Privacy Policy

Effective Date: September 15, 2026

TownSquare HOA (“TownSquare,” “Company,” “we,” “our,” or “us”) respects your privacy and is committed to safeguarding the personal and association information entrusted to us by community associations, board members, property managers, and homeowners.

1. Zero Data Monetization Guarantee

We do not sell, rent, lease, or monetize your community data, email addresses, phone records, or resident rosters to any third-party data brokers, marketers, or advertisers. Your data belongs exclusively to your association.

2. Architecture-Level Data Isolation

Unlike legacy multi-tenant SaaS platforms where thousands of communities share a single monolithic database, TownSquare provisions an isolated container with a dedicated database file for each subscriber. This architecture physically separates your association’s records, preventing cross-tenant leakage and ensuring complete operational privacy.

3. Information We Collect and Process

Account & Onboarding Data: Community name, billing contact email, administrator name, and parcel/unit counts collected during signup.
Resident Portal Records: Roster names, property addresses, dues transactions, ARC architectural submissions, and maintenance requests entered by your board and residents.
Audit & Security Telemetry: Login timestamps, IP addresses, and user-agent strings retained strictly for account security auditing, brute-force defense, and multi-factor authentication (MFA).

4. Payment Security & PCI DSS Compliance

Payment card processing and bank ACH transfers are powered directly by Stripe. All sensitive credit card numbers and banking credentials bypass our web servers entirely and are tokenized directly within Stripe’s PCI DSS Level 1 certified infrastructure.

5. Data Retention & Snapshot Archiving

We maintain automated point-in-time encrypted snapshots of your container database to facilitate disaster recovery. Upon subscription termination, Customer Data is preserved for thirty (30) days to allow manual export, after which containers and associated volume stores are securely shredded.

6. Privacy Inquiries

If you have questions regarding this Privacy Policy or wish to exercise data rights, please email us at [email protected].