Privacy Policy

Last updated: February 2026

1. Information We Collect

We collect the following information when you use DepositBack:

  • Personal information: name, email address, phone number, current mailing address
  • Rental information: rental property address, move-in/move-out dates
  • Landlord information: landlord name, mailing address, property management company
  • Deposit information: deposit amount, amount returned, dispute details
  • Payment information: processed securely by Stripe; we do not store credit card numbers

2. How We Use Your Information

We use your information to:

  • Generate and send your demand letter via certified mail
  • Send you email notifications about your order status and delivery tracking
  • Process payments and refunds
  • Respond to your support requests
  • Improve our service

3. Third-Party Services

We share your information with the following third-party services as necessary to provide our service:

  • Stripe: payment processing. See Stripe's Privacy Policy.
  • PostGrid: certified mail printing and delivery. Your name, address, and landlord's address are shared to fulfill the mailing. See PostGrid's Privacy Policy.
  • Resend: transactional email delivery. Your email address is shared to send notifications. See Resend's Privacy Policy.
  • Supabase: database hosting. Your data is stored securely in a Supabase-hosted PostgreSQL database.

4. Data Retention

We retain your order data for as long as your account is active or as needed to provide our service. Order records are kept for a minimum of 3 years to support any potential legal proceedings. You may request deletion of your data by contacting us (see below).

5. Data Security

We implement reasonable security measures to protect your personal information, including encrypted data transmission (HTTPS), secure database access controls, and secure payment processing through Stripe. However, no method of transmission over the internet is 100% secure.

6. Your Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to know: You can request what personal information we collect, use, and disclose.
  • Right to delete: You can request deletion of your personal information.
  • Right to opt out: We do not sell your personal information to third parties.
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at support@depositback.co. We will respond within 45 days.

7. Cookies

We use minimal cookies necessary to operate the service (session cookies). We do not use tracking cookies or third-party advertising cookies.

8. Children's Privacy

DepositBack is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page.

10. Contact

For questions about this privacy policy or to exercise your privacy rights, contact us at support@depositback.co.