Privacy Policy

Last updated: 2026-05-02

1. Introduction

njlandlordforms.com ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our Service.

2. Information We Collect

Account information

Full name, email address, hashed password, billing address, optional phone number.

Property and form information

Property addresses and details entered into forms, tenant names and information you input into generated documents.

Payment information

Credit card details are processed and stored by Stripe only. We do NOT store complete card numbers or CVV codes. Billing history and transaction records are retained.

Technical information

IP address, browser type and version, device type, pages visited, referral source.

Communications

If you email us, we retain your message and our responses.

3. How We Use Your Information

  • To provide the Service: generate form templates, manage your account and subscription, process payments via Stripe, provide customer support.
  • To improve the Service: analyze usage patterns, identify bugs, develop new features, conduct analytics (GA4, Vercel Analytics).
  • Marketing (with opt-out): send promotional emails about new features, pricing changes, or related services. Opt out via the unsubscribe link or by emailing support@njlandlordforms.com.
  • Legal and safety: comply with law enforcement requests, prevent fraud, enforce Terms of Service.

4. Third-Party Sharing

We share your information ONLY with:

  • Stripe for payment processing.
  • AI providers (OpenAI): form input is sent to OpenAI to generate documents. Per OpenAI's API policy, this data is not used to train their models. Input is processed at generation time and the resulting document is stored in our database.
  • Analytics providers: Google Analytics 4 and Vercel Analytics (anonymous or pseudonymous data).
  • Hosting provider: Vercel (may access logs containing IP addresses).
  • Law enforcement: if required by court order or legal process.

We do NOT sell your personal information to third parties for marketing purposes.

5. Data Retention

  • Account data: retained while active plus 1 year after termination, then deleted.
  • Generated documents: deleted within 30 days of account deletion.
  • Payment records: 7 years (tax law requirement).
  • Analytics data: identifiable data deleted after 26 months; aggregated data retained indefinitely.
  • Support emails: 2 years unless deletion is requested.

6. Your Rights

  • Access / portability: request a copy of your data (CSV or JSON).
  • Correction: update account info by logging in or contacting us.
  • Deletion: request deletion within 30 days (except tax records).
  • Opt-out: unsubscribe from marketing, disable cookies, opt out of GA4.

7. Cookies and Tracking

Session cookies (login / preferences), analytics cookies (GA4, Vercel Analytics), payment cookies (Stripe). You can disable cookies in browser settings, but functionality may be limited.

8. Security

HTTPS encryption, password hashing and salting, regular security updates, Stripe PCI DSS compliance. No system is 100% secure.

9. Children's Privacy

Not intended for users under 18. We do not knowingly collect information from children under 18.

10. New Jersey Privacy Considerations

  • Compliant with the New Jersey Online Privacy Protection Act (NJOPPA).
  • Data breach notification (N.J.S.A. 56:8-163): we will notify affected users without unreasonable delay in the event of a breach.

11. Contact