Privacy Policy

Last Updated: 2026-06-03

1. Who we are

Shenandoah Valley Property Maintenance Company LLC (“SVPMC,” “we,” “us,” or “our”) is a US-based property management company serving short-term rental property owners in the Shenandoah Valley area. This Privacy Policy describes how we collect, use, and protect information when you visit svpmc.com or any website we operate (collectively, the “Site”).

Our Site serves two audiences:

• General visitors — anyone browsing our public marketing pages to learn about our services.

• Property owner clients — registered customers who log in to our secure Client Portal to view data about their managed properties.

This policy covers both audiences. Where practices differ, we describe each separately.

2. What we collect and why

Information you give us directly

When you sign up for our mailing list, you provide us with your email address. We use this only to send you updates you asked for. By subscribing, you agree to receive emails from svpmc.com. You can unsubscribe at any time using the link in any email or the Unsubscribe option on the Site.

You can also reach us by email at contact@svpmc.com.

Consultation request form

Our Site includes a "Request a Property Consultation" form. When you submit this form, we collect the following information:

• Name (required)

• Company name (optional)

• Number of properties (required)

• Email address (required)

• Phone number (optional)

• Property location (required)

• Property type — Cabin, House, Condo/Townhome, or Other (required)

• Estimated guest capacity — 1–4, 5–8, 9–12, or 13+ (required)

• Services you are interested in — selected from a list including cleaning, hot tub/pool service, maintenance, lawn service, supplies, and hosting & consulting (required)

• Where your property is in the process — e.g., already operating, preparing to launch, evaluating conversion, or just exploring (required)

• Your main goals for property operations — selected from a list (optional)

• Any additional notes you choose to share (optional)

We use this information solely to follow up with you to schedule a consultation about your property and service needs. There are no automated quotes. Consultation request data is stored in our database and may be used by our team to prepare for your consultation. We do not use it for advertising or share it with third parties beyond what is described in this policy.

Client Portal — registered property owners

Property owners who register for a Client Portal account provide additional information in order to access their property data. This includes:

• Name and email address used to create and authenticate your account.

• Authentication — we use magic link logins. When you request access, we send a one-time sign-in link to your email address. We do not store passwords.

Once logged in, you can view data related to your managed properties, which may include:

• Rental income summaries and financial reports.

• Maintenance records and work order histories.

• Occupancy and booking information.

• Other operational reports generated by our property management team.

This information is associated with your account and the properties we manage on your behalf. We use it solely to provide you with visibility into your property’s performance and management activity. We do not use it for advertising or share it with third parties beyond what is described in this policy.

Anonymous page view counts

When you visit the Site, our server records an anonymous page view count. Each record contains only: which page was visited, which site it belongs to, and a timestamp. We do not log your IP address, browser type, or any other information about you or your device. We do not set session identifiers or any fingerprint linking one visit to another. There is no way to reconstruct the behaviour of any individual visitor from this data. No third-party analytics scripts are loaded on the Site.

To prevent duplicate counts within a single browsing session, a temporary entry is stored in your browser’s sessionStorage (not a cookie). This entry contains only the page identifier and expires automatically when you close your browser tab. It never leaves your device.

Cookies and local storage

The Site uses a small number of strictly necessary cookies. These are required for the site to function correctly and are not used for tracking or advertising:

• Locale preference cookie — remembers your language setting across visits.

• CSRF token cookie — a standard security measure that protects form submissions from cross-site request forgery attacks.

• Session and authentication cookies — set for property owners who log in to the Client Portal; not set for visitors who do not log in.

We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

On your first visit, we show a cookie notice. The notice states that we use essential first-party cookies to remember your preferences and improve your experience, and that we do not use third-party tracking cookies. You may choose Accept or Reject. We store your choice in your browser’s localStorage so we do not show the notice on every visit. Rejecting limits non-essential storage where applicable; strictly necessary cookies may still be required for the Site to function.

What we do not collect

We do not collect payment card information, government IDs, precise location data, or any other sensitive personal data beyond what is described above. We do not use social tracking pixels, cross-site tracking technologies, or third-party advertising networks. We do not sell, rent, or trade your personal information.

3. How we use your information

We use the information we collect to:

• Operate and improve the Site and Client Portal.

• Provide property owners with access to their property data, financial reports, and management records.

• Send you updates and communications you have requested.

• Respond to your inquiries sent to contact@svpmc.com.

• Understand in aggregate which pages are most useful so we can improve them.

• Detect and respond to security incidents and technical errors.

• Comply with legal obligations.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Our infrastructure and service providers

We use a small number of third-party services to operate the Site. Each is described below. We do not use any third-party advertising, analytics, or data-broker services.

Hosting — Vercel

The Site is hosted on Vercel (vercel.com). Vercel operates our web servers and CDN infrastructure in the United States. As with all web hosting, Vercel’s infrastructure receives your IP address as part of standard network routing when you visit the Site. Vercel may retain access logs for security and operational purposes. We have a Data Processing Agreement with Vercel that includes Standard Contractual Clauses for international data transfers from the EU/UK.

Database — Neon via Vercel

Client and subscriber data is stored in a PostgreSQL database provided by Neon (neon.tech), accessed through Vercel’s managed storage product. The database is located in the United States. Neon is covered as a sub-processor under Vercel’s Data Processing Agreement. Please note that data deleted from our database may persist in database backup logs for up to 7 days before being permanently removed. This does not affect our obligation to action deletion requests promptly.

Email delivery — Resend

We use Resend (resend.com) to send emails to mailing list subscribers and to deliver transactional messages. When we send an email, Resend receives the recipient’s email address, the content of the message, and delivery metadata (such as timestamps and delivery status). Open and click tracking are disabled. Resend may retain message content and related logs on its systems for a limited period in accordance with our Resend plan and settings. Resend processes this data under a Data Processing Agreement. Email addresses for our mailing list are stored in our own database (see above); Resend receives an address and message content only at the time of sending.

Error monitoring — Sentry

We use Sentry (sentry.io) to monitor application errors and diagnose technical problems. When an error occurs, Sentry may receive the error message, a code stack trace, and the type of page or API endpoint involved. We configure Sentry not to send IP addresses, cookies, or personal identifiers in error reports, and we apply additional scrubbing in our application and in Sentry’s settings. Sentry processes this data in the United States. Error reports are retained for up to 90 days and used solely for diagnosing and fixing technical issues.

5. How we share your information

We do not sell your personal information. Beyond the infrastructure providers described in Section 4 — each operating under a Data Processing Agreement — we share personal data only in the following circumstances:

• Legal requirements: We may disclose information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights or the safety of others.

• Business transfers: If Shenandoah Valley Property Maintenance Company LLC is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before any such transfer and give you the opportunity to delete your information.

6. Data retention

We retain your information only as long as necessary for the purposes described in this policy or as required by law.

• Mailing list subscribers’ information is retained until you unsubscribe.

• Client Portal account data is retained for the duration of our management relationship with you, and for a reasonable period thereafter as required for legal, tax, and accounting purposes.

• Anonymous page view counts contain no personal data and are retained indefinitely for operational purposes.

As noted in Section 4, deleted data may persist in database backup logs for up to 7 days before permanent removal. You may request deletion of any personal data we hold about you at any time by contacting us (see Section 9).

7. International visitors

Shenandoah Valley Property Maintenance Company LLC is a US-based company and our servers are located in the United States. If you are visiting from outside the US — including from the European Union or United Kingdom — your information will be transferred to and processed in the United States. We address this transfer through Standard Contractual Clauses included in our Data Processing Agreement with Vercel.

European Union and United Kingdom residents

If you are in the EU or UK, you have rights under the GDPR or UK GDPR, including the right to access, correct, or delete your personal data, the right to restrict or object to processing, and the right to data portability. Our lawful basis for processing your data is our legitimate interest in operating and improving the Site, or your consent where we rely on it (for example, for the mailing list). Client Portal data is processed on the basis of contractual necessity.

To exercise any of these rights, contact us at the address in Section 9. If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority.

California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect about you, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at the address in Section 9. We will not discriminate against you for exercising any of these rights.

8. Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. These include encrypted connections (HTTPS), encrypted environment variables for database credentials, magic link authentication (no passwords stored), access controls on infrastructure, and error monitoring configured to exclude personal data. The Client Portal requires authentication via a one-time email link and uses session cookies to maintain secure access.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

9. Your choices and how to contact us

You can:

• Unsubscribe from our mailing list at any time by clicking the unsubscribe link in any email we send.

• Request access to, correction of, or deletion of your personal data by contacting us directly.

• Log in to the Client Portal to view the property data associated with your account.

To exercise any of these rights, or if you have questions about this policy, contact us at privacy@svpmc.com.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If we make material changes, we will make reasonable efforts to notify you — for example, by posting a notice on the Site or sending an email to mailing list subscribers. Your continued use of the Site after any changes take effect constitutes your acceptance of the updated policy.