Apartment Hunter Privacy Policy

Last updated: October 26, 2026

This Privacy Policy explains how MBACIO, LLC ("MBACIO," "we," "us," or "our"), 2515 Waukegan Road, Bannockburn, Illinois 60015, collects, uses, and shares information when you use Apartment Hunter, including the Apartment Hunter Grok Bot template, the Apartment Hunter API, and the Apartment Hunter Pro subscription (together, the "Service"). Privacy questions and requests: info@mbacio.com.

1. Scope

This policy covers information processed by MBACIO to provide the Service. Apartment Hunter runs inside a third-party AI assistant platform. That platform, and other services you use directly (such as Stripe's checkout page and listing websites you visit), collect and use information under their own privacy policies, which we do not control. Do not place personal information in public or shared bot conversations.

2. Information we collect

Information you provide or that the Service sends on your behalf

• Search requests: the content of requests the bot sends to our API, such as locations, budget, number of bedrooms, move-in timing, and other criteria you choose, along with any text the bot includes so the AI provider can rank listings or draft notes. We pass this content through to our providers to answer the request; our API does not keep a copy of request or response content.
• Support communications: information you send when you email us.

Account and billing information

• Apartment Hunter key: a randomly generated key, its plan (Free or Pro), creation date, and monthly usage counts.
• Subscription information from Stripe: when you buy Pro, Stripe sends us your Stripe customer ID, subscription ID, subscription status, and the email address you entered at checkout. Stripe collects your payment card details directly; we never receive your full card number or security code.

Technical information

• IP address: we use the IP address of each request for rate limiting and to limit how many free keys one network can create each day. Short-term rate-limit counters expire within minutes. For free-key limits we store the IP address (for IPv6, only the first 64 bits) together with the date and a count.
• Request metadata: our hosting provider, Cloudflare, processes standard request information (such as IP address, time, and request headers) to deliver and secure the Service.

Information we do not collect. We do not ask for or need information about your race, color, religion, sex, national origin, disability, familial status, source of income, or other protected characteristics, and the Service does not use them. We do not collect precise device location. The Service does not perform facial recognition or collect biometric identifiers. Please do not submit government ID numbers, bank account details, health information, or unnecessary information about other people.

3. How we use information

We use information to:

• provide the Service, including forwarding your requests to AI and listing providers and returning results;
• issue keys, track usage against plan limits, and apply rate limits;
• process Pro subscriptions, upgrades, downgrades, and cancellations;
• prevent fraud, abuse, and security incidents;
• respond to support requests and communicate with you about your subscription or changes to the Service; and
• comply with law and enforce our Terms of Service.

We do not use your information for advertising, and we do not use protected characteristics to filter, rank, or steer housing.

4. How we share information

We share information only as needed to operate the Service:

• Typesafe AI, our AI provider, receives the content of AI requests to generate rankings, summaries, and drafts.
• Stripe processes Pro payments and subscription management.
• Cloudflare hosts our API and stores our key and usage records.
• The AI assistant platform that hosts the template sees your conversations with the bot under its own privacy policy.
• Legal and safety: we may disclose information if required by law or legal process, or when reasonably necessary to protect the rights, safety, or security of users, MBACIO, or others.
• Business transfers: if MBACIO is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

The Service does not send messages to landlords or anyone else. If you send a message the Service drafted, you choose what information it contains and who receives it.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or targeted advertising.

5. Retention

We keep information only as long as reasonably necessary for the purposes in this policy:

• Key and plan records are kept while your key exists. If you ask us to delete your key, we delete the key record.
• Monthly usage counts expire automatically about 70 days after the month they cover.
• Stripe customer and subscription IDs and checkout email are kept with your key record while it exists, and billing records are kept as long as needed for tax, accounting, and legal purposes.
• Post-checkout key-delivery records and payment-event records expire after 7 days.
• Rate-limit counters expire within a few minutes.
• Daily free-key counters by IP address are kept only as long as needed to prevent abuse.
• Support emails are kept as long as needed to resolve your request and for our records.

Stripe, Cloudflare, Typesafe AI, and the AI assistant platform retain information under their own policies.

6. Security

We use reasonable safeguards designed to protect information, including encrypted (HTTPS) connections, randomly generated keys, verification of Stripe payment-event signatures, and keeping provider credentials in encrypted secret storage that users never see. No system is perfectly secure. Report security concerns to support@mbacio.com. We will notify you of a security breach affecting your personal information when required by law.

7. Your choices and rights

You may ask us to access, correct, or delete personal information we hold about you, or to provide a copy of it, by emailing info@mbacio.com. To help us find your records, include your Apartment Hunter key or the email address you used at checkout. We may need to verify your request before acting on it, and we may keep information where the law requires or allows (for example, billing records). We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights. Depending on where you live, you may have additional rights under state law, including the right to appeal our decision by replying to our response; we will honor those rights as required by law.

You can stop using the Service at any time and cancel Pro as described in our Terms of Service.

8. Cookies

The Apartment Hunter API does not use cookies. Stripe's checkout page uses cookies and similar technologies under Stripe's own privacy policy, and the AI assistant platform may use them under its policy.

9. Children

The Service is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact info@mbacio.com and we will delete it.

10. Where we process information

MBACIO is located in the United States, and the Service is intended for use in the United States. Our providers may process information in the United States and other countries where they operate.

11. Changes

We may update this policy. We will post the updated policy with a new "Last updated" date and, for material changes, give reasonable advance notice through the Service or by email if we have your address. We will not use previously collected information in a materially different way without any consent the law requires.

12. Contact

MBACIO, LLC
2515 Waukegan Road
Bannockburn, Illinois 60015
Privacy: info@mbacio.com
Support: support@mbacio.com