Privacy Policy

Who we are

MK1 Real Estate Company, LLC (“MK1,” “we,” “us”) is a property management company operating in North Carolina. This policy describes what information we collect from visitors and tenants, how we use it, and the choices you have.

What we collect

• Application information. When you apply for a rental we collect your name, date of birth, contact info, employer, position, monthly income, and any notes you provide.
• Account information. If you create a tenant or owner account, we collect your email, full name, and role. Passwords are stored hashed by Supabase Auth — we never see them.
• Payment information. Rent payments are processed by Stripe. We see the amount and a payment confirmation ID — not your bank credentials.
• Technical information. Standard server logs (IP, browser, time of request) used to keep the service running and secure.

How we use it

We use the information you provide to evaluate rental applications, manage your lease and account, process payments and maintenance requests, and respond when you contact us. We don't sell your information.

Who we share it with

Owners of the property you apply for or rent; service providers we rely on to operate — Vercel (website hosting), Supabase (database and authentication), Stripe (payment processing and, with your consent, secure bank-account verification), Resend (transactional email such as payment receipts and password resets), and Microsoft 365 (our staff email); and law enforcement when required by valid legal process. We do not sell your personal information.

Your choices

You can request a copy of your data, ask us to correct inaccuracies, or ask us to delete data we are not legally required to keep, by emailing the address below.

Data retention

We keep applicant, tenant, and payment records for as long as needed to provide our services and to meet legal, tax, and accounting obligations (for example, lease and payment records are retained per applicable North Carolina and federal recordkeeping requirements). We delete or de-identify information we are no longer required to keep on a reasonable schedule.

How we protect it

Access is restricted by role (tenant, owner, admin) and enforced at the database level. Connections are encrypted in transit (HTTPS), and sensitive credentials — passwords and bank-account details — are handled by our processors (Supabase Auth and Stripe) and never stored by us. No system is perfectly secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy as our services change. We'll revise the “last updated” date above, and significant changes will be communicated to account holders.

Contact

Questions about this policy? Email ali@mk1realty.com.