Privacy Policy

1. Overview

Dwelon AI ("Dwelon", "we", "us") operates an end-to-end autonomous property operations system. Dwelon connects configured systems and runs enabled workflows A to Z, from intake through action, verification, and a recorded outcome. This policy describes what data we collect, how we process it, and how you can control it.

2. Information We Collect

3. How We Use Your Data

• Execute autonomous workflows: rent collection reminders, maintenance triage, lease renewals, tenant communications

• Execute actions under your selected autonomy modes and enforce workspace policy rules

• Generate operational analytics, exception views, and KPI dashboards

• Send transactional emails (via SendGrid) and SMS notifications (via Twilio) on your behalf

• Process AI-powered actions using Google Gemini language models; your data is not used to train third-party models

• Maintain platform security, detect abuse, and ensure compliance

• Communicate product updates, support responses, and critical service notices

4. AI & Autonomous Processing

Dwelon uses Google Gemini language models to power agentic workflows. When the AI processes data on your behalf:

• Your property and tenant data is sent to Google's API only as needed to execute specific workflow actions

• Data is processed under Google's data processing terms; it is not used to train or improve their models

• All AI-generated actions are logged in your audit trail and can be reviewed at any time

• Defined High-Impact Actions always require qualified human review and explicit approval under the Terms; eligible work outside that category can run autonomously within configured authority

• You can disable AI processing for specific workflow categories at any time

5. Third-Party Services

We use the following subprocessors to deliver the platform:

All subprocessors are bound by data processing agreements. We do not sell personal data to any third party.

6. Cookies & Tracking

We use essential cookies for authentication and session management, plus optional analytics cookies to understand aggregate usage patterns. You can manage preferences at any time.

7. Data Retention

Data is retained as long as your workspace is active. When you delete your account or specific records:

8. Your Rights

Under GDPR, CCPA, and applicable privacy laws, you have the right to:

• Access: request a copy of all personal data we hold about you

• Rectification: correct any inaccurate personal data

• Erasure: request deletion of your data ("right to be forgotten")

• Portability: export your data in machine-readable format (JSON/CSV)

• Object: opt out of specific processing activities

• Withdraw consent: stop marketing communications at any time

• Lodge a complaint with your local supervisory authority

To exercise any right, email privacy@dwelon.com. We respond within 30 days.

9. Data Security

• All data encrypted in transit (TLS 1.3) and at rest

• Firebase security rules enforce workspace-level data isolation

• Role-based access control within workspaces

• Regular security audits and penetration testing

• Incident response plan with customer breach notification within 48 hours, supporting your GDPR reporting deadlines

10. International Transfers

Dwelon operates infrastructure in the United States. For EU/EEA users, international transfers are protected by Standard Contractual Clauses (SCCs). Our subprocessors maintain equivalent protections.

11. Contact

For privacy inquiries, data requests, or to report a concern:

12. Changes

We may update this policy as our platform evolves. Material changes will be communicated via email and in-app notification at least 30 days before taking effect.