Privacy Policy
Last updated: September 28, 2026
Who this covers
CallBoris is software a property management or maintenance company ("the Operator") signs up for and runs their own portfolio through. This policy covers three different people, and they are not all treated the same:
- The Operator's staff — owners, managers, dispatchers, techs who sign in.
- Residents / tenants — the Operator's own tenants, whose contact and lease information the Operator puts into the system to run their business.
- Vendors — outside contractors the Operator dispatches work to.
For residents and vendors: CallBoris is a data processor here, not the party who decided to collect your information in the first place — that's the property manager you already have a relationship with. Questions about your own lease, rent, or maintenance history should go to them first; we hold the record on their behalf.
What we actually collect
| From | What | Why |
|---|---|---|
| Staff accounts | Name, email, password (hashed, never stored in plain text), role | Signing in, and knowing who did what |
| Residents | Name, phone number, email, unit, lease dates, rent and payment history, maintenance requests and photos | Running leases, collecting rent, dispatching repairs |
| Vendors | Name, contact info, insurance certificate and W-9 (as uploaded files) | Confirming a vendor is insured before dispatching a job, and 1099 reporting |
| Everyone | IP address and timestamps on key actions | Security, abuse prevention, and the audit trail every action in the system leaves |
We do not collect Social Security numbers or bank account numbers. A vendor's W-9 is kept as the uploaded file itself and is not read into a searchable field — deliberately, to keep that number out of anything a report or an export could ever surface. Card payments are handled entirely by Stripe (below); card numbers never reach our own servers.
Who we share it with
We do not sell personal information, to anyone, ever. It is shared only with the services that make the product work, and only for that purpose:
- Stripe — processes rent and subscription payments. Stripe sees whatever a payment requires (card details, billing name); we only ever receive back the result.
- Twilio — would carry text message notifications, once enabled for an Operator's account. A resident's phone number is only sent here after they've given consent, which the system records.
- Resend — delivers outbound email (invites, receipts, notifications).
None of these companies get to use your data for their own purposes — they process it to deliver the one service each is named for, and nothing else.
Where it's stored
CallBoris runs on infrastructure we operate directly — not a general-purpose cloud platform reselling access to unrelated tenants. The database sits on a server located in Dallas, Texas, United States. All traffic to and from the app is encrypted (HTTPS); every organization's data is walled off from every other's at the database layer, enforced in code on every single query, not left to a filter someone could forget.
How long we keep it
For as long as the Operator's account is active, plus a reasonable window afterward in case they come back or need a final export. If an Operator closes their account and wants their data deleted sooner, or a resident wants to know what's on file about them, email [email protected] and we'll act on it — this is a request we handle by hand today, not yet an automated self-service flow, and we'd rather tell you that plainly than pretend otherwise.
Your choices
- A resident can decline to give SMS consent at any point; text notifications about their unit stop from then on.
- An Operator can export every row of their own data, in full, at any time, from inside the product — no support ticket required.
- Anyone covered by this policy can ask what we hold about them, or ask us to delete it, by emailing the address above.
Children
CallBoris is a business tool for property management companies. It is not directed at children, and we don't knowingly collect information from anyone under 16.
Changes
If this page changes in a way that matters, the "last updated" date at the top will move and we'll say so on the product's own changelog. We won't quietly narrow anyone's rights.
Contact
Questions, requests, or concerns: [email protected].