1. Introduction

EchoPM, Inc. (EchoPM) operates the rental platform at https://echopm.app and related applications. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our Services.

This policy applies to tenants, property managers, property owners, applicants, and visitors. It should be read together with our Terms of Service. By using the Services, you agree to this policy.

Geographic focus: EchoPM is primarily designed for rental operations in the United States and Canada. If you access the Services from other regions, you do so at your own initiative and are responsible for compliance with local law. Additional rights or obligations may apply in certain jurisdictions as we expand supported markets.

2. Information We Collect

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing Services: Processing rental applications, facilitating property viewings, and managing tenant relationships
• Account Management: Creating and maintaining your account, authenticating your identity, and providing customer support
• Communication: Sending notifications, updates, and responding to your inquiries
• Improving Our Services: Analyzing usage patterns, conducting research, and enhancing user experience
• Legal Compliance: Fulfilling legal obligations, enforcing our terms, and protecting our rights

4. Information Sharing and Disclosure

We may share your information with the following parties:

• Property Owners and Managers: To facilitate rental applications and property management
• Service Providers: Third-party vendors who help us provide and improve our services
• Business Partners: Companies we partner with to offer integrated services or promotions
• Legal Authorities: When required by law, court order, or governmental regulation
• Corporate Transactions: In connection with a merger, acquisition, or sale of assets

4.1 Service Providers and Subprocessors

We use trusted service providers to operate the platform. They process personal information on our instructions and subject to contractual protections. Categories include:

• Authentication and identity: Clerk (account sign-in and organization membership)
• Payments and billing: Stripe (rent, deposits, platform subscriptions, Connect payouts where enabled)
• Tenant verification and screening: Certn (optional identity, credit, employment, and income verification when you elect or a property manager requests screening)
• Electronic signatures: Integrated providers such as PandaDoc and Dropbox Sign (HelloSign) when your organization connects them for lease and document workflows
• Hosting and storage: Vercel and related infrastructure (application hosting, file/blob storage for media and documents)
• Communications: Novu and email/SMS delivery partners (transactional notifications)
• Customer support: Intercom (messenger, help content, and AI-assisted support features when enabled)
• Analytics: Vercel Web Analytics and product analytics tools (usage measurement; not third-party ad targeting cookies on the platform)
• AI-assisted features: Large language model providers (such as OpenAI or Anthropic, often via an AI gateway) when you use in-product assistants; prompts may include account context you are authorized to access
• Maps and address: Google (Places/autocomplete and geocoding where used)

Property Managers may enable additional integrations (accounting, calendars, automation, etc.) that receive data under those providers' privacy policies. We are not responsible for optional integrations you or your organization connect.

4.2 Screening and Consumer Reports

When you purchase optional verification or a Property Manager requests screening, we and our screening vendor may collect and process identifiers, employment and income information, and consumer report data permitted by law. Reports may be shared with Property Managers for rental decisions. Certn (or another designated vendor) acts as a consumer reporting agency or reseller where applicable; you may have rights under the Fair Credit Reporting Act (FCRA), including adverse action notices from the Property Manager. EchoPM does not make rental decisions on behalf of Property Managers.

5. Cookies and Tracking Technologies

We use cookies and browser-caching technologies only to collect information about your browsing activities on our site. These technologies help us provide a better user experience, analyze platform usage, and improve our services for our customers. No external tracking or third-party cookies are used on our platform for marketing or advertising purposes.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of our platform including recent search histories.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights and Choices

Depending on your location (including California and other U.S. states with privacy laws), you may have rights regarding your personal information, such as:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information in certain circumstances
• Restriction: Request limitation on how we use your data
• Portability: Request transfer of your data to you or a third party
• Objection: Object to processing of your personal information

To exercise these rights, contact support@echopm.com. We will verify your request as required by law. California residents may have additional rights under the CCPA/CPRA. We are evaluating expanded procedures for other regions (including GDPR) as described in our international compliance roadmap.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The duration of our relationship with you
• Legal obligations to retain data for certain periods
• Statute of limitations under applicable law
• Ongoing or potential legal disputes

9. Children's Privacy

We do not facilitate leases for individuals under the age of 18 for security purposes. Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our platform and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

We will respond to your inquiry as soon as possible and within the timeframe required by applicable law.