Privacy Policy

Effective July 10, 2026 · Tenant Guard is operated by CDM Suite LLC.

Scope and contact

This policy covers Tenant Guard at tenantguard.cdmsuite.com. Questions, access requests, and deletion requests can be sent to support@cdmsuite.com.

Information inventory and purposes

Necessary data stored in your browser: lease details, condition notes and photos, generated workspace content, app progress, access credentials, and your consent record. This lets the app work without requiring an account and remains available when optional tracking is rejected.
Requests you send to app features: when you generate content or use AI features, the lease details and notes needed for that request are sent to our server and the configured processing provider (which may include OpenRouter, Google Gemini, or Cloudflare Workers AI). Do not enter information you do not want processed for the requested feature.
Payments and access: Stripe collects checkout and payment information. Tenant Guard receives the checkout session, customer contact details, product, payment status, customer identifier, and subscription status. We do not receive full card numbers.
Transactional email: Resend processes purchase receipts, access-restore links, and testimonial approval notices. We use the relevant email address and message content only to deliver those requested or operational messages.
Google connection (optional): if you connect Google, an OAuth access token is used to create the files you request in your Google account. Tenant Guard does not receive your Google password.
Operational records: our hosting and storage providers may process request metadata, security logs, rate-limit counters, purchase-email delivery markers, entitlement usage, and error information to run and protect the service.
Testimonials: a testimonial can be submitted only from a verified paid Stripe session. We retain the purchaser identity, rating, quote, purchase verification, submission status, and approval record. Public responses contain only the approved display name, quote, rating, approval date, and a verified-purchase flag.

Promotional email

Email on the free documentation-plan form is optional. If you enter it, we send a free 72-hour move-in evidence checklist (lead magnet) and a short follow-up tip sequence, then a soft product offer. You can reply stop to be removed. Preview and Lite still work without an email. Purchase receipt emails remain transactional.

Optional tracking consent

Optional tracking uses a versioned consent record stored in this browser. You can Accept all, Reject optional, or choose categories separately:

Analytics: Microsoft Clarity, PostHog, and Google Analytics (GA4) may receive page and interaction data.
Advertising measurement: Meta Pixel and related first-party event forwarding may receive page, funnel, checkout, and purchase events. Campaign parameters are persisted only with this consent.

Meta, Clarity, PostHog, and Google Analytics do not load before the matching consent. Google AdSense and AMP advertising/analytics are disabled until a certified consent-management platform is configured. Rejecting or withdrawing optional tracking does not disable necessary local app storage.

Partners and disclosures

We disclose information to service providers only for the functions described above, including Cloudflare hosting, Stripe payments, Resend email, configured AI providers, Microsoft Clarity, PostHog, Google Analytics, Meta (with advertising consent), and Google when you connect it. Optional partner links may send you to a third-party site; that site receives your request and is governed by its own policy. We do not sell lease details or damage photos.

Retention

Browser workspace data remains until you clear it, restart setup, or clear site storage.
Pending testimonial records expire after 14 days; approved testimonials remain until removed.
Rate-limit and temporary security records expire according to their operational window.
Purchase, subscription, email-delivery, and security records are retained as needed for access, fraud prevention, accounting, legal obligations, dispute handling, and service integrity.
Stripe, Resend, Google, Cloudflare, and AI providers apply their own retention policies.

Your choices and deletion

Clear local workspace data using the app controls or your browser’s site-data settings.
Use the permanent “Privacy choices” control to change or withdraw optional consent.
Disconnect Google through your Google account and stop using connected export features.
Email support@cdmsuite.com to request deletion of an approved testimonial or other Tenant Guard-controlled personal data. We may retain records required for security, billing, or law.

Security and changes

We use access controls, signed links, payment verification, rate limits, and provider security controls. No system can guarantee absolute security. Material policy changes will be posted here with a new effective date.