Privacy notice

This notice applies to the Indivisible By One public housing directory, availability pages, inquiry and waiting-list forms, rental-application workspace, and authenticated resident and staff portals. In this notice, “Indivisible By One,” “we,” and “us” mean the participating property owner or manager operating the portal for the community involved.

A community website, tenant-screening company, payment provider, or other site reached through a link may have its own privacy notice. This notice does not replace that provider's notice.

Depending on how you use the portal, we may collect:

• Housing inquiries and waitlists: name, email, telephone number, preferred contact method, selected homes or bedroom needs, budget, move timing, and optional message.
• Rental applications: applicant and household names, dates of birth, contact details, household composition, vehicles, animals, income sources, rental history, landlord contacts, housing-history explanations, certifications, signature, and supporting income images.
• Resident services: account identity, household, occupancy and lease information, ledger activity, documents, maintenance requests, attachments, comments, and notification preferences.
• Staff and security records: authorized membership, role, account-security state, audit history, and records of sensitive operational actions.
• Technical information: request time, page or source URL, browser and device information, security events, and keyed abuse fingerprints used for rate limits. The portal does not use a public application number or property identifier as authorization.

An adult applicant may provide limited information about children who will live in the home. The portal is not intended for a child to create or manage an account independently.

We use portal information to:

• show management-verified housing availability;
• respond to inquiries and manage property waiting lists;
• receive, verify, review, and decide rental applications;
• create approved resident, household, occupancy, lease, and ledger records;
• provide resident documents, maintenance, account, and notification services;
• protect accounts, prevent abuse, investigate errors, and preserve audit evidence; and
• meet legal, accounting, safety, housing, and recordkeeping obligations.

The portal is not configured to sell or rent personal information for money, and application or resident information is not currently used for cross-context behavioral advertising.

Information may be disclosed only as reasonably needed to:

• authorized property owners, administrators, managers, and service personnel with duties related to the relevant community;
• Supabase, which provides authentication, database, and private file storage services;
• Vercel, which hosts the portal and may provide aggregate traffic and performance measurement on ordinary public pages;
• Resend, when production email delivery is enabled, and TransUnion SmartMove when a separate tenant-screening invitation is requested;
• a payment processor only when online payments are explicitly enabled and the resident chooses to use that service;
• accountants, insurers, attorneys, auditors, regulators, courts, law enforcement, or emergency services when permitted or required; and
• a successor owner or manager responsible for an affected property, subject to applicable obligations and safeguards.

Resident and applicant information is not made public through the property directory. Public availability uses approved marketing profiles and aggregate rental-space counts rather than resident data.

If an application reaches screening, each adult receives a separate invitation from the selected screening provider. That provider collects its own authorization and identity information. The portal is designed not to store Social Security numbers, raw credit reports, credit scores, or criminal and eviction report files.

The portal may retain the provider name, an external reference, workflow status, review timestamps, decision evidence, and any required adverse-action record. Screening does not make an automatic housing decision; authorized staff perform human review. Learn more in our Fair Housing statementand the FTC's landlord screening guidance.

The portal uses necessary cookies for secure sessions, application-draft access, request integrity, and role routing. An application draft is linked to an opaque browser cookie, so applicants should return using the same private device and browser until the draft is submitted or expires.

Aggregate traffic and performance measurement may operate on ordinary public pages. Those tools are excluded from application, authentication, account, staff, and resident routes, and form contents are not intended to be sent as analytics events.

The portal's current operational defaults are:

• Unsubmitted application drafts: ordinarily expire after about three hours without a save. Saving may extend the draft, but never beyond seven days from creation. Periodic cleanup removes expired draft data and associated uploads.
• Submitted income documents: scheduled for deletion after 180 days unless a documented extension or legal hold applies.
• Submitted application records: scheduled for deletion after 24 months unless a documented legal or operational reason requires otherwise.
• Listing inquiries and active waiting lists: the portal does not currently apply one automatic expiration period. A waiting- list record remains while active. When staff records a withdrawal, direct contact details, message, move timing, budget, and home preferences are anonymized while limited consent, status, and audit evidence remain.
• Approved applicants and resident operations: names and contact details needed for onboarding may be copied into resident records. The application number and limited onboarding lineage may remain after application cleanup. Resident, lease, financial, maintenance, and property records do not currently share one fixed deletion period; they are retained while needed for tenancy, account service, accounting, safety, disputes, and legal obligations.

Backup copies, security logs, and provider records may remain for a limited period under their normal protection and deletion cycles. A legal hold, active dispute, accounting rule, or other lawful obligation may delay deletion. These defaults may be revised after jurisdiction- specific review; this page will be updated if they change.

You may ask to access or correct information, withdraw from a waiting list, request deletion where available, change notification preferences, or ask questions about how information is handled. We may need to verify identity and property relationship before disclosing or changing a private record.

A request may be limited when information must be kept for a lease, accounting record, safety matter, legal claim, fraud prevention, screening or adverse-action requirement, or another lawful obligation. Use the privacy and data request instructions.

The portal uses private storage, role- and community-based access, multifactor authentication for sensitive staff work, encrypted network transport, expiring access tokens, request-integrity controls, rate limits, and audit records. Sensitive application and resident pages are excluded from public analytics.

No online service can guarantee absolute security. If you believe information or an account may have been exposed, do not include the sensitive information in a message; contact the relevant property promptly through the support center.

Privacy and data requests should be directed to the community connected to the record. The support center provides the current public telephone number, business email when available, and property website for every participating community.

We may update this notice as services, providers, or legal requirements change. The effective date at the top identifies the current version.