This Privacy Policy explains how HamiltonDevCo ("Stowlane," "we," "us") handles personal information in connection with the Stowlane self-storage management platform (the "Service"). It covers two kinds of people: the Operators who use the Service to run their facilities, and the storage tenants whose information Operators enter into the Service.

Roles. For an Operator's own account information, Stowlane acts as a controller. For the personal information about an Operator's tenants that the Operator enters or collects through the Service, the Operator is the controller and Stowlane is the processor, acting on the Operator's instructions under our Data Processing Addendum.

1. Personal information we collect

Operator account data

• name, email address, and password (stored only as a secure hash);
• business/facility name and, where provided, business contact details;
• billing information processed by our payment processor (we do not store full card numbers);
• usage and device data (log data, IP address, browser type) to operate and secure the Service.

Tenant data (entered by the Operator, on the Operator's behalf)

• tenant names;
• mailing/physical addresses;
• phone numbers;
• email addresses;
• gate codes and unit/lease details;
• payment and balance records (we do not store full card numbers; saved payment methods live with the payment processor on the Operator's connected account).

2. How we use personal information

• to provide, maintain, secure, and improve the Service;
• to authenticate users (including tenant magic-link sign-in);
• to process subscription billing and to enable Operators to collect payments from their tenants;
• to send service, transactional, and (where permitted) lifecycle messages by email and SMS on the Operator's behalf;
• to provide support and respond to requests;
• to comply with law and enforce our Terms.

We use tenant personal information only to provide the Service to the Operator and on the Operator's documented instructions — never for our own advertising, and we do not sell personal information.

3. Sub-processors

We use a small set of trusted third parties to deliver the Service. They process personal information only to perform services for us and are bound by appropriate confidentiality and data-protection terms:

We may also use a reputable cloud hosting and database provider to run the Service. A current list of sub-processors is maintained and updated as needed.

4. Security

We protect personal information with administrative, technical, and physical safeguards, including:

• encryption in transit (TLS/HTTPS for all connections);
• encryption at rest, including application-level, field-level encryption of sensitive tenant personal information — names, addresses, phone numbers, email addresses, and gate codes are encrypted in our database;
• strict per-Operator data isolation, so one Operator's data is never exposed to another;
• access controls, password hashing, and least-privilege access for our systems.

No method of storage or transmission is perfectly secure, but we work to protect your information and to limit access to those who need it to operate the Service.

5. Data retention

We retain Operator account data for as long as the account is active and as needed to provide the Service, then for a reasonable period afterward to comply with legal, tax, and accounting obligations. We retain tenant data on behalf of the Operator for as long as the Operator's account is active or as the Operator instructs; on termination, tenant data is exported and/or deleted in accordance with our Terms and the Data Processing Addendum.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. Operators may exercise these rights by contacting us. Because the Operator is the controller of tenant data, a tenant who wishes to exercise these rights should contact the Operator (their storage facility); Stowlane will assist the Operator in responding as required by the Data Processing Addendum. Tenants can also manage their own communication preferences and unsubscribe from messages directly in the tenant portal.

7. Children

The Service is for businesses and is not directed to children, and we do not knowingly collect personal information from children.

8. Changes

We may update this Policy; material changes will be posted here with a new date.

9. Contact

Privacy questions: HamiltonDevCo, justin.hamilton@hamiltondevco.com. Tenants: please contact your storage operator first.