Privacy Policy

1. Information We Collect

We limit our collection of data to only what is strictly necessary to run the Service. This includes:

• Email Address: Used for secure, passwordless authentication via magic login links.
• Space Rental Requests: Renter inputs specifying space needs, including event type, space type, dates, budget, headcount, location preferences, amenities, and optional notes.
• Proposals: Host pitches including Subler listing URLs and pitch text.
• Session Tokens: Cryptographic tokens stored in databases to maintain secure login sessions.

2. What We Do Not Collect

Unlike many platforms, this subdivision app is purposefully minimal. We explicitly do not collect or store the following:

• User names (the app contains no name field, using email address exclusively as your identifier).
• Payment details or billing addresses.
• Phone numbers or mailing addresses.
• GPS location coordinates or device photos.
• Google Account connections or other social profile integrations.

3. Sources & Why We Collect It

We collect information directly from you when you submit a renter request, submit a proposal, or log into the application. We process this information to:

• Authenticate your identity and secure access to your account.
• Deliver the space matching service by letting renters search listings and hosts submit proposals.
• Protect the app from abuse, bot traffic, spam, and rate limit violations.

4. Third-Party Data Processors

To host the App and handle secure processes, we engage selected third-party service providers. They only process your data to the extent required to execute their task:

• Resend: Used to dispatch magic link authentication emails to your inbox.
• Neon: Provides our secure serverless PostgreSQL database hosting where profiles, requests, and proposals are stored.
• Arcjet: Inspects traffic requests to prevent malicious bot activity, detect intrusion attempts, and enforce application-level rate limits.
• Vercel: Hosts our application servers, APIs, and cloud environment.

5. No Sales or Advertising

We do not sell, rent, trade, or share your personal data with third parties for commercial or advertising purposes. We do not run ads or employ tracking pixels for behavioral remarketing within the Service.

6. Data Export & Deletion

We believe in total user data agency. You can perform the following actions at any time directly in your account:

• Export Your Data: Generate and download a formatted JSON file copy containing your profile parameters, rental requests, and proposals via the settings page.
• Delete Your Account: Submit a deletion request in the settings panel. Doing so deletes your user record and all associated request and proposal entries permanently.

7. Data Retention

Your data is retained only for as long as your account remains active. Upon requesting account deletion through your settings page, all associated user data, requests, and proposals are permanently expunged from our production databases within thirty (30) days.

8. State Privacy Rights (CCPA / VCDPA)

If you reside in California (under the CCPA) or Virginia (under the VCDPA), you have specific statutory rights, including:

• The right to know what personal data we collect (detailed in Section 1).
• The right to request deletion of that personal data (detailed in Section 6).
• The right to export/obtain a copy of your personal data (detailed in Section 6).
• The right to non-discrimination for exercising your privacy rights.

Because we do not collect names, payment data, or sell your details, our processing is inherently minimal. To exercise these rights manually or if you have questions, contact us at info@getsubler.com.

9. Children's Privacy

This App is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal data from children under 18. If we learn we have collected info from a child under 18, we will take immediate steps to delete it.