Privacy Policy

Last Updated: August 24, 2026

Introduction

Nymble Payments respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices and rights you have.

This policy applies to our websites and to the landlord, tenant, and administrative applications operated by Nymble Payments.

Who We Are

Nymble Payments is a rent collection and property management platform operated by Noe Reit Inc. Landlords use the platform to collect rent, track property income and expenses, and manage maintenance requests. Tenants use it to pay rent and submit maintenance requests.

We do not hold customer funds. All money movement is performed by our payment processor.

Information We Collect

Information you provide

• Identity and contact information. Name, email address, phone number, postal address.
• Account information. Login credentials held by our authentication provider, notification preferences, and role.
• Property and lease information. Property and unit addresses, lease terms, rent and deposit amounts, tenancy dates.
• Payment information. Transaction history, payment status, and records of payments recorded manually by a landlord. Card numbers and bank account numbers are collected and stored by our payment processor, not by us.
• Maintenance information. Request descriptions, messages between landlords and tenants, access and availability notes, appointment times, and photographs submitted with a request.
• Vendor information. Where a landlord adds a repair vendor, that vendor's name, company, phone number, email address, and notes.
• Expense information. Amounts, dates, categories, and notes recorded by a landlord.

Financial account information

Landlords may choose to connect a bank account so that property income and expenses import automatically instead of being entered by hand. This feature is optional and is off unless a landlord enables it.

When a landlord connects a bank account:

• The bank login is entered with our bank connectivity provider, Plaid. Nymble Payments never receives or stores your banking username or password.
• Our access is read only. We cannot move money, initiate transfers, or make payments from a connected account.
• We do not request or store full bank account numbers or routing numbers.
• We receive and store bank and institution names, account type, a masked account identifier such as the last four digits, and transaction records including merchant or description text, amount, date, and category.
• We use this information solely to present transactions to the landlord for review and to record the ones they confirm as property income or expenses.

A landlord can disconnect a bank account at any time. On disconnection we immediately destroy the credential that allows us to read the account. Records the landlord has already confirmed remain in their account as their own business records.

Information collected automatically

• Technical data. IP address, browser type, device information.
• Usage data. Pages visited, features used, and time spent on the platform.
• Cookies and similar technologies. We use cookies necessary to keep you signed in and to operate the platform, and limited analytics to understand how the platform is used. We do not use advertising cookies and we do not sell advertising.

Consent records

When you accept our Terms of Service, Privacy Policy, or electronic signature consent, we record the version and content hash of the document you accepted, the time of acceptance, your IP address, and your browser user agent. This creates a verifiable record of what you agreed to and when.

How We Use Your Information

• To provide and operate the platform.
• To process rent payments and record transactions.
• To send notices related to your account, payments, leases, and maintenance requests.
• To import and categorize bank transactions where a landlord has connected an account.
• To detect and prevent fraud and abuse.
• To improve the platform and develop new features.
• To meet legal, tax, and financial record-keeping obligations.

Artificial Intelligence Features

Some maintenance features use a third-party AI provider to help landlords work faster. Where these features are used, the relevant text is sent to that provider to generate a suggestion. This includes maintenance request descriptions, the property street and unit, tenant-provided access or availability notes, message drafts written by a landlord, and recent messages in a maintenance conversation.

These suggestions are advisory. A landlord reviews and decides whether to use them, and tenants are not shown AI output directly.

We do not send bank transaction data to an AI provider. Prompts and AI responses are not retained in our application logs. Our AI provider does not use this data to train its models.

Information Sharing and Disclosure

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information with the following categories of service providers, each of which is limited to the purpose described:

We also share information:

• Between landlords and tenants, where it is necessary to the rental relationship. A landlord can see payment and maintenance activity for their own properties. A tenant can see their own lease, payments, and maintenance requests. Tenants cannot see other tenants, and landlords cannot see other landlords' data.
• With repair vendors, where a landlord assigns a work order. Vendors receive the job details and the property address, and are shown only the specific work order assigned to them.
• When required by law, legal process, or a valid government request.
• In connection with a business transfer, such as a merger, acquisition, or sale of assets.

Data Security

We use technical and organizational measures appropriate to the sensitivity of the information we hold. These include encryption of data in transit using TLS, encryption of data at rest, application-layer encryption of bank connectivity credentials using AES-256-GCM with keys held in a managed key service, server-side authorization on every request, isolation between accounts, and cryptographic verification of every incoming integration webhook.

Multi-factor authentication is available on all accounts and we recommend enabling it, particularly if you connect a bank account.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

How Long We Keep Information

We keep information for as long as your account is active and afterwards as needed to meet legal, tax, accounting, and financial record-keeping obligations, to resolve disputes, and to enforce our agreements.

Specific practices include:

• Payment records are retained as business records. Completed payments are immutable once processed.
• Payment requests that have been deleted for more than sixty days are permanently removed.
• Contact form and message attachments in file storage are removed after ninety days.
• Bank connectivity credentials are destroyed immediately when a landlord disconnects an account.
• Consent records are retained for as long as needed to evidence the agreement.

We are in the process of publishing a complete retention schedule by data category. If you would like to know how long a particular category of information is kept, contact us and we will tell you.

Your Rights and Choices

Depending on where you live, you may have the right to request access to your personal information, correction of inaccurate information, deletion of your information, restriction of processing, a portable copy of your information, or to object to processing or withdraw consent.

To exercise any of these, contact us using the details below. We will respond within the period required by applicable law. We may need to verify your identity before acting on a request.

Where information must be retained to meet a legal or financial record-keeping obligation, we will tell you what we are keeping and why.

California residents

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended, including the right to know what personal information we collect and how it is used and disclosed, the right to delete personal information subject to legal exceptions, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising these rights.

The categories of personal information we collect are described in the Information We Collect section above, which also identifies the sources, our purposes, and the categories of third parties who receive it.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising.

To make a request, contact us using the details below.

Children's Privacy

The platform is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

International Data Transfers

We operate in the United States and our service providers may process information in other countries. Where information is transferred internationally, we take steps to ensure it remains protected in a manner consistent with this policy.

Changes to This Privacy Policy

We may update this policy. Material changes will be reflected in the Last Updated date above, and where required we will notify you directly. We encourage you to review this policy periodically.

Contact Us

Questions, concerns, or requests regarding this policy or our data practices:

Email: j@nymblepayments.com

You can also reach us through the Contact Support option inside your Nymble Payments account.

A mailing address is available on request.