Privacy Policy

This policy explains what 9TENANT, INC. (“9tenant,” “we”) collects when you use 9tenant.com, why we collect it, and the choices you have. The short version: we collect what the product needs to keep your tenancy record and mail letters for you, we don’t sell your data, and we don’t use third-party advertising trackers.

• Account information. Your name and email address, provided through our sign-in provider (Clerk).
• Tenancy details. Information you enter about your rental: your unit address, your landlord’s name and mailing address, lease dates, rent, and security deposit amounts.
• Vault content. Entries, photos, files, and documents you add, and emails you choose to forward to your private 9tenant forwarding address.
• Letters. The content of letters you compose and send, plus delivery tracking events from USPS via our mailing partner.
• Payment records. Purchases and credit history. Card payments are processed by Stripe; we never see or store your full card number.
• Usage analytics. We record product events first-party (for example: a visit to our landing page, a vault entry created, a letter sent) with timestamps, so we can understand what’s working; these events stay on our own infrastructure and anonymous events contain no personal information. If you accept analytics cookies (see Section 9), we also use Google Analytics to measure site traffic and usage patterns (pages visited, approximate location, device and browser type). Google Analytics does not receive your name, email address, or anything you store in your vault.
• Logs. Standard server logs (IP address, request path, status) for security and reliability. Authentication credentials are redacted from logs.

We do not collect Social Security numbers, dates of birth, or credit reports, and we do not run background checks.

• to run the Service: store your record, render PDFs, and print and mail letters you ask us to send;
• to process payments and maintain your credit balance;
• to send transactional email (welcome, receipts, letter status) from notice@9tenant.com;
• to secure, debug, and improve the Service;
• to comply with legal obligations.

We do not sell or rent your personal information, and we do not use your vault content for advertising or to train AI models.

Your vault is private to your account. Your landlord is not notified that you use 9tenant, and certified letters carry your name and return address, not ours. Our administrators can access letter content when you submit a custom letter for pre-mailing review, when needed to operate the Service (for example, investigating a failed dispatch you report), or as required by law; administrative actions are logged.

We share data with processors only as needed to run the Service:

• Clerk — sign-in and account security;
• Stripe — payment processing;
• LetterStream — printing and USPS certified mailing of letters you send;
• Postmark — delivering transactional email and receiving mail you forward to your vault address;
• Google Cloud — hosting, database, and file storage (United States);
• Google Analytics — site traffic and usage measurement (United States).

Each provider receives only what its function requires (for example, LetterStream receives the letter PDF and addresses when you send a letter).

• Your vault, tenancy, and letter records are kept while your account is active.
• Database backups are retained for 7 days.
• Mailing-partner activity logs are pruned after roughly 90 days.
• Product analytics events are pruned after roughly 12 months.
• Google Analytics data is retained for up to 14 months.

You can export your record as a PDF at any time. To delete your account, email notice@9tenant.com from your account email address. Deletion deactivates your account immediately and removes your data from the live database; copies persist in encrypted backups for up to 7 days before aging out.

Depending on where you live (for example, under the California Consumer Privacy Act or the EU/UK GDPR), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. We honor these requests regardless of location — email notice@9tenant.com and we will respond within 30 days. We do not discriminate against you for exercising privacy rights, and we do not sell personal information, so there is nothing to opt out of selling.

Data is encrypted in transit (TLS) and at rest on our cloud provider. Access to production systems is restricted, uploads are private by default with per-object access control, and administrative actions are audit-logged. No system is perfectly secure — keep your own copies of critical documents and use a strong, unique password.

We use the cookies required for sign-in sessions (set by our authentication provider) and, only if you accept them, Google Analytics cookies that help us measure how the site is used. Google Analytics does not run until you choose “Accept” in the cookie notice. We do not use advertising or cross-site tracking cookies. You can change your choice at any time: reset cookie preferences.

The Service is for adults managing a tenancy and is not directed to anyone under 18. We do not knowingly collect information from children.

If we change this policy, we will post the update here and revise the “Last updated” date; for material changes we will make reasonable efforts to notify you by email.

Privacy questions or requests: notice@9tenant.com. Postal: 9TENANT, INC., Boston, MA, USA.