Last updated: May 2, 2026
Epitro (“we,” “our,” or “us”) builds property management software for independent landlords and small property managers. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to anyone who creates an Epitro account, as well as tenants whose information is entered into Epitro by a landlord using the service.
Landlord account information. When you sign up, we collect your name, email address, phone number, and a hashed password through our authentication provider, Supabase Auth. We do not see or store passwords in plain text.
Property and tenancy data.As you use Epitro, you enter information about your properties, units, leases, and tenants — addresses, rent amounts, lease start and end dates, and tenant names and phone numbers.
SMS and MMS content. When tenants text the phone number tied to your account, we receive and store the inbound message body and any media they send (typically maintenance photos). We also store the outbound messages Epitro sends back, including AI-generated replies.
Uploaded files and photos. Maintenance photos and other files that flow through the platform are stored in Supabase Storage and linked to the relevant maintenance request, unit, or lease.
Usage and diagnostic data. We collect basic product analytics (which pages are viewed, which features are used) and error data (stack traces, request IDs) so we can fix bugs and improve the product. We do not use third-party advertising trackers.
We use the information above to operate Epitro — that means letting you sign in, storing the records you enter, sending and receiving SMS/MMS on your behalf, generating AI-assisted maintenance triage and tenant chat replies, surfacing the data back to you in the dashboard, and emailing you account-related notifications. We also use diagnostic and usage data to debug, prevent abuse, plan product changes, and measure whether features are working as intended. We do not sell personal data, and we do not use it for third-party advertising.
Epitro relies on a small set of service providers to run the platform. We share data with them only as needed to deliver the service.
We may add or change sub-processors as the product evolves. The current list will always be available here.
Epitro sends SMS and MMS messages to tenants on a landlord’s behalf. Inbound tenant messages, attached photos, and the outbound replies generated by Epitro are stored so the landlord can review the conversation history and so the AI can provide context-aware replies. Tenants can text STOP at any time to opt out of further messages from the platform, or HELP for assistance. If a tenant wants their data removed entirely, they (or the landlord) can email [email protected] and we will delete the relevant records within a reasonable timeframe.
We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account or request deletion, we remove your data from production systems within a reasonable timeframe, though copies may persist briefly in encrypted backups before they age out.
All data is encrypted in transit (TLS) and at rest. Database access is gated by row-level security policies enforced at the database layer, so a landlord can only read records belonging to their account. Internal access is limited to Epitro team members who need it to operate the service. No system is perfectly secure, but we work to follow current industry practices and respond promptly to any incident that affects user data.
Depending on where you live, you may have the right to access the personal data we hold about you, request correction or deletion, object to certain uses, or opt out of the “sale” or “sharing” of personal information — though we do not sell or share personal data for advertising. To exercise any of these rights, email [email protected]. We will respond within a reasonable timeframe and will not discriminate against you for exercising your rights.
Epitro is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
Epitro is operated from the United States. If you access the service from outside the US, you understand that your information will be transferred to, stored, and processed in the US, where data protection laws may differ from those in your country.
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you by email or through the dashboard. Continued use of Epitro after a change takes effect means you accept the updated policy.
For privacy questions, requests, or concerns, email us at [email protected].