Privacy Policy

ACK Investments LLC · Effective November 1, 2026

ACK Investments LLC ("ACK", "we") owns and rents out residential properties in Akron, Ohio. We run a private bookkeeping dashboard for the company's own owners. This policy explains what information that dashboard holds, why, and how it is protected. The dashboard is not offered to the public; only ACK's approved partners can sign in.

Information we collect

• Company bank data through Plaid. When a partner connects ACK's business bank account through Plaid, we receive the account name, the last four digits of the account number, balances and transactions (date, amount, description, merchant and category). We never see or store bank login credentials; those are entered only in Plaid's interface.
• Rent payment notices. From the payment emails that our rent collection service (RentRedi) sends to ACK, we record the property address, the paying tenant's name, the amount, the payment date and the remaining balance.
• Property documents. Statements, invoices, leases and similar documents that partners upload.
• Sign-in and audit data. The approved partners' email addresses, and a log of changes made in the dashboard (who, what, when, and the IP address).

How we use it

Only to keep ACK's books: recording rent, expenses and bank activity per property, reconciling them with statements and tax returns, and alerting the partners to missed rent or missing documents. We do not use the data for advertising, we do not sell it, and we do not share it except as described below.

Who we share it with

• Service providers that run the dashboard on our behalf: Plaid Inc. (bank connection), Cloudflare, Inc. (hosting, sign-in and storage) and Google LLC (email and the script that reads rent emails). Each processes the data only to provide its service.
• Our accountant and authorities when needed for tax filings or required by law.

Plaid's handling of data is described in the Plaid End User Privacy Policy.

Consent

A partner connects the bank account only after reading and accepting a consent statement in the dashboard. Each consent and each withdrawal of consent is recorded with the date and the partner's identity. Consent can be withdrawn at any time with the "Disconnect and delete data" button.

Security

• Every page and API sits behind Cloudflare Access (zero trust): only listed partners can sign in, and every request is checked again by the server.
• All traffic uses HTTPS (TLS) with HSTS.
• Stored data is encrypted at rest by the hosting provider. In addition, the Plaid access token is encrypted by us with AES-256-GCM and never sent to the browser.
• Changes are logged and access is reviewed every quarter.

Retention and deletion

• Disconnecting the bank deletes the Plaid access token and every stored Plaid transaction immediately, and asks Plaid to remove the connection.
• Bookkeeping records (summarized ledger, documents, rent records) are kept for seven years to meet tax record-keeping requirements, then deleted.
• Audit log entries expire automatically after 400 days.

To ask what we hold about you, or to have it corrected or deleted where the law allows, contact us below.

Changes

We will update the effective date above when this policy changes.

Contact

ACK Investments LLC · nadavbf1@gmail.com

This page is public. The dashboard itself requires sign-in.