Privacy Policy
Last updated: October 4, 2026
This policy explains what PadlockHQ, operated by Beach Break Apps in St. Petersburg, Florida, collects and how it's used. Questions or requests: beachbreakapps@gmail.com.
What we collect
- Operator accounts: email address, password (stored hashed by our auth provider), when you accepted the terms, your organization, role and team members you invite.
- Facility records you enter or import: facility details, units, rates, fees, lien timelines, templates, tasks and reports.
- Tenant records operators enter: names, phone numbers, email and mailing addresses, alternate contacts, military status, gate codes, leases and typed e-signature names, ledger entries (charges, payments recorded, reversals), notices, message logs and notes.
- Uploaded files: documents such as court orders, and rent-roll CSV or Excel files (rent rolls are read in your browser; only the resulting records are saved).
- Online reservations: name, email, phone and the unit requested by people who reserve on a facility's rental page.
- Tenant portal: the email address used to request a sign-in link.
- Activity log: who changed what and when (for example ledger changes), so records can be audited.
We don't collect card numbers, precise location, or contacts from your device.
Why we use it
Only to run PadlockHQ: signing you in, keeping each organization's data separate, showing and reporting on your facility, sending sign-in emails, and keeping an audit trail. We don't use it for advertising.
Who we share it with
We never sell your data or your tenants' data. We share it only with providers that run the service for us: our hosting, database, authentication and file-storage provider (Lovable Cloud), and the email provider that delivers sign-in and confirmation emails. Pages load fonts from Google Fonts, which receives your IP address. PadlockHQ doesn't process payments and doesn't use a payment processor today. We may disclose information if the law requires it.
Operators and their tenants
Facility operators decide what tenant information to put into PadlockHQ and are responsible for it. If you're a tenant, contact your facility first about your records; you can also email us and we'll pass the request on.
Retention
We keep data while your account is active. When you ask us to delete your account, we delete your login and your organization's data within 30 days, except where we must keep something by law. Backups expire on their normal schedule.
Deletion and export
To delete your account, go to Settings → Account → "Request account deletion", or emailbeachbreakapps@gmail.com from your account's email address. To get a copy of your data, email us; you can also export ledger and report data as CSV inside the app.
Children
PadlockHQ is for businesses. It isn't meant for children under 13 and we don't knowingly collect their information.
Cookies and local storage
We use browser storage only to keep you signed in and to run the app. No advertising or tracking cookies.
Security
Data is encrypted in transit and each organization's records are isolated from others. No system is perfectly secure.
Changes
We may update this policy and will change the "Last updated" date. This policy is governed by Florida law. See also our Terms of Service.
Contact
Beach Break Apps, St. Petersburg, Florida — beachbreakapps@gmail.com