Privacy Policy — Statutory Portal Group

1. Information We Collect

When you use Statutory Portal Group services, we collect the information you provide directly to us:

Association details: association name, unit count, and address
Contact information: name, email, and phone number of your designated board contact
Uploaded documents: meeting minutes, financial statements, governing documents, and other files you upload to your portal
Payment information: processed by Stripe (we do not store card numbers)

We also automatically collect limited technical information when you access our website, such as your IP address, browser type, and pages visited. This is used solely for security monitoring and service improvement.

2. How We Use Your Information

We use your information solely to: (a) provision and operate your compliance portal, (b) process payments, (c) communicate with you regarding your account, and (d) maintain the security and integrity of our services. We do not sell, rent, or monetize your data in any way.

3. Analytics

We use Fathom Analytics on flstatutoryportals.com to understand aggregate site usage. Fathom is a privacy-focused analytics service that does not use cookies, does not track individuals, and does not share data with third parties. All data is aggregated and anonymized.

4. Data Retention

We retain your association's documents and account data for as long as your portal is active. After account termination, we retain data for 12 months in accordance with Florida record-keeping requirements, then securely delete it. Backups are retained for a maximum of 14 days.

5. Third-Party Services

We share information only with trusted service providers who assist us in operating our services:

Stripe: Payment processing. We share your association name, email, and payment amount. Stripe is PCI-DSS compliant.
Google Workspace: Email hosting for notices@ and compliance@ addresses. Emails are forwarded to the association board contact.
Cloudflare: CDN, SSL, and DDoS protection. We share no personal data beyond what is publicly visible on our website.

We are not responsible for the privacy practices of these providers. Please review their respective privacy policies.

6. Data Security

Your documents are encrypted at rest using AES-256 and encrypted in transit via TLS 1.3. Access to your portal is restricted to authenticated board-designated recipients via unique, expiring tokens. We perform daily encrypted backups to an offsite location.

7. Your Rights

You have the right to access, correct, export, or delete your association's data at any time. To exercise these rights, contact us at [email protected]. We will respond within 30 business days.

8. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of any material changes via email to your designated board contact.