Privacy Policy

Plain English summary

YHFO ("we," "us," "our") is a property management tool for independent landlords. This policy explains what data we collect, how we use it, and your rights regarding that data. We've tried to write this in plain English — not to hide anything, but because we think you should actually understand it.

By using YHFO you agree to the collection and use of information described in this policy.

Information we collect

Account information. When you sign up, we collect your email address, username, and password (stored as a one-way hash — we cannot read your password).

Organization and property data. The properties, units, tenants, vendors, tickets, and notes you enter into YHFO. This is your data and you control it.

Usage data. We log basic usage information — pages visited, features used, timestamps — to help us understand how YHFO is being used and where to improve it. This is not sold or used for advertising.

Payment information. We use a third-party payment processor (Stripe) for billing. We do not store your card number or CVV. We retain billing records (amounts, dates, plan changes) for accounting purposes.

• We do not collect information about your tenants beyond what you choose to enter
• We do not access your files or documents unless you upload them to YHFO
• We do not require a phone number

How we use your information

We use the information we collect to:

• Provide, operate, and improve the YHFO service
• Send transactional emails (password reset, invite notifications, billing receipts)
• Respond to support requests you send to us
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not use your data to train AI or machine learning models. We do not sell or rent your data to third parties. We do not serve advertising.

When we share data

We share your data only in the following limited circumstances:

• Service providers. We use third-party services to operate YHFO (e.g. cloud hosting, email delivery, payment processing). These providers process data only on our behalf and are contractually bound to protect it.
• External share links. When you generate a contractor portal link for a ticket, the ticket title, description, and comments become accessible to anyone with that link. You control when links are created and can revoke access by deleting the link.
• Legal requirements. We may disclose information if required to do so by law or in response to a valid legal process.
• Business transfers. If YHFO is acquired or merges with another company, your data may be transferred. We will notify you before this happens.

Data retention

We retain your data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required by law to retain it (e.g. financial records for 7 years).

Backups may retain your data for up to an additional 90 days after deletion from our primary systems.

Your rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Request correction of inaccurate data.
• Deletion. Request deletion of your account and personal data.
• Portability. Request an export of your data in a machine-readable format.
• Objection. Object to certain uses of your data.

To exercise any of these rights, email us at privacy@yhfo.com. We will respond within 30 days.

Cookies

YHFO uses cookies strictly for functionality — specifically to maintain your login session. We do not use advertising cookies, analytics cookies from third parties, or tracking pixels.

• sessionid — keeps you logged in
• csrftoken — protects against cross-site request forgery attacks

Both cookies are necessary for the application to function and cannot be disabled while using YHFO.

Security

We take reasonable measures to protect your data including encryption in transit (HTTPS), encrypted passwords, and access controls. However, no method of transmission over the internet is 100% secure.

If you discover a security vulnerability, please report it responsibly to security@yhfo.com rather than disclosing it publicly.

Contact us

Questions about this policy or your data? We're happy to talk.