Privacy Policy

POV Machine is a service operated by WMT Inc. ("we," "us," or "our"). We provide automated pay-or-vacate notice generation for Washington State property managers. This policy explains what data we collect, how we use it, and how we protect it.

Questions? Email us at privacy@wapov.dev.

We collect the minimum necessary to operate the service:

• Account data — your name, company name, and email address when you create an account.
• Property data — building names, addresses, and jurisdictions you enter for your managed properties.
• Tenant data — names, unit numbers, and unpaid charge amounts extracted from AppFolio Tenant Unpaid Charges Reports you upload. We do not store the original PDF after processing.
• Notice records — the generated notices (amounts, dates, jurisdictions) and their approval status, retained for your billing records.
• Billing data — payment method details are handled entirely by Stripe. We store only your Stripe customer ID, not your card number.
• Usage data — basic server logs (IP addresses, request timestamps, error events) retained for up to 30 days.

• Generating and storing your pay-or-vacate notices
• Calculating and invoicing your monthly usage
• Sending transactional emails (account confirmation, manager invites, password reset)
• Diagnosing errors and improving the service

We do not sell your data. We do not use tenant information for any purpose other than generating the specific notice you requested.

We use the following sub-processors to operate POV Machine:

• Supabase — authentication and database storage (US region)
• Stripe — payment processing and invoicing
• Anthropic (Claude) — AI-assisted extraction of tenant and charge data from uploaded PDFs. Uploaded report content is sent to Anthropic's API for processing; Anthropic's privacy policy governs how they handle that data.
• Vercel — hosting and serverless compute

Notice records and associated tenant data are retained for as long as your account is active, plus 12 months after account closure (for billing dispute resolution). You may request deletion of your data at any time by emailing privacy@wapov.dev.

All data is encrypted in transit (TLS) and at rest. Access is restricted by row-level security so each company sees only its own data. We do not have access to your Stripe payment method details.

You may request access to, correction of, or deletion of your personal data at any time. To exercise these rights, email privacy@wapov.dev from the address associated with your account. We will respond within 30 days.

We may update this policy as the service evolves. Material changes will be communicated by email to account holders at least 14 days before they take effect. Continued use of the service after the effective date constitutes acceptance.