Enduring Labs Privacy Policy

Information We Collect

We collect information that you provide directly to us when you create an account, use our Service, or communicate with us. This includes your name, email address, phone number, company information, and any other information you choose to provide. Additionally, we collect property management data that you input into the Service, including resident information, maintenance records, vendor details, and financial data.

We also automatically collect certain information when you use the Service, including your IP address, browser type, operating system, device identifiers, pages viewed, and actions taken within the Service. We may use cookies, web beacons, and similar tracking technologies to collect this information.

How We Use Your Information

We use the information we collect to provide, maintain, and improve the Service; to process transactions and send related information; to send technical notices, updates, security alerts, and administrative messages; to respond to your comments, questions, and requests; to monitor and analyze trends, usage, and activities in connection with the Service; and to detect, investigate, and prevent fraudulent transactions and other illegal activities.

AI Processing

Mason uses artificial intelligence and machine learning to process property management data and automate workflows. Our AI systems analyze maintenance requests, resident communications, vendor interactions, and operational patterns to provide intelligent automation and recommendations. AI processing is performed on secure infrastructure with appropriate safeguards to protect data privacy and confidentiality.

We do not use your data to train general-purpose AI models. Any AI processing is specifically for providing and improving the Service for your account. You maintain full ownership of your data and may request deletion at any time.

Data Protection

We implement industry-standard security measures to protect your data, including encryption of data in transit (TLS 1.2+) and at rest (AES-256), regular security assessments, access controls based on the principle of least privilege, and comprehensive logging and monitoring. Our infrastructure is hosted on SOC 2 compliant cloud providers and we conduct regular penetration testing and vulnerability assessments.

Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information with third-party service providers who perform services on our behalf, such as hosting, analytics, and customer support. These providers are contractually obligated to protect your information and may only use it to provide services to us. We may also disclose your information if required to do so by law or in response to valid legal requests.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, delete, or port your data. You may also have the right to opt out of certain data processing activities. To exercise any of these rights, please contact us at hello@thisismason.com. We will respond to your request within thirty (30) days. California residents may have additional rights under the CCPA, and European residents may have additional rights under GDPR.

Governing Law

This Privacy Policy is governed by the laws of the State of California, without regard to its conflict of law principles. Any disputes arising from this Privacy Policy shall be resolved in the state or federal courts located in San Francisco County, California.

Schedule 1: Data Processing Agreement (DPA)

This Data Processing Agreement (“DPA”) forms part of the Privacy Policy and Terms of Service between Enduring Labs, Inc. (“Processor”) and the customer (“Controller”) for the processing of personal data in connection with the Service.

The Processor shall process personal data only on documented instructions from the Controller, including with regard to transfers of personal data to a third country. The Processor shall ensure that persons authorized to process personal data have committed themselves to confidentiality. The Processor shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Upon termination of the Service, the Processor shall, at the choice of the Controller, delete or return all personal data to the Controller and delete existing copies unless applicable law requires storage of the personal data. The Processor shall make available to the Controller all information necessary to demonstrate compliance with these obligations.

Contact Information

For questions about this Privacy Policy, please contact us at: