Privacy Policy

Last updated: August 25, 2026

Welcome to our website. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, including any other media form, media channel, or mobile website related or connected thereto.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the website depends on the content and activities you engage in, and includes:

• Derivative Data: Information our servers automatically collect when you access the website, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the website.
• Tracking Data: Information collected via cookies, web beacons, and pixels to analyze traffic and behavior (such as Google Analytics and Meta Pixel, detailed below).
• Account and Profile Data: When you register an account via Joomla, we collect your chosen username, email address, password, and any custom profile fields you fill out.
• Sensitive Personal Information (Rental Applications): If you upload a rental application, we collect the personal documents and files you submit. These documents may contain sensitive personal information under California law, including your legal name, physical address, employment history, financial information, and government identifiers.
• Contact Form Data: If you use our Contact Us form, we collect your name, email address, message subject, and the contents of your inquiry.

2. Use of Your Information

Having accurate information about you allows us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the website to:

• Monitor and analyze usage and trends to improve your experience with the website.
• Measure the effectiveness of our advertising and marketing campaigns.
• Increase the efficiency and operation of the website.
• Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.

3. Data Retention Limits

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Analytics and Tracking Data: Standard usage data collected via third-party cookies (such as Google Analytics) is retained according to their standard policy timelines or until you clear your browser cookies. As specified in our Cookie Policy, _ga tracking cookies persist for up to 2 years, and _fbp advertising tokens persist for up to 3 months.
• User Accounts and Applications: We retain your Joomla account profiles for as long as your account remains active. Uploaded rental application files processed via Edocman are temporarily transferred to Google Drive for transit, immediately downloaded to our secure local storage, and permanently deleted from Google Drive within 15 minutes. Local files are retained only as long as necessary to evaluate tenancy or comply with California record retention laws.
• Server Logs: Operational server log data containing IP addresses and system information is kept for system security reasons and is automatically overwritten or deleted after 366 days.

4. Third-Party Data Sharing & Analytics

We partner with selected third-party vendors to track, analyze, and optimize our website performance and marketing campaigns. These third parties use tracking technologies (such as cookies) to collect data about your interactions with our website.

Google Analytics

We use Google Analytics to monitor and analyze web traffic. Google Analytics uses the _ga cookie to identify unique visitors and analyze user behavior. The information generated about your use of the website is typically transmitted to and stored by Google on servers in the United States.

• Data Processed: IP addresses (anonymized where possible), browser types, device information, pages visited, and time spent on site.
• Purpose: Optimizing website performance, tracking user engagement, and reporting.
• Opt-Out: You can prevent your data from being used by Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Meta Pixel (Facebook Advertising)

We use the Meta Pixel to measure the effectiveness of our advertising campaigns and deliver targeted advertisements to you. The Meta Pixel uses the _fbp cookie to match your behavior on our website with your Facebook or Instagram profile.

• Data Processed: Conversion actions (e.g., pages viewed, buttons clicked), hashed user identifiers, and browser session data.
• Purpose: Ad targeting, retargeting, conversion tracking, and building lookalike audiences.
• Opt-Out: You can adjust your advertisement preferences or opt out of targeted ads directly within your Facebook Ads Preferences settings.

1. Analytics & User Behavior Tracking

We use JRealtime Analytics to understand how visitors interact with our website and to improve our services.

• For Registered Users: We collect and process your username, email address, and assigned user groups when you are logged in.
• For Guests/Unregistered Visitors: We assign a randomized pseudonym (temporary guest name) to track session behavior without directly identifying you.
• Behavioral & Technical Data Collected: We track your IP address, real-time page views, specific clicks, navigation flow, and the exact time spent on individual pages. We also log your browser type, operating system, device type, browser language settings, and referral traffic sources (how you arrived at our site).
• Location Data: We process country-level origin data based on your IP address.

2. Website Security & Fraud Prevention

To protect our website, users, and data from cyber threats, we use Securitycheck Pro.

• Data Collected: We collect IP addresses, User-Agent strings (browser and device details), unauthorized access attempts, and file modifications.
• Purpose & Processing: This data is used to log administrative actions, monitor failed logins, and inspect firewall traffic to block malicious requests.
• Spam Prevention: Registration details are screened against external spam databases to prevent fraudulent accounts.
• Data Retention: The IP addresses of users attempting to compromise or hack the website are retained indefinitely and banned from future access for security purposes.

3. Automated Bot Detection & Spam Protection

We use hCaptcha (operated by Intuition Machines, Inc.) to distinguish between human visitors and automated bots on our forms.

• Interaction & Telemetry Data: When you interact with a challenge, hCaptcha collects your IP address, browser type, device type, operating system, platform type, Internet Service Provider (ISP), and access timestamps. It also analyzes hardware data and behavioral biometric data, including mouse movements, scroll patterns, interaction timing, and motion signals (such as gyroscopic data).
• Challenge Responses: hCaptcha collects the answers you provide during a challenge (e.g., clicking specific image tiles, text from audio transcriptions, or visual prompts).
• Third-Party Processing: This data is shared with Intuition Machines, Inc. They use your challenge responses to train and improve their machine learning models.

Google Workspace (Cloud Storage Transit)

We utilize Edocman to securely route your uploaded rental applications through Google Drive cloud storage. Google acts as a data processor during this transmission window.

• Data Processed: Submitted PDF/image documents containing employment history, financial data, or identification documents.
• Purpose: Automated file transit and backup routing between the website front-end and our internal local storage systems.
• Data Protection: Files are protected by Google's enterprise-grade encryption during transit and are deleted from the cloud server immediately after local download is complete.

Security of Your Information

We use industry-standard administrative, technical, and physical security measures to protect your account profiles and sensitive rental applications. Document uploads are safely handled through the Edocman extension within our secure Joomla Content Management System, utilizing Secure Socket Layer (SSL/TLS) encryption technology during transmission.

Access to your uploaded files is strictly restricted to authorized leasing personnel who require the data to evaluate tenancy. While we take rigorous steps to secure your personal data, no electronic transmission or digital storage system can be guaranteed 100% secure.

5. Links to Third-Party Websites

Our website may contain links to external websites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies. We strongly advise you to review the privacy policy of every site you visit.

6. Your California Privacy Rights (CCPA/CPRA)

If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information. These rights include:

• Right to Know / Access: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you over the past 12 months.
• Right to Delete: You have the right to request the deletion of your personal information collected or maintained by us, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt-out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. Because we use the Meta Pixel (_fbp cookie) for targeted ads, this action may constitute "sharing" under California law. You can manage these preferences via your browser settings, our Concord cookie banner, or by adjusting your social media account settings.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Children's Privacy

Our website is not structured to attract children under the age of 13, and we do not knowingly collect personal information from children under 13 years of age. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.

How to Exercise Your Rights

To exercise your rights to access, delete, or correct your information, please submit a verifiable request to us via the contact details provided by the address link below. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.

Changes to our Privacy Policy

We may update our Privacy Policy from time to time. We will post any changes on this page and update the "Last Updated" date at the top. For major changes, we may also notify you by email or through a notice on our website.