Privacy Policy

1. Who we are

LotWize is an AI-first HOA management platform operated by Sanaf AI Solutions, LLC, based in Oklahoma City, Oklahoma (“LotWize,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, share, and protect information when you use our platform at lotwize.com and the LotWize application at app.lotwize.com (collectively, the “Service”).

Questions? Contact us at privacy@lotwize.com.

2. Information we collect

Account information

When you create an account, we collect your name, email address, and password (hashed — we never store plaintext passwords). If you sign in with Google or GitHub OAuth, we receive your name, email, and profile photo from that provider.

Community and HOA data

You may upload governing documents (CC&Rs, bylaws, rules), homeowner rosters, financial records, violation histories, and other community data to use LotWize. This data is yours. We process it to provide the Service and do not use it to train AI models for any purpose other than operating your account.

Usage and log data

We automatically collect IP addresses, browser type, device type, pages visited, features used, and session duration. This data is used to operate, improve, and secure the Service.

Payment information

Payments are processed by Stripe. We never receive or store your full credit card number. We store your Stripe Customer ID and subscription status to manage your account.

Cookies and tracking

We use essential session cookies (required for authentication) and analytics cookies (Vercel Analytics, PostHog) to understand how the Service is used. We do not use advertising cookies or sell your data to advertisers.

3. How we use your information

• Provide, operate, and improve the LotWize platform
• Authenticate your identity and manage your account
• Process payments and manage subscriptions via Stripe
• Send transactional emails (receipts, violation notices, meeting reminders)
• Send product updates and marketing emails (you may unsubscribe at any time)
• Detect fraud, abuse, and security threats
• Comply with legal obligations

4. Third-party services we use

We share data with the following service providers solely to operate the Service:

We do not sell your personal information to any third party.

5. Data retention and deletion

We retain your account data for as long as your account is active plus 90 days. If you cancel your subscription and delete your account, we permanently delete your data within 30 days, except where we are required to retain records for legal or financial compliance (e.g., Stripe transaction records as required by financial regulations).

You can export all your community data at any time from your dashboard — CSVs, uploaded documents, and your complete audit trail.

6. Security

We protect your data using industry-standard measures: TLS encryption in transit, AES-256 encryption at rest for sensitive fields (OAuth tokens, payment tokens), role-based access controls, and audit logging on all data access events. We conduct regular security reviews and vulnerability assessments.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. To exercise any of these rights, email us at privacy@lotwize.com. We will respond within 30 days.

8. Children's privacy

LotWize is not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us at privacy@lotwize.com.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top and notify active users by email if the changes are material.

10. Contact us

Sanaf AI Solutions, LLC
Oklahoma City, Oklahoma
privacy@lotwize.com