Privacy Policy

1. Introduction

Nimbus Investments LLC (“Nimbus,” “we,” “us,” or “our”) operates the Nimbus Property Management Platform (the “Platform”) at nimbuspm.com and app.nimbuspm.com. This Privacy Policy describes how we collect, use, and protect information about users of our Platform, including tenants, property owners, and authorized personnel (“Users”).

2. Information We Collect

• Account information: name, email address, phone number, provided at account creation or lease signing
• Usage data: pages visited, actions taken within the Platform, browser type, IP address
• Payment information: payment method type and last four digits only; full payment details are processed by Stripe and never stored on our servers
• Communications: messages sent through the Platform including work order requests and updates

3. How We Use Your Information

• To operate and maintain the Platform
• To process rent payments and send payment confirmations and reminders
• To manage maintenance requests and communicate status updates
• To send transactional SMS notifications regarding your tenancy or property management account (see SMS Communications section)
• To comply with legal obligations

4. SMS Communications

By providing your phone number as part of the lease signing process or account registration, you consent to receive transactional SMS notifications from Nimbus Property Management. These messages may include rent payment reminders, failed payment alerts, maintenance request updates, and utility account transfer reminders. Message frequency varies based on account activity. Message and data rates may apply. To opt out of SMS communications, reply STOP to any message. For help, reply HELP or contact support@nimbuspm.com.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share information with: (a) Stripe, our payment processor, solely for the purpose of processing payments; (b) service providers who assist in operating the Platform under confidentiality agreements; (c) law enforcement or regulatory authorities as required by law.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide services. Upon termination of your tenancy or account, we retain records for a minimum of seven (7) years as required for accounting and legal compliance.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), row-level security on our database, and access controls. No system is completely secure; we encourage users to maintain strong passwords and contact us immediately if they suspect unauthorized account access.

8. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at support@nimbuspm.com. We will respond to all requests within 30 days. See Section 13 for additional rights applicable to Utah and California residents.

9. Children's Privacy

This Platform is intended solely for use by adults (18 years of age or older) in connection with an existing tenancy or property management relationship. We do not knowingly collect personal information from children under the age of 13. If we become aware that a child under 13 has provided personal information, we will delete such information immediately. If you believe a child under 13 has submitted information through this Platform, please contact us at support@nimbuspm.com.

10. Cookies and Tracking

We use session cookies solely for the purpose of maintaining authenticated user sessions on the Platform. We do not use third-party tracking cookies, advertising cookies, or behavioral analytics. No data is shared with advertising networks. You may disable cookies in your browser settings; however, doing so will prevent you from logging into the Platform.

11. Third-Party Service Providers

We use the following third-party services to operate the Platform. Each provider processes data only as necessary to perform their function and is bound by their own privacy policies and confidentiality obligations:

• Stripe — Payment processing. Stripe receives payment method information directly. We do not store full payment details. See stripe.com/privacy.
• Supabase — Database and authentication infrastructure. User account data and platform records are stored on Supabase-hosted servers. See supabase.com/privacy.
• Twilio — SMS notifications. Phone numbers and message content are transmitted to Twilio to deliver transactional SMS messages. See twilio.com/legal/privacy.
• Resend — Email notifications. Email addresses and message content are transmitted to Resend to deliver transactional emails. See resend.com/privacy.
• Anthropic— AI-assisted work order triage. When a maintenance request is submitted, the title and description of the request are sent to Anthropic's API to assist with priority classification. No personally identifiable information beyond the work order content is transmitted. See anthropic.com/privacy.

We do not sell or rent your personal information to any third party.

12. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users within 30 days of discovery, as required by the Utah Consumer Privacy Act and applicable law. Notification will be provided via email to the address on file. We will also notify relevant authorities as required by law.

13. Utah and California Privacy Rights

Utah Consumer Privacy Act (UCPA): Utah residents have the right to: (a) confirm whether we process their personal data; (b) access their personal data; (c) delete personal data they have provided to us; (d) obtain a copy of their personal data in a portable format; and (e) opt out of the sale of personal data (we do not sell personal data). To exercise these rights, contact support@nimbuspm.com. We will respond within 45 days as required by law.

California Residents (CCPA): California residents have the right to know what personal information is collected, request deletion of personal information, and opt out of the sale of personal information (we do not sell personal information). We do not discriminate against users for exercising their privacy rights. To submit a request, contact support@nimbuspm.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or a notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

15. Contact

Nimbus Investments LLC
Salt Lake City, UT
Email: support@nimbuspm.com