You’re handing SheltrIQ some of the most sensitive information you own — tax IDs, bank activity, property records. Here are straight answers to the questions landlords actually ask, in plain English. For the technical details, see our Security page.
Only you — and anyone you choose to share it with, such as your CPA. Our service providers (listed in our Privacy Policy) process data to run the Service; a few, such as Anthropic for support emails, handle data under their own terms — see our Privacy Policy. Isolation is enforced inside Postgres itself with Row-Level Security under a non-privileged database role — not just in application code that a bug could bypass. One landlord can never query another landlord’s properties, transactions, or documents.
No. SheltrIQ makes money from subscriptions, not from your data. We don’t sell it, we don’t hand it to data brokers, and there are no advertising trackers pulling your financial activity out the side door.
Not by the app. (If you email our support team, we sometimes use an AI assistant to help read your message or draft a reply — see our Privacy Policy.) Our expense classification runs on self-hosted, open-source models on our own servers — your transactions are never piped to an outside AI provider. And the AI never decides alone: classification is rules-first, with deterministic tax logic and your own corrections handling the clear cases, so the model only weighs in on genuinely ambiguous ones — always with a confidence score you can see and override.
In transit, yes; at rest, partly. Everything travels over TLS 1.2+ with HSTS. Your most sensitive fields — tax IDs (SSN/EIN), stored bank-connection credentials, and tenant-screening data — are additionally encrypted with AES-256-GCM before they touch the database, and uploaded documents are encrypted at rest by our storage provider (Backblaze B2, AES-256). Our database and server disks, which hold the rest of your data (such as transactions and property records), are not encrypted at rest. Card numbers never touch our servers at all — billing goes straight to Stripe (PCI DSS Level 1).
Any time. You can export your data — including the full classification audit log — whenever you want, so you’re never locked in and your accountant always has what they need.
If you cancel, your data stays available for 30 days. If you ask us to delete your account, we permanently remove your personal, property, transaction, and document data within 30 days — after which copies may remain for a limited time only in backups (up to 35 more days, including our encrypted offsite database backups and our hosting provider’s server backups) and, for uploaded documents, in our document storage (purged within 32 days after deletion).
We build to prevent one — RLS isolation, AES-256-GCM encryption for sensitive fields, and error monitoring that scrubs authorization headers, cookies, and any SSN/EIN patterns before anything is recorded. And we prove our database backups actually restore with an automated drill every week. If your data were ever exposed, we would tell you promptly and plainly. We won’t hide it.
Not yet — a formal audit is on our roadmap, and we won’t claim a certification we don’t hold. Payment security is inherited from Stripe (PCI DSS Level 1). If a specific control matters to your decision, email us and we’ll tell you exactly where it stands.
Email [email protected] with the details and steps to reproduce. We’ll acknowledge it, keep you posted on the fix, and credit you if you’d like.