Last updated: 2026-05-05

Privacy Policy

FromResident connects prospective renters with verified residents in luxury San Francisco buildings. This page explains what data we collect, how we use it, and the choices you have.

What we collect

  • From your Google or LinkedIn login: name, email, and profile photo.
  • If you sign up as a resident: building, unit type, floor range, and approximate move-in date.
  • Messages you exchange with other users on the platform.
  • Ratings and feedback you submit after conversations.
  • Anonymous usage analytics (page views, button clicks) via PostHog.

During the pilot, we are not collecting phone numbers, government ID, or lease documents. At official launch we will, and we will use a trusted third-party verification service to handle them.

How we use it

  • Match renters with verified residents in the building they are considering.
  • Display resident profiles to renters. Profiles use pseudonyms publicly. Real names are only revealed inside an active conversation after the resident sends at least one reply.
  • Improve the product through aggregate analytics.
  • Send you transactional emails (signup confirmations, message notifications).

Third-party services

We use a small number of third parties to run the service. Each has its own privacy policy.

  • Vercel — hosting and request routing.
  • Supabase — database and (later) document storage.
  • Google and LinkedIn OAuth — sign-in.
  • Stripe — payment processing (once payments go live).
  • PostHog — anonymous product analytics.
  • Resend — transactional email delivery.
  • Google Maps Places — address autocomplete on the resident signup form.

Data retention

  • Account data is retained until you delete your account.
  • Messages are retained until either party deletes their account.
  • Verification documents (when collected at official launch) will be auto-deleted after 30 days.

Your rights

  • Access: email us and we will send you a copy of your data.
  • Deletion: visit your Account page and use “Delete my account”. This is permanent and cascades to your messages, ratings, and resident profile.
  • California residents (CCPA): right to know, right to delete, and right to opt out of sale. We do not sell personal data.

Cookies and tracking

We use a session cookie for authentication (NextAuth) and an anonymous identifier cookie for analytics (PostHog). No advertising trackers.

Contact

Questions or requests: please use our contact form.

Changes

We will update this page if our practices change. The “Last updated” date at the top will be revised.