Blocbear Privacy Architecture

    Privacy Policy

    Last Updated: July 2026

    The Core Principle: We handle your personal and financial data exactly how we want our own families' neighborhood data handled. We do not sell, rent, or lease your private information to third-party data brokers, advertising agencies, or marketing networks. Period.

    1. Data We Actively Collect

    We gather only the minimum data required to keep your neighborhood operating smoothly:

    • Contact and Identity Assets: Your legal name, email address, physical property address, and designated account role.
    • Transactional State Records: Secure bank verification tokens generated by Plaid, Stripe payment and Connect account identifiers, ledger balances, transaction histories, and processing logs.
    • Community Logs: Anonymized or structural voting submissions, uploaded architectural files, courtesy notices, and text strings sent within internal board announcements.

    2. Data Utilization and Row-Level Hardening

    We use your data solely to execute requested app functionalities—such as routing dues payments, printing and mailing physical invoices via the postal service, and notifying you of open board polls. Your data is isolated at the database engine level via strict Row-Level Security (RLS). The digital walls separating your neighborhood from other developments are enforced programmatically via serverless schema boundaries.

    3. Vetted Subprocessors and Infrastructure Partners

    We only share data with the essential technical infrastructure blocks required to operate the service:

    • Supabase: For secure, modern database storage and underlying cloud computing power.
    • Plaid: For secure bank connections when residents pay online, and for residency verification on certain signup paths, without manual ID uploads.
    • Stripe: To clear bank-to-bank ACH dues transfers and to run board Connect onboarding for neighborhood payouts, without Blocbear handling raw bank passwords.
    • Lob: To print and drop paper dues notices directly into the United States Postal Service network for offline residents.
    • Resend: To safely fire automated transactional notifications, compliance alerts, and magic login codes.

    4. The Resident Directory Paradigm

    Blocbear features a collaborative neighborhood directory. To preserve baseline consumer privacy, directory access defaults strictly to mapping physical addresses. Verified residents retain full granular control over whether their personal email address or telephone number is made visible to neighboring households.

    5. Your Data Ownership Rights

    Your data belongs to your community, not us. If your board decides to leave our platform, you can initiate a complete database download via the dashboard interface to claim your history. You may request permanent account deletion at any time by contacting our support team directly.