Privacy Policy

1. Introduction

TurnAudit, LLC. (“TurnAudit,” “we,” “us,” or “our”) operates the TurnAudit platform, available at turnaudit.com and through our web application (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and business name when you create an account.
• Payment Information: Billing address and payment details. Payment processing is handled by our third-party payment processor; we do not store full credit card numbers.
• Property Data: Property names, addresses, room configurations, and custom inspection rules you set up in the Service.
• Walkthrough Media: Video recordings, images, and extracted frames uploaded through the Service for turnover documentation and optional advisory review.
• Communications: Messages you send to us through email, contact forms, or support requests.
• Email Signup: If you sign up for launch notifications or our newsletter, we collect your email address.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, click patterns, and interactions within the Service.
• Device Information: Browser type, operating system, device type, screen resolution, and language preference.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies as described in the Cookies section of this Privacy Policy.

2.3 SMS and Text Messaging

If you verify your phone number or reset your password by text, you provide your mobile number and request a one-time passcode; submitting that request is your consent to receive a verification code by SMS. These messages are transactional only. TurnAudit does not send marketing texts and does not add your number to any list. Message frequency is limited to the codes you request (typically one per verification or reset). Message and data rates may apply. Reply HELP for help or STOP to opt out. Mobile phone numbers and SMS opt-in/consent information are never sold, and are not shared with third parties or affiliates for their own marketing or promotional purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process your walkthrough recordings, preserve them as your condition record, and generate advisory review summaries linked to your source footage.
• When you select advisory AI review, compare pre-clean or post-clean walkthroughs against your recorded baseline.
• Send you advisory review results, alerts, and summaries.
• Process payments and manage your subscription.
• Respond to your inquiries and provide customer support.
• Send administrative communications (account confirmations, security alerts, policy changes).
• Send marketing communications if you have opted in (you can opt out at any time).
• Analyze usage patterns to improve the Service.
• Detect, prevent, and address technical issues, fraud, or security concerns.

4. AI Processing and Your Property Data

How walkthrough media is used. Walkthroughs are recorded in the empty property after guest checkout; footage may incidentally capture belongings a departed guest left behind, and hosts and cleaners are instructed to record the property, not people. To generate your advisory review summaries, we send still frames extracted from your walkthroughs, never your original video files, to trusted third-party AI services (such as OpenAI). Your original master recordings stay in TurnAudit’s storage and are never transmitted to AI providers. TurnAudit does not use your walkthrough media or finding feedback to train or improve AI models unless you explicitly opt in. Your original evidence files are never altered by any of this processing. When frames are sent to third-party services for analysis:

• They are transmitted securely via encrypted connections.
• They are used only to generate your specific advisory review summaries.
• They are handled under the provider’s API terms, which govern provider-side retention and use for security and abuse monitoring. We do not permit our AI providers to use your media to train their models. Explicit training opt-in: TurnAudit does not use your media or finding feedback to train or improve AI models unless you explicitly opt in. You can withdraw that consent at any time by emailing privacy@turnaudit.com or, where available, in Settings. Withdrawal applies to future training use and does not affect your service or pricing.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: Third-party vendors who assist us in operating the Service (hosting, payment processing, AI analysis, email delivery, analytics). These providers are contractually required to protect your data.
• Within Your Account: If you invite cleaners or team members, they will have access to property and condition-record data within the scope of their assigned role.
• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• With Your Consent: When you explicitly authorize us to share information.
• Microsoft Clarity: After you accept optional analytics, Microsoft receives masked interaction data from public marketing and signup pages to provide product analytics, heatmaps, and session replay. TurnAudit masks all page text and form input content, does not pass account identifiers, email addresses, or form values to Clarity, denies advertising storage, and stops Clarity before an authenticated application screen is shown.
• Meta Pixel and Conversions API: When Meta measurement is enabled and you accept optional analytics and advertising, Meta receives website conversion events from public marketing and signup pages for advertising measurement, delivery optimization, and personalization. TurnAudit sets the _fbc browser identifier when an eligible Meta click identifier is present; Meta Pixel may set _fbp after consent. Server-side events contain the event name and time, the generic TurnAudit site origin without a page-specific path or query parameters, available Meta browser identifiers, a SHA-256 hash of a random visitor identifier, the browser user-agent, and the client IP address when available, all sent transiently to Meta for conversion measurement. A SHA-256 hash of the normalized email address is included only after an eligible signup completes. These hashed identifiers remain personal data. TurnAudit does not store the user-agent or client IP address as part of these funnel events and does not send the raw visitor identifier, passwords, form field values, damage or dispute details, or unhashed email addresses to Meta.

6. Data Retention

• Account Data: Retained for as long as your account is active. Account deletion is handled on request: email support@turnaudit.com and we remove your personal data within 30 days, subject to legal retention requirements and the walkthrough-media retention periods below. Sealed originals already in write-once storage cannot be deleted early when you cancel or delete your account. They remain locked until their scheduled expiry, about 12 months from capture, and are then deleted automatically. Media subject to an active legal hold is preserved until the hold is released.
• Walkthrough Media: Walkthrough recordings are video-only; TurnAudit does not capture audio. When a pre-clean or post-clean walkthrough enters our evidence pipeline, the uploaded master recording is copied into tamper-evident, write-once storage. Locked originals are retained for about 12 months from capture and are then deleted through a scheduled storage lifecycle process. Working copies and derived analysis frames are deleted approximately 30 days after a turnover is completed (approximately 90 days on the free trial). Frames flagged as issues and advisory review results are kept as part of the turnover record while your account is active. Baseline reference recordings are retained while your account is active. If you need the original for longer, export and preserve the evidence package before its retention period ends and contact us at privacy@turnaudit.com. You may export original recordings and their integrity manifest during the retention period. You may request earlier deletion of recordings that are not subject to a write-once retention lock; verified requests are honored except where the law requires retention.
• Usage and Log Data: Retained for up to 24 months for analytics and security purposes.
• Email Signup Data: Retained until you unsubscribe or request deletion.

TurnAudit retains locked originals for about 12 months from capture. To keep evidence longer, export and preserve it before that period ends.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Secure authentication and access controls.
• Regular security assessments.
• Access to personal data is limited to employees and contractors who need it to perform their duties.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the link in any email or by contacting us.
• Data Portability: Request your data in a portable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@turnaudit.com.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt out of the sale of personal information (we do not sell your data); and not be discriminated against for exercising your rights. To submit a request, email privacy@turnaudit.com.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

11. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly.

12. Cookies

We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. You can manage cookie preferences through your browser settings.

TurnAudit uses the first-party cookies ta_utm and ta_utm_last for up to 30 days to preserve signup attribution across pages. They record the first and most recent marketing touches that led to signup. We do not share the data in these cookies with third parties.

When you select Accept on the analytics banner, TurnAudit grants the Google Consent Mode signals analytics_storage, ad_storage, ad_user_data, and ad_personalization so we can measure which ads lead to signup and personalize advertising. Selecting Reject keeps these optional analytics and advertising signals denied.

Microsoft Clarity records only after you select Accept and only on public marketing and signup pages. TurnAudit stops Clarity before an authenticated application screen is shown and prevents recording when you select Reject or when your browser sends a Global Privacy Control signal.

After consent, Clarity may set the first-party cookies _clck, which stores a pseudonymous Clarity visitor identifier and preferences, and _clsk, which links page views into one session recording. TurnAudit denies Clarity advertising storage.

When Meta measurement is enabled, TurnAudit sends no Meta Pixel or Conversions API event before you select Accept, after you select Reject, while your browser sends a Global Privacy Control signal, or from a device marked for internal quality assurance. Browser and server copies of the same completed-registration event use one random event identifier so Meta can deduplicate them. Hashed email and visitor identifiers remain personal data even though the original values are not sent.

TurnAudit creates a random first-party visitor identifier in local storage and a random session identifier in session storage to deduplicate six first-party funnel events and measure engagement. This pseudonymous first-party measurement runs regardless of your optional analytics choice or a Global Privacy Control signal; optional advertising and session-replay tracking remain consent-gated and are blocked by Global Privacy Control. These identifiers are not derived from your name, email address, or other form values and are not placed in URLs. After you consent to optional analytics and advertising, TurnAudit sends a SHA-256 hash of the random visitor identifier to Meta for server-side Lead, SignupStarted, and CompleteRegistration events to improve conversion matching; the raw visitor identifier is never sent to Meta. This may improve Meta's matching, and the hashed visitor identifier remains personal data. The visitor identifier remains until browser storage is cleared, and the session identifier ends with the browser tab session. On devices opened with qa=1, TurnAudit suppresses these first-party events, and a ta_qa cookie remains for up to one year with a matching local-storage marker that remains until browser storage is cleared.

Cookie inventory: ta_cookie_consent is set by TurnAudit when you choose Accept or Reject, stores that consent choice, and lasts for up to one year. _fbc is set by TurnAudit after consent when an eligible Meta click identifier is present, supports conversion attribution, and lasts for up to 90 days. _fbp is set by Meta Pixel after consent, distinguishes browsers for advertising measurement and delivery, and lasts for up to 90 days.

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

TurnAudit, LLC.
Email: privacy@turnaudit.com
Website: turnaudit.com