Privacy Policy

1. Introduction

Flex Storage Park ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our self-storage facility management platform and services.

2. Information We Collect

2.1 Personal Information

We collect information that identifies you personally, including:

• Name and contact information (email address, phone number, mailing address)
• Account credentials (username, password)
• Payment information (credit/debit card details, billing address)
• Government-issued ID (for identity verification as required by law)
• Emergency contact information

2.2 OAuth and Social Login Data

When you sign in using third-party services (Google, Facebook), we collect:

• Profile information (name, email address, profile picture)
• Unique identifier from the OAuth provider
• We do NOT access your social media posts, friends list, or other private data

2.3 Storage Unit Information

• Unit rental history and current rentals
• Access logs (entry/exit times to facility and units)
• Payment history and transaction records
• Maintenance requests and communications

2.4 Technical Information

• IP address and device information
• Browser type and operating system
• Login timestamps and session data
• Cookies and similar tracking technologies

2.5 Security and Surveillance

Our facilities are monitored by video surveillance for security purposes. Video footage may capture your image when accessing the facility or storage units.

3. How We Use Your Information

• Service Delivery: Process rentals, manage access, handle payments
• Account Management: Create and maintain your account, authenticate logins
• Communication: Send notifications about your account, payments, and facility updates
• Security: Monitor access, prevent fraud, investigate incidents
• Legal Compliance: Comply with legal obligations and respond to legal requests
• Improvement: Analyze usage patterns to improve our services

4. How We Share Your Information

We do NOT sell your personal information. We may share information with:

4.1 Service Providers

• Payment processors (Stripe) for transaction processing
• Email service providers (Resend) for account notifications
• SMS providers (Twilio) for security alerts
• Cloud hosting providers for data storage

4.2 Legal Requirements

We may disclose information when required by law, court order, or legal process, or to:

• Comply with legal obligations
• Protect our rights and property
• Investigate fraud or security incidents
• Respond to law enforcement requests

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure password hashing (bcrypt)
• Regular security audits and updates
• Access controls and authentication systems
• Video surveillance and physical security at facilities

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as:

• Your account remains active
• Needed to provide services to you
• Required by law (typically 7 years for financial records)
• Necessary for legal claims or compliance purposes

Video surveillance footage is typically retained for 30-90 days unless needed for investigations.

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to legal retention requirements)
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Revoke OAuth: Disconnect social login accounts

To exercise these rights, visit Data Deletion Request or contact us at the information below.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in to your account (session cookies)
• Remember your preferences
• Analyze site usage and performance

You can control cookies through your browser settings, but disabling cookies may affect functionality.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from minors. If you believe we have collected information from a minor, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through a prominent notice on our website. The "Last Updated" date will reflect when changes were made.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

13. Jurisdiction

This Privacy Policy is governed by the laws of Puerto Rico and the United States. By using our services, you consent to the collection and processing of your information as described in this policy.