This Privacy Policy describes how Blue Swan Consulting ("Blue Swan," "we," "us," or "our") collects, uses, and shares information when you use securitydeposit.co and the security deposit demand letter service offered there (together, the "Service").
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
1. Information we collect
Information you provide
Case questionnaire. To estimate your potential recovery and build your demand letter, we ask about your tenancy and your deposit. Depending on your answers, this includes: your deposit amount and how much was returned, the state (and in some states, the city or ZIP code) of the rental, your move-out date, whether and when you provided a forwarding address in writing, whether you received an itemized statement of deductions and details about the charges, the length of your tenancy, the condition and circumstances of your tenancy, how your tenancy ended, what evidence you hold, whether you paid the deposit and how, and whether you have already sent a written demand or filed a small claims case.
Letter details. To generate your demand letter, we collect your full name, your current mailing address, the rental property address, and your landlord's or property manager's name and mailing address. If you choose the premium package, we also collect your signature so the letter can be signed and mailed on your behalf.
Account information. When you create an account or provide your email address during the questionnaire, we collect your email address and any password or login credentials you set.
Payment information. Payments are processed by Stripe, Inc. We do not receive or store your full card number. We receive confirmation of payment, the product purchased, and limited billing details (such as the last four digits of your card and billing ZIP code) from Stripe. Stripe's handling of your payment data is governed by Stripe's own privacy policy, available at stripe.com/privacy.
Information about other people
To prepare and (for premium customers) mail your demand letter, you provide us with your landlord's or property manager's name and mailing address. We use this information only to prepare, address, and deliver your demand letter and to maintain a record of your case. We do not use landlord contact information for marketing or sell it to anyone. You are responsible for ensuring you have an appropriate basis to provide this information, which in the ordinary case you do, as it is information you hold as a party to your own tenancy.
Information collected automatically
When you use the Service, we and our analytics providers automatically collect certain information, including your IP address, approximate location derived from your IP address (which we may use to pre-fill your state in the questionnaire), device and browser type, pages viewed, buttons clicked, questionnaire steps completed or abandoned, referral source, and timestamps. This is collected through cookies and similar technologies. See Section 5 (Cookies and analytics).
2. How we use your information
We use the information we collect to:
- Calculate your estimated recovery and generate your demand letter;
- Create and maintain your account and store your case so you can return to it;
- Process payments and deliver the product you purchased, including printing, signing, and sending your letter by certified mail if you purchased the premium package;
- Send transactional emails about your case and your letter (for example, delivery confirmations, certified mail tracking, and receipts);
- Send you a reminder if you start the questionnaire but do not finish it;
- Send you marketing emails about our products and related tenant-rights topics, which you can opt out of at any time (see Section 6);
- Improve the Service, including analyzing how users move through the questionnaire and where they drop off;
- Detect and prevent fraud and abuse, and comply with legal obligations.
3. How your letter is generated
Your demand letter is generated automatically from the answers you provide. No attorney reviews your letter before it is delivered. Please review your letter carefully before sending it.
4. How we share information
We do not sell your personal information. We share information only with:
- Service providers. Stripe (payments); Google Analytics and Mixpanel (analytics); Resend (transactional and marketing email); our printing and mailing provider (printing and certified mailing of premium letters); and Hetzner (cloud hosting). Each is engaged to perform services for us and is limited in how it may use your information.
- Your landlord. The whole point of the Service is a letter addressed to your landlord. The letter contains information you provided. For premium customers, we mail it directly; otherwise, you deliver it yourself.
- Legal requirements. We may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of Blue Swan, our users, or others.
- Business transfers. If Blue Swan is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
5. Cookies and analytics
We use cookies and similar technologies to operate the Service and to understand how it is used. Specifically:
- Google Analytics collects usage data such as pages visited, session duration, and approximate location. You can opt out using Google's browser add-on at tools.google.com/dlpage/gaoptout.
- Mixpanel collects event-level data about how you move through the questionnaire, such as which steps you complete.
You can control cookies through your browser settings. Disabling cookies may affect features of the Service, such as saving your progress.
6. Marketing emails and your choices
If you provide your email address, we may send you: (a) transactional emails about your case, which you will receive as long as you use the Service; (b) a reminder email if you leave the questionnaire unfinished; and (c) marketing emails about our products and tenant-rights topics.
Every marketing and reminder email includes an unsubscribe link. You can opt out of marketing at any time by clicking that link or emailing us at support@securitydeposit.co. Opting out of marketing does not stop transactional emails about a purchase or case you have in progress.
7. Data retention
We retain your account information and case data for as long as your account remains active, so you can return to your case, re-create your letter, and maintain a record of your demand. Demand letters often precede small claims cases, and users frequently need their case record months later, which is why we do not automatically delete case data on a fixed schedule.
You may request deletion of your account and associated data at any time (see Section 8). We may retain limited records where required for legal, tax, accounting, or fraud-prevention purposes, for example payment records.
8. Your privacy rights
Depending on where you live, you may have some or all of the following rights: to know what personal information we have collected about you; to access a copy of it; to correct it; to delete it; and to opt out of the sale or sharing of personal information (we do not sell personal information or share it for cross-context behavioral advertising).
California residents. The California Consumer Privacy Act, as amended by the CPRA, provides California residents the rights listed above, as well as the right not to be discriminated against for exercising them. To exercise any right, email support@securitydeposit.co with the subject line "Privacy Request." We will verify your identity using the email address associated with your account and respond within the time required by law. You may designate an authorized agent to submit a request on your behalf.
Residents of other states. Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Texas, Virginia, and others) may exercise equivalent rights using the same contact method.
We do not currently respond to "Do Not Track" browser signals. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or sharing to opt out of; if that ever changes, we will honor Global Privacy Control signals as required by law and update this policy.
9. Security
We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and reliance on established providers (such as Stripe) for the most sensitive data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is intended for adults entering into or exiting rental agreements. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at support@securitydeposit.co and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice on the Service before the change takes effect. The effective date at the top reflects the latest revision.
12. Contact us
Blue Swan Consulting
support@securitydeposit.co