Privacy Policy

Last updated: April 25, 2026

1. Overview

Overlocked ("we," "us") provides cloud-based self-storage facility management software to operators ("Operators"), who in turn use the platform to manage relationships with their renters ("Renters"). This Privacy Policy explains what personal information we collect, how we use it, and the rights you have over that information.

2. Information We Collect

Operator account information. When an Operator signs up, we collect business name, email, password (hashed), billing address, and payment-method tokens. We never store raw payment-card numbers.

Renter information. When an Operator (or a Renter via the self-service portal) creates a Renter record, we may store name, email, mobile phone number, mailing address, government-ID details for identity verification, license-plate, insurance documents, and unit-access credentials (gate code, PIN). The Operator is the data controller for Renter information; we are a data processor.

Usage information. We collect access logs, IP addresses, browser type, and pages visited to operate and secure the Service.

SMS consent records. When a Renter opts in to SMS, we record the timestamp, IP address, browser identifier, and the exact text version of the consent language they agreed to. This record is retained for the lifetime of the Renter relationship as proof of consent.

3. How We Use Information

  • To provide and improve the Service.
  • To send transactional communications (account alerts, billing notices, lien-process notices, maintenance updates) via email or — if you have opted in — SMS.
  • To process payments (via our payment-processing partners).
  • To detect, prevent, and respond to fraud, security incidents, and abuse.
  • To comply with legal obligations.

We do not sell your personal information. We do not share Renter information with third parties for marketing purposes.

4. SMS / Text Messages

SMS messages from Overlocked are sent only to Renters who have affirmatively opted in. The information you share when you opt in (mobile number, IP, consent timestamp) is used solely to deliver SMS and to demonstrate consent if asked. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

You may revoke consent at any time by replying STOP to any message we send, or by unchecking the SMS-consent box in your renter portal account settings. See our SMS / Text Message Communications section in the Terms of Service for details.

5. Service Providers

We share information with vendors who help us operate the Service, including:

  • Cloud hosting (Google Cloud Platform) — to run our infrastructure.
  • Payment processing (Stripe) — to handle card transactions.
  • Email delivery (SendGrid) — to send transactional email.
  • SMS delivery (Twilio) — to send transactional SMS, only to Renters who have opted in.

Each of these providers is contractually bound to use information only to provide services to us, and to maintain commercially reasonable security practices.

6. Data Retention

We retain account information for the duration of your relationship with us, plus a reasonable period thereafter to comply with legal obligations and resolve disputes. Audit-log records (including SMS-consent capture and revocation) are retained for the lifetime of the account as a tamper-evident record.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information, and to opt out of certain processing. To exercise any of these rights, contact us at privacy@overlocked.io. Renters whose information is held by an Operator should contact that Operator directly; Overlocked will support the Operator in fulfilling such requests.

8. Security

We use commercially reasonable measures to protect personal information, including encrypted transport (HTTPS), encrypted storage, isolated tenant boundaries, audit logs of administrative actions, and least-privilege access for engineers and support staff. No system is perfectly secure, however, and we cannot guarantee that personal information will never be accessed by unauthorized parties.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here and update the "Last updated" date at the top. Material changes affecting how we use Renter information for SMS or email will be communicated to affected users.

10. Contact

Questions about this Privacy Policy can be directed to privacy@overlocked.io.