one-time report. A temporary document workspace. Keep your originals and download your completed report.
What we collect and why
Property and unit details, your name, email, role, order details and document requests keep the right people and files connected to the right review. When authorized uploads are enabled, condo documents, extracted text, findings and report copies support security checks, AI-assisted analysis, human review and delivery. Permission, payment-status, access, security and support records help us operate and protect the service.
Only upload documents you are authorized to share. Do not upload loan applications, credit reports, bank statements, Social Security numbers or personal financial records. Remove unnecessary personal information from condo documents. Keep your own original copies; CondoStat is not a permanent archive.
Who processes the information
Authorized CondoStat reviewers and service providers receive information needed for their roles: Supabase stores accounts, order records and private files; Vercel hosts the website and isolated processing; Anthropic provides AI-assisted analysis; Resend sends sign-in and report messages; and Stripe handles payments. Google Cloud stores limited recovery and deletion evidence. Our Google-hosted support mailbox receives information you email us. Stripe handles card details; CondoStat stores payment status and transaction references, not card numbers or security codes.
These services may process information outside your state or country under their service terms. Provider processing does not make your documents public, but it is not zero retention. Report notifications link to the service rather than attaching your condo package.
Order owners and invited contributors have different permissions. An upload invitation does not grant access to all documents, billing or the completed report. We may preserve or disclose narrowly necessary information to comply with law, address fraud or security incidents, or handle a legal claim.
A temporary workspace, not permanent storage
The collection and report-access clocks are separate. The dates shown for your order control; uploads, visits and corrections do not restart them. A review in progress can sit between these windows, so this is not a promise that every order is erased 60 days after creation.
| Stage | Document handling |
|---|---|
| Gathering documents | 30 days from workspace creation to gather and submit the package. New uploads and page views do not restart the clock. Unsubmitted workspaces close at the deadline, and their content is scheduled for removal through the verified cleanup process. |
| An active review or unresolved issue | A submitted package is reviewed as a fixed version. We finish or resolve an unresolved paid order rather than silently deleting it when its collection window ends. Stalled work and corrections require attention; this is not permanent storage. |
| Report released | 30 days from the report being released and available to you to download it and raise questions. Draft generation does not start this clock. At the deadline, hosted report access closes and uploaded documents, extracted text, working findings and hosted report content are scheduled for removal. |
| Minimal business records | We keep minimal sales, fee and refund evidence for tax support, normally through four years after the later applicable return due date or filing date, and longer when an applicable tax rule or unresolved examination requires it. This is not four years from your order. Other consent, delivery, support and security records are reviewed when their specific purpose or issue ends and removed when no longer needed. Minimal opt-out records may remain to honor your choices. These exceptions do not justify keeping the full condo package indefinitely. |
There are no routine extensions. Corrections do not automatically restart report access; unresolved errors on our side are escalated for resolution. A specific legal preservation requirement may prevent deletion of narrowly identified records.
Report availability is not a guarantee that its supporting documents remain current. Reports reflect the documents and conditions reviewed at the time. Known document expiration dates still apply, even within your download window.
At launch, the owner reviews the expiry queue daily and handles eligible content through a controlled removal procedure. Closing access and deleting stored content are separate steps; deletion is not instantaneous at the deadline. A failure or preservation hold is tracked until resolved. Do not rely on a reminder email: download your report before its displayed closing date. After removal, a later review requires a fresh upload and may be a new order.
Backups and provider-held copies can outlast deletion from active storage. An old backup is kept unavailable to customers until required removals are reapplied and checked. We do not promise immediate destruction of every copy.
For AI-assisted review, Anthropic's standard API policy generally removes inputs and outputs within 30 days, subject to its stated contractual, safety and legal exceptions and different handling for some services. This provider clock is separate from your CondoStat workspace and report-access clocks. We have not confirmed a zero-retention arrangement. See Anthropic's retention policy.
Resend states that email and log data on its standard Free, Pro and Scale plans is retained for 30 days. Copies in your mailbox or our support mailbox have a separate lifecycle. Payment-provider records also follow Stripe's own legal and service requirements, not the document-access clock. See Resend's data handling and Stripe's privacy notice.
Supabase database backups can contain saved findings and report content even after active records are cleared. Our current project uses Supabase Pro daily database backups, with a published seven-day backup-access window; point-in-time recovery is not enabled. This configuration was checked October 11, 2026. A backup-access window is not a guarantee that every provider-held copy is physically destroyed at that exact time. Database backups do not contain the uploaded Storage file bytes themselves. See Supabase's backup documentation. Deletion receipts must be checked before any restored database is allowed to serve customers. We must recheck this disclosure if the launch project or backup configuration changes.
Reports and marketing are separate
Sign-in, order updates and report delivery are service messages. Marketing updates require a separate optional choice, and opting out does not prevent report delivery. A marketing subscription may remain after a document workspace expires, until you unsubscribe; that does not authorize retaining the documents for marketing.
We do not sell uploaded packages, publish them or add their contents to a shared condo-project database. We do not use them to train our own general-purpose AI model. These statements do not replace the separate AI-provider retention terms above. Unrelated future reuse requires appropriate notice and permission.
Address suggestions, cookies and tracking
Where Google Maps address suggestions are enabled, typing at least three characters sends address-search text and normal connection information, such as IP address and website origin, to Google. The integration does not send your name, email, separate unit field, documents or findings. Typing still sends address text even if you do not select a suggestion. Address suggestions do not establish FHA approval.
We use Vercel Web Analytics on public pages to understand visitor counts, pages viewed, referring websites, country-level location, and device/browser categories. It does not use analytics cookies. Vercel processes connection information to produce aggregate statistics; its visitor identifier changes daily. We exclude private sign-in, order, owner and report pages, remove query strings and URL fragments from tracked page URLs, and do not send form values, documents or report findings to analytics. We do not load analytics when your browser sends Do Not Track or Global Privacy Control. This is not advertising tracking or session recording. Authentication uses browser storage, and hosting and email providers can retain operational records. Google and other providers process information under their own policies. See Vercel analytics privacy information.
Your questions, corrections and deletion requests
CondoStat is operated by Bryan Bowmer, doing business as CondoStat, a sole proprietor. Email bryan@condostat.com with the subject “Privacy request” to request access, correction or deletion, or ask about retention. Do not attach documents, passwords or financial records. We verify identity and authority as needed and explain applicable retention limits. Available statutory rights depend on the law that applies to you and the business.
The service is intended for adults, not children. No security measure can guarantee that an incident will never occur.
Changes to this notice
We update the effective date on this page when practices change. Material changes will be communicated through the site and, where appropriate, email. An update alone does not authorize unrelated reuse of previously uploaded documents.