Privacy Policy

1. Introduction

Welcome to Domari. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property finance management platform.

By using Domari, you agree to the collection and use of information in accordance with this policy. If you have any questions or concerns about our policy or practices, please contact us.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address (required for authentication)
• Name and phone number (optional)
• Password (securely hashed and stored)
• Profile image (if you choose to upload one)
• Authentication provider information (if using Google OAuth)

Property Data

To help you manage your properties, we collect:

• Property details (name, address, city, state, zip code, country)
• Property type and occupancy status
• Financial information (purchase price, market value, rent amount)
• Property images you upload
• Tenant count and property status

Financial Data

To provide financial tracking and reporting, we collect:

• Transaction amounts, dates, and descriptions
• Income and expense categorization
• Monthly financial metrics and cash flow data
• Transaction recurrence patterns

User Preferences

• Currency and timezone settings
• Dashboard customization preferences

Subscription & Payment Data

• Stripe customer ID and subscription ID
• Subscription plan and status
• Billing period and payment history
• Trial period information

Usage Analytics

We use Umami for product analytics to understand how users interact with our platform. Umami collects:

• User interactions and feature usage patterns
• Page views and navigation paths
• User account identifiers (email, user ID) to track authenticated users
• Browser and device information
• Session recordings and user behavior analytics

Umami is GDPR and CCPA compliant. You can opt out of analytics tracking by contacting us at support@domari.app.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our property management platform
• Process your transactions and manage your properties
• Generate financial reports and analytics
• Manage your subscription and billing
• Send you service updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Improve our services and develop new features
• Monitor usage patterns to optimize performance
• Protect against fraudulent or illegal activity
• Comply with legal obligations

4. Data Storage & Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using SSL/TLS
• Passwords are securely hashed using bcrypt
• Database access is restricted and monitored
• Regular security audits and updates
• Secure authentication with NextAuth.js

Your data is stored on secure servers provided by Supabase (PostgreSQL database) with AWS S3 for file storage. These providers maintain SOC 2 Type II compliance and implement robust security measures.

5. Third-Party Services

We use the following third-party services to operate Domari:

Supabase

Database hosting and file storage. View their privacy policy at supabase.com/privacy

AWS S3

Property image storage through Supabase integration. View AWS privacy policy at aws.amazon.com/privacy

Stripe

Payment processing and subscription management. We do not store credit card information. View Stripe's privacy policy at stripe.com/privacy

Google OAuth

Optional authentication provider. View Google's privacy policy at policies.google.com/privacy

Umami

Product analytics and user behavior tracking to improve our services. Collects user identifiers, feature usage, and behavioral data. Privacy policy: umami.is/privacy

6. Your Rights & Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Request deletion of your account and associated data
• Export: Download your property and transaction data
• Objection: Object to processing of your personal information
• Portability: Receive your data in a machine-readable format

To exercise these rights, please contact us through the contact information provided below. We will respond to your request within 30 days.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax and accounting requirements)
• Resolve disputes and enforce our agreements

When you delete your account, we use soft deletion to maintain data integrity for 30 days before permanent deletion. You can request immediate permanent deletion by contacting us.

Financial records may be retained longer to comply with legal and tax requirements.

8. Children's Privacy

Domari is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending you an email notification (for significant changes)

Your continued use of Domari after any changes indicates your acceptance of the updated Privacy Policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@domari.app