What we hold, and why.
PlaceOne exists to keep a property's record accurate and under its owner's control. That purpose sets the limits on what we collect and what we do with it.
This text is a working draft written from our published trust principles. It has not been reviewed by counsel and is not yet binding. It is published so the commitments are visible while review is under way.
The record belongs to the property
Information about a property and the people connected to it is held on behalf of that property and its owner or governing body, not on behalf of a manager, a vendor, or PlaceOne.
If an owner leaves PlaceOne, they can export the property's record and have our copy deleted, subject to any retention we are legally required to keep.
What we collect
We collect what is needed to establish who is connected to a property, why that relationship exists, and what it permits.
- Account information for people who sign in: name, email address, and role.
- Relationship records: the person or organization, the property, the nature of the relationship, and the dates it began and ended.
- Verification results: whether a relationship was confirmed, by whom, and when. We keep the outcome, not the underlying documents, unless an owner asks us to.
- Operational logs needed to keep the service secure and to answer who had access, and when.
Permissioned sharing only
Information moves to another party only with approval, to a named party, for a defined purpose, and for as long as that purpose lasts.
We do not sell information. We do not share it with advertisers. We do not use one customer's records to build products for another.
A clear history of changes
Every relationship's beginning, change, and end is recorded, along with who made the change. Owners can review this history at any time.
When a relationship ends, we keep the history of it. Ending a relationship removes access going forward; it does not erase the fact that the relationship existed.
People, not data subjects
Anyone recorded in a property's record can see what is held about them and how it is used, and can ask for corrections.
Verification is designed to be respectful. We ask for the least we need to confirm a relationship, and we say why we are asking.
Service providers
We use a small number of providers to run the service, including hosting, email delivery, and authentication. Each is bound to use information only to provide that service to us.
Contacting us
Questions about this policy, or a request to see or correct what is held about you, can be sent through the contact page.