Privacy Policy
How DuesBoard collects, uses, and shares information for the marketing site and the HOA board application. Written for U.S. associations and residents — plain language, not legal theater.
1. Scope
This Privacy Policy explains how DuesBoard (“we,” “us,” “our”) handles information when you visit our marketing website, create or use a board or resident account in the DuesBoard application, or contact us. Related product rules are in our Terms of Service.
If you are a resident paying an association through DuesBoard, your board also decides what unit and owner data it stores. We process that data to provide the service to the association.
2. Information we collect
Account and profile data
When you sign up or are invited: name, email address, password (stored hashed), role (board vs resident), and association name. Board users may add phone or other contact fields if the product asks for them.
HOA operational data
Unit labels and addresses, owner/resident names and emails, assessment schedules and amounts, ledger entries (charges, payments, credits, adjustments, aging), announcements, documents you upload, and similar board-admin content. This is association business data entered by the board or generated by the product.
Payment-related data
We store payment metadata needed for the ledger and support — for example amount, currency, status, timestamps, payment method type (ACH vs card), Stripe payment/intent IDs, and which unit the payment applies to. We do not store full payment card numbers or bank account numbers. Stripe processes those details under Stripe’s privacy policy and PCI practices.
Marketing site and analytics
On the marketing site (and, where enabled, the app), we use Google Analytics 4 with measurement ID G-RFC5DS4VR4. GA4 may collect device/browser info, approximate location, pages viewed, and similar usage metrics via cookies or similar technologies. We use this to understand traffic and improve the site — not to sell personal profiles.
Technical logs
Server and hosting logs may include IP address, user agent, timestamps, and error diagnostics needed to operate and secure the service.
3. How we use information
- Provide, maintain, and improve DuesBoard (accounts, ledgers, portals, billing).
- Process SaaS subscription payments and resident dues flows via Stripe.
- Communicate about the service (receipts, security alerts, product notices).
- Measure marketing-site performance (GA4) and debug issues.
- Comply with law, enforce our Terms, and protect against fraud or abuse.
We do not sell your personal information. We do not use resident dues data for third-party advertising.
4. Cookies and similar technologies
We use cookies and local storage for session authentication in the app, preference/settings where applicable, and analytics (GA4) on the marketing site. You can control cookies through your browser; blocking essential cookies may break login. Analytics cookies can often be limited via browser settings or Google’s tools.
5. How we share information
We share data with service providers who process it on our instructions (“subprocessors”), including:
- Stripe — subscription billing, Stripe Connect, and resident payment processing.
- Hostinger — hosting for this marketing site.
- Vercel (or successor app hosting) — hosting for the DuesBoard application.
- Google — Google Analytics 4 (G-RFC5DS4VR4) on the marketing site.
We may also disclose information if required by law, legal process, or to protect rights, safety, and security. If the business is sold or reorganized, data may transfer as part of that transaction under continued privacy protections.
Board users can see resident and unit data for their association. Residents see their own portal data. We do not make association ledgers public.
6. Retention
We retain account and ledger data while the association account is active and for a reasonable period afterward for backups, disputes, tax, and legal obligations. You may request export or deletion as described below; some records may need to be retained longer when law or payment disputes require it.
7. Security
We use industry-standard measures appropriate to a SaaS product (encrypted transport, hashed passwords, access controls). No method of transmission or storage is 100% secure. Report suspected security issues to hello@duesboard.com.
8. Your choices and rights
Depending on where you live (for example certain U.S. state privacy laws), you may have rights to access, correct, delete, or obtain a copy of personal information, or to opt out of certain processing. Board admins can often update unit and resident records in-product. For other requests, email hello@duesboard.com with enough detail to verify the request. Residents should also contact their association board for data the board controls.
You may unsubscribe from non-essential marketing emails using the link in those emails. Transactional and security messages related to your account may still be sent.
9. Children
DuesBoard is built for adult board members and homeowners/residents managing association obligations. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.
10. International users
We operate primarily for U.S. associations. If you access the service from elsewhere, your information may be processed in the United States, where laws may differ from those in your country.
11. Changes
We may update this Privacy Policy. The “Last updated” date at the top will change when we do. Material changes will be posted on this page; continued use after the effective date means you acknowledge the updated policy where permitted by law.
12. Contact
Privacy questions or requests: hello@duesboard.com.
See also: Terms of Service.