Privacy policy

Apptiflo sells a property tax appeal tool to law firms. Two groups of people give us information: the firms and staff who sign up, and the homeowners who use a firm's evaluation on its website.

For a homeowner's information, the firm whose website they used decides what to do with it and is the one to ask first. We hold it for that firm and handle it as this policy describes.

• Your name, work email, firm name, office details and a password (stored only as a hash, never readable).
• What you put in the workspace: cases, clients, properties, deadlines, engagement agreements, reports and settings.
• Your plan and billing status. Card details go straight to Stripe; we never see or store a card number.
• Sign-in records: a session cookie, and the network address and browser details used to catch abuse at signup and sign-in.

Looking up a property on a firm's site collects nothing about you. We show public-record figures for the address you search.

If you choose to send a request or ask for property watch emails, the form collects what you type:

• Your name, email, phone number (when asked) and any message.
• The property you asked about, and a record that you ticked the consent box.
• If you go on to sign a firm's engagement agreement: your mailing address, the typed signature, the agreement as signed, the time, the first part of your network address and your browser's description, kept as the signing record.

A request goes only to the firm whose site it came from. We don't sell it, share it with other firms, or use it to market to you.

Property figures come from public sources: New Jersey's MOD-IV tax list, its sales file (SR1A) and the Director's Chapter 123 ratios. They are about properties, and some name owners as the public record does. We don't build lists of other people's properties: a firm sees a property when its owner asks.

One cookie, set when you sign in, keeps you signed in. It ends when you sign out or the session expires. We run no advertising or tracking cookies and no third-party analytics.

We use a few services to run the product. Each gets only what its job needs:

• Stripe, for payments and invoices.
• Postmark and Resend, to send email: confirmations, replies, reminders and watch emails.
• Cloudflare Turnstile, a bot check on signup, password reset and the website form.
• Our hosting provider, which keeps the servers and the database.
• Calendly, only if you book a call through our link.

We disclose information when the law requires it, or to a successor if the business is sold; we would tell the firms first.

• A firm's workspace data stays while the account is open. Closing the account deletes it, with the cases, clients, website requests and watchers.
• Signed engagement agreements are legal records. They are kept apart from the account and deleted 7 years after signing, even if the firm closes its account first.
• Stripe keeps invoices and payment records, as accounting requires.

• Firms can edit their data in the workspace and close the account from the account page.
• Property watch emails carry an unsubscribe link that works without signing in.
• To see, correct or delete what we hold about you, email hello@apptiflo.com. A homeowner can also ask the firm they contacted. We answer within 30 days.

Data is encrypted in transit, passwords are hashed, and access to the database is limited. No system is perfectly safe. If a breach affects you, we'll tell you and the firm involved as the law requires.

The product is for law firms and property owners. It isn't aimed at anyone under 18.

If this policy changes in a way that matters, we'll email firms before it takes effect. Questions: hello@apptiflo.com.