Privacy Policy
Effective date: Pending — not yet in effect
This is a pre-launch draft and will be finalized before public launch.
1. Who we are
Patrimonio, operated by Patrimonio LLC, an Oregon limited liability company (“Patrimonio,” “we,” “us”), provides software that helps families plan and manage shared living arrangements. This policy explains what personal information we collect, how we use and share it, and the choices you have. It applies to the Patrimonio website and app.
Two kinds of people use Patrimonio: families planning a shared home, and providers who list a practice in our Find Help directory. Most of this policy applies to both. Sections 5 and 6 cover the parts that do not.
2. Information we collect
We collect only what you give us and what we need to run the Service:
- Account information — your name, email address, and password (stored securely by our authentication provider).
- Household and planning information you enter — household members and relationships, ages, income, debts, property values, mortgage details, contributions, and shared expenses. You provide this to use the planner and expense manager.
- Listing information, if you list a practice — see section 5.
- Directory activity — which listings you opened contact details for, and any answer you give when we ask how it went. See section 6.
- Billing information — handled by our payment processor. We do not store your full payment card number.
- Technical information — the standard request logs our hosting provider keeps, such as the page requested, IP address, browser and time. We do not run any third-party analytics, and we do not track you across other sites.
All planning and household data is information you enter yourself. We do not buy personal information about you from data brokers.
3. How we use your information
We use your information to provide and operate the Service, calculate the estimates and dashboards you ask for, process your subscription, communicate with you (for example, account and transactional email), provide support, keep the Service secure, and comply with law. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
4. How we share information
We share information only as needed to run the Service: with the household members and recipients you choose (for example, when you share a plan link), and with service providers who process data on our behalf under contract, including our hosting and database provider, our payment processor, and our email provider. We may also disclose information if required by law or to protect rights and safety. If we are ever involved in a merger or acquisition, information may transfer as part of that transaction, subject to this policy.
We do not pass your details to a listed provider. If you contact one, you contact them directly, and they learn only what you tell them.
5. If you list your practice
A listing is a public advertisement, and most of what you give us for one is meant to be read by families: your name, practice name, description, specialisms, location, service area, and contact details all appear on your listing.
Some of it is never published. Your credential type, number and issuing body are used to confirm you against the relevant public register; we show families only that a check was made and when. If your category involves entering a client’s home, your liability insurer, policy number and expiry date, and your confirmation that everyone attending a home has passed a criminal background check, are likewise held by us and not displayed. We record what you confirmed and when you confirmed it.
We record who here checked your credential, when, and what they found. That record is ours, not part of your listing.
We do not run criminal background checks on you or your staff, and we are not a consumer reporting agency. What we hold is a statement you made about your own screening, not the result of any check we performed.
We tell you how many families reached out through your listing, and when. We never tell you who they were, whether they answered our follow-up question, or what they said.
6. Enquiries, follow-up questions and reports
When you open a listing’s phone number, email address or website, we record that it happened, so that we can ask you about it later and tell the provider how many enquiries their listing produced.
A couple of weeks afterwards we may ask how it went. Your answer is private. There are no public reviews on Patrimonio. Your answer is not published, is not shown to the provider, and is not shown to other families. We read it so that we know which listings to look at.
The same is true of a report you make about a listing. We do not tell a provider who reported them, and we will not disclose that to them — including in response to a request they make for their own data. If acting on a report means the provider can work out who made it, we will tell you before we act where we sensibly can.
If you delete your account, your answers and reports remain, with your identity removed. What was said about a provider’s conduct is a record we keep; who said it is not.
7. Your privacy rights
Depending on where you live (for example, under the Oregon Consumer Privacy Act, and the California Consumer Privacy Act as amended for California residents), you may have the right to access, correct, delete, or receive a copy of your personal information, and to appeal a decision about a request. Because we do not sell or share personal information for advertising, there is nothing to opt out of in that respect. To exercise a right, contact us at the address below; we will respond as required by law and will not discriminate against you for exercising a right.
Two limits, described in full in section 8: we keep records of reports made about a listing, and we keep enough to recognise a provider who was reported if they try to list again. We rely on our legitimate interest in the safety of the families who use this directory, and on the establishment and defence of legal claims.
8. Data retention and deletion
We keep your information for as long as your account is active and as needed to provide the Service. You can ask us to delete it at any time.
If you ask us to delete a household, the data is destroyed after a short notice period, during which the household stays usable and you can change your mind. After that it is gone: scenarios, properties, income records, debts, expenses, contributions, and any shared plan links.
If nobody signs in to a household for two years, we email you and then schedule the same deletion. Signing in stops it. Households with a current or paused subscription are not deleted for inactivity.
If you close a provider account, your subscription is cancelled, your listing comes out of the directory, and your name, contact details, credential and insurance details are erased.
Two things are kept, and we want to be plain about why.
- Reports made about your listing. If a family told us something went wrong, that record stays. If it did not, closing an account would be the easiest way to erase a complaint, and the people most motivated to do that are the ones this directory exists to keep out.
- Enough to recognise you if you list again — your email address and licence number — but only where a report was made about your listing. A provider who simply left has nothing kept.
Neither is shown to anyone outside Patrimonio, and neither appears in the directory. If you believe a report about you is wrong, write to us and a person will look at it.
We may also keep information longer where the law requires it, or where we need it to establish, exercise or defend a legal claim.
9. Security
We use industry-standard measures — including encryption in transit, access controls, and database row-level security — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Cookies
We use cookies for one thing: keeping you signed in. They are set when you log in, they are how the Service recognises the session as yours on each request, and clearing them signs you out. If you are not signed in, we set no cookies at all.
We do not use advertising, retargeting or cross-site tracking cookies, and we do not load a third-party analytics script. That is why the Service does not ask you to accept cookies when you arrive — there is nothing to consent to beyond what is needed to sign you in.
11. Children
The Service is intended for adults and is not directed to children under 13, and we do not knowingly collect their personal information. Information about minors in a household should be entered only by a responsible adult and limited to what the household chooses to record.
12. Changes to this policy
We may update this policy. If we make material changes, we will provide notice as required by law and update the effective date.
13. Contact us
Questions or privacy requests? Contact us at support@patrimonio.family. See also our Terms of Service.