LEGAL
Privacy Policy
Effective Date: August 16, 2026
DwellQ LLC (“Company,” “we,” “our”) operates the DwellQ financial technology education platform at dwellq.io (the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. This policy applies to all users of the Service, regardless of which tier they use.
- Account information: When you create an account, we collect your email address. Your password is cryptographically hashed before storage — we never store or have access to your plaintext password.
- Payment information: When you purchase a paid tier, your payment is processed by Stripe, Inc. Stripe collects your credit card number, billing address, and related payment details. DwellQ receives only a confirmation of payment, your Stripe customer ID, the last four digits of your card, and billing cycle information for recurring subscriptions. We do not store full credit card numbers.
- Support communications: If you email support@dwellq.io, we retain your email address and the content of your message to provide assistance.
This is important:
When you use the DwellQ calculator, all financial data you enter — including home price, income, rent amount, tax filing status, and other financial inputs — is processed entirely in your web browser using client-side JavaScript. Your raw calculator inputs are not transmitted to or stored on DwellQ servers unless you explicitly choose to save a scenario, or you use the Q+ AI features described below.
Q+ AI features: Q+ subscribers can ask questions about their results, describe what-if scenarios in plain English, and receive an AI-written summary in their report. To do this, your analysis — your calculator inputs and the results computed from them, including annual income and filing status if you have entered them — is sent to Anthropic, PBC, which operates the AI model that writes the response. This happens when you ask a question or run a what-if, and once per analysis to write your report summary. DwellQ does not store these questions or the analysis sent with them, and under Anthropic’s commercial terms your data is not used to train their models. If you are not a Q+ subscriber, no AI feature runs and nothing is sent. The calculation itself never leaves your browser in either case — the AI explains the result, it does not compute it.
Saved scenarios and journey progress: If you create an account and save a rent-vs-buy scenario, the inputs and results for that scenario are stored securely in our database (Supabase) so you can access them across devices. Your journey progress (which educational tools you've completed) is also synced to your account. This data is encrypted in transit, protected by row-level security (only you can access your own data), and can be deleted at any time by requesting account deletion.
- Usage analytics: We use PostHog, a product analytics platform, to collect anonymized usage data including pages visited, features used, button clicks, scroll depth, session duration, browser type, device type, referral sources, and approximate geographic location (city/region level, derived from IP address). This data is used to improve the Service and is not linked to your identity. We do not track the specific financial values you enter into the calculator.
- Log data: Our hosting provider (Vercel) automatically collects server logs including IP addresses, request timestamps, and referring URLs. This data is retained for security and operational purposes.
We use the information we collect for the following purposes:
- To create and manage your account.
- To process purchases and manage your tier access, including subscription billing and renewals.
- To send transactional emails (purchase confirmations, subscription renewal notices, password resets, analysis reports you request).
- To respond to your support inquiries.
- To analyze aggregated, anonymized usage patterns to improve the Service.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
We do NOT use your data to: sell or rent your personal information to third parties; serve targeted advertising; generate leads for real estate agents, mortgage lenders, or financial advisors; or build marketing profiles about individual users.
We share your information only with the following categories of service providers, solely for the purposes described above:
| Provider | Data Shared | Purpose |
|---|---|---|
| Supabase | Email, hashed password, account metadata, tier status, saved scenarios, journey progress | Authentication and database |
| Stripe | Payment info (card, billing address), subscription status | Payment processing and subscription management |
| Vercel | IP address, request logs | Hosting and deployment |
| Resend | Email address, report content | Transactional email delivery |
| PostHog | Anonymized usage events, pages visited, device type, approximate location | Product analytics |
| Anthropic | Q+ subscribers only: your calculator inputs and computed results (including income and filing status if entered), and the question you ask | Powering the Q+ AI assistant, what-if translation, and report summary |
We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others. We may add, remove, or replace service providers; if a change materially affects how your data is handled, we will update this policy.
DwellQ never collects the following:
- Your full legal name (unless you provide it voluntarily via email)
- Your home address or physical location (beyond city-level approximation from IP)
- Your Social Security number or government identification
- Your bank account numbers or full credit card numbers
- Your tax returns, pay stubs, bank statements, or any other financial records or documents
- Any verification of the figures you type — we never connect to your bank, employer, credit file, or lender, and we do not check whether what you enter is true
The income figure you optionally enter for the tax calculation is a number you type, not a record we obtain or verify. It stays in your browser unless you save a scenario or use a Q+ AI feature, both of which are described in Section 1.2.
We retain your account information (email and hashed password) for as long as your account is active. Saved scenarios and journey progress data are retained for as long as your account is active. For users on expired trials, saved scenario data is retained for a grace period (currently 30 days after trial expiration) to allow time to upgrade, after which it may be permanently deleted. Subscription billing records are retained for the duration of your subscription plus any legally required retention period. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., transaction records for tax purposes, which are retained for up to 7 years). Anonymized analytics data that cannot be linked to your identity may be retained indefinitely.
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate data.
- Deletion: Request that we delete your personal data. Email support@dwellq.io with the subject line “Data Deletion Request.” We will process your request within 30 days.
- Portability: Request your data in a structured, machine-readable format.
- Opt-out of communications: All marketing emails include an unsubscribe link. Transactional emails (purchase confirmations, subscription notices, password resets) cannot be opted out of while your account is active.
If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used; (b) request deletion of your personal information; (c) opt out of the sale of personal information; and (d) not be discriminated against for exercising your privacy rights. DwellQ does not sell your personal information and has never sold personal information. To exercise any of your rights under the CCPA, including submitting a “Do Not Sell My Personal Information” request or verifying our data practices, email support@dwellq.io with the subject line “CCPA Request.” We will respond within 45 days as required by law.
If you are located in the European Economic Area, our legal basis for processing your data is: (a) your consent (account creation); (b) performance of a contract (paid tier purchases and subscriptions); and (c) legitimate interests (security, service improvement). You have the right to lodge a complaint with your local data protection authority.
DwellQ uses browser local storage to maintain your session state and preferences. Our analytics provider (PostHog) may set a first-party cookie to distinguish unique visitors, but this data is anonymized and not used for advertising or cross-site tracking. We do not use third-party advertising cookies. No data from cookies is sold to or shared with advertisers.
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at support@dwellq.io, and we will take steps to delete such information.
We implement reasonable technical and organizational safeguards to protect your data, including: encrypted data transmission (TLS/HTTPS), cryptographic password hashing, role-based access controls, and secure third-party infrastructure providers who maintain SOC 2 compliance. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Effective Date” at the top of this document indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance.
For questions about this Privacy Policy or to exercise your data rights:
Email: support@dwellq.io
Subject line: “Privacy Inquiry,” “Data Deletion Request,” or “CCPA Request”