Furlo LLC ("Furlo," "we," "us," or "our") is committed to protecting the privacy and security of personal information collected through the Furlo platform, including the Furlo mobile application, web application, and property manager dashboard (collectively, the "Platform"). This Data Privacy and Protection Policy ("Policy") describes how we collect, use, store, share, protect, and dispose of personal information in connection with the Platform.
This Policy applies to all residents who register for and use the Furlo Platform; all property managers and authorized representatives who access the Furlo property manager dashboard; all property management companies that enter into a Subscription Service Agreement with Furlo LLC; and all third-party service providers and vendors who process personal information on behalf of Furlo. This Policy is designed to comply with the Florida Information Protection Act (FIPA), Florida Statutes Section 501.171, and all other applicable federal and state privacy and data security laws.
"Personal Information" — As defined under FIPA, means an individual's first name or first initial combined with their last name, in combination with one or more of: Social Security number; Driver's license number or other government-issued ID; Financial account or credit/debit card number combined with any required security code; Medical history, mental or physical condition, or medical treatment; Health insurance policy number or subscriber ID; or Username or email address combined with a password that would permit access to an online account.
"Platform Data" — All data collected, stored, processed, or transmitted through the Furlo Platform, including Personal Information, pet profile data, care request data, messaging data, event participation data, and property and building data.
"Data Breach" — Any unauthorized access to or acquisition of unencrypted or unredacted records containing personal information where illegal use of the personal information has occurred or is reasonably believed to have occurred, or where a situation exists that would require notification under applicable law.
Account and Identity Information: full legal name, email address, password (stored encrypted/hashed), date of birth confirmation (18+ verification timestamp), unit number, building name and address, date and time of account creation and verification.
Pet Profile Information: pet name, species, breed, age, and weight; pet photographs; care notes and behavioral information; veterinarian name, clinic name, and contact information; emergency contact name and phone number; vaccination records and related health notes.
Activity and Usage Data: care requests posted, accepted, or fulfilled; private messages exchanged between residents; event RSVPs and attendance records; login timestamps and session data; device type, operating system, browser type, and IP address.
Full name and job title; business email address and phone number; building name, address, and total unit count; subscription billing information (processed through a PCI-compliant third-party payment processor — Furlo does not store credit card numbers); login timestamps and dashboard activity.
Furlo does not collect and has no access to: Social Security numbers; government-issued identification numbers; financial account numbers or credit or debit card numbers; property access codes, lockbox combinations, or key fob codes shared between residents through private in-app messaging; or any data from minors under the age of 18.
Furlo uses the personal information we collect solely for the following purposes: to create, verify, and manage resident and property manager accounts; to connect verified residents within the same building for pet care coordination; to facilitate the property manager approval and resident verification workflow; to enable private messaging between residents; to display pet profiles to verified residents within the same building; to send account verification and approval notifications, care request notifications, and event and community announcements; to comply with applicable federal, state, and local laws and regulations; and to detect, prevent, and respond to fraud, security incidents, or violations of our policies.
Furlo does not use personal information for advertising, marketing to third parties, or any purpose not described in this Policy without prior consent from the user.
First name and unit number are visible to verified residents of the same building and the property manager. Pet profiles are visible to verified residents of the same building and the property manager. Private messages are visible only to the two residents who are parties to the message thread. Full email and phone number are visible to Furlo LLC only.
Furlo may share personal information with trusted third-party service providers who assist in operating the Platform, including cloud infrastructure and database hosting (Supabase / Amazon Web Services), payment processing, email and notification delivery, and analytics services. All third-party service providers are required to process personal information only on Furlo's behalf and under Furlo's written instructions, implement security measures that meet or exceed Furlo's standards, not use personal information for any other purpose, and report any suspected or confirmed data breaches to Furlo within ten (10) days of discovery.
Furlo may disclose personal information when required to do so by applicable law, regulation, legal process, or governmental request, including in response to a valid court order, subpoena, or warrant. Furlo will notify affected users of any such disclosure to the extent permitted by law.
Furlo implements reasonable technical, administrative, and physical safeguards to protect personal information, including: encryption of all personal information in transit using TLS 1.2 or higher; encryption of all personal information at rest using AES-256 encryption; encrypted, hashed storage of all user passwords — plaintext passwords are never stored; role-based access controls; automatic session timeouts; regular security patches; and database hosted on Amazon Web Services (AWS) infrastructure through Supabase, with SOC 2 Type II compliance.
While Furlo implements industry-standard security measures, no method of data transmission over the internet or electronic storage is completely secure. Furlo cannot guarantee absolute security of personal information. Users are encouraged to use strong, unique passwords and to notify Furlo immediately at contact@joinfurlo.com if they suspect any unauthorized access to their account.
Retention periods: Active resident account data — duration of active account. Deleted resident account data — 30 days post-deletion. Pet profile data — duration of active account (purged with account data). Private messages — duration of subscription (purged within 60 days of building subscription cancellation). Care request history — 12 months post-event, then anonymized or purged. Property manager account data — 7 years post-cancellation. Security and access logs — 12 months. Backup copies — up to 30 days on a rolling basis.
Upon expiration of the applicable retention period, Furlo will dispose of personal information using methods that render the data permanently unreadable and unrecoverable, in compliance with FIPA Section 501.171.
In the event of an actual or suspected data breach, Furlo will immediately isolate and contain the breach, conduct a prompt investigation, and determine whether personal information was accessed by an unauthorized party. If Furlo determines that a data breach has occurred, Furlo will notify all affected individuals in writing within thirty (30) days of determining that a breach has occurred, as required under FIPA Section 501.171(4). If a data breach affects more than 500 individuals, Furlo will also notify the Florida Department of Legal Affairs within thirty (30) days.
Residents have the following rights with respect to their personal information: Right to Access — request a copy of the personal information Furlo holds about you. Right to Correction — request correction of inaccurate or incomplete personal information. Right to Deletion — request deletion of your personal information and account by contacting contact@joinfurlo.com; Furlo will honor deletion requests within thirty (30) days. Right to Data Portability — request a copy of your personal information in a commonly used, machine-readable format. Furlo will respond to all privacy-related inquiries within thirty (30) days of receipt.
The Furlo Platform is intended solely for adults who are 18 years of age or older. Furlo does not knowingly collect, store, or process personal information from any individual under the age of 18. If Furlo becomes aware that personal information has been collected from an individual under the age of 18, Furlo will immediately terminate the account and permanently delete all associated data. If you believe that a minor has created a Furlo account, please contact us immediately at contact@joinfurlo.com.
Property managers who access resident and pet data through the Furlo dashboard must: use resident and pet data only for legitimate property management purposes; not share, sell, transfer, or disclose resident personal information to any third party without prior written consent; implement reasonable measures to protect any resident data they download or export; and notify Furlo immediately at contact@joinfurlo.com if they become aware of any unauthorized access to or disclosure of resident data.
The Furlo Platform may contain links to third-party websites or services. Furlo is not responsible for the privacy practices or content of any third-party websites or services. Furlo reserves the right to update this Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, Furlo will notify all active users by email at least thirty (30) days before the changes take effect. This Policy and all data privacy matters related to the Furlo Platform are governed by the laws of the State of Florida, including the Florida Information Protection Act (FIPA), Florida Statutes Section 501.171.
Data Privacy Contact
Matthew Mullins, Founder & CEO
Furlo LLC
Email: contact@joinfurlo.com
Website: joinfurlo.com