Privacy Policy
Last updated: October 20, 2026
HOA Bucket is operated by Anglerfish Software LLC, a Colorado company (“we,” “us,” or “our”). This policy covers hoabucket.com and the related HOA Bucket service, including customer-authorized MCP connections. Our service is offered to U.S. HOA and condo associations.
For privacy questions or requests, email hello@hoabucket.com.
We do not sell customer data, share it for targeted advertising, or use association content to train AI models.
Information we collect and why
Section titled “Information we collect and why”| Information | How we use it |
|---|---|
| Account and membership information, such as your name, email address, authentication identifiers, association memberships, and permissions | Sign you in, manage accounts, control access, and communicate about the service |
| Association information, including addresses, properties, shared assets, vendor contacts, projects, schedules, comments, activity history, and uploaded files | Provide the workspace, connect related records, support collaboration, and preserve association history |
| Document content and extracted text | Display documents and make their contents searchable |
| Subscription and payment-related information, such as customer and subscription identifiers, plan, billing status, and transaction records | Manage subscriptions, payments, cancellations, refunds, and financial records |
| Technical and usage information, such as IP addresses, request times, browser or device information, pages visited, and error or security events | Operate and secure the service, troubleshoot problems, and understand usage |
| Messages and attachments you send us | Respond to support requests, feedback, billing questions, and privacy requests |
We receive information from you, from authorized members of your association, from service providers such as authentication and payment providers, and through use of our websites and app. Association records can contain information about residents, vendors, and other people who do not have an HOA Bucket account.
Payment details are entered through Stripe. HOA Bucket does not collect or store your full payment-card number or card security code.
Association records and access
Section titled “Association records and access”Your association determines what information it uploads, who has access, and how its members use that information. We process association records to provide the service to the association. Members can access information according to their permissions, and authorized administrators can manage membership and access.
Contact your association for questions about its own records or use of your information. You can also contact us; we may coordinate with the association to verify and fulfill a request. We manage account, support, and billing information for our own service operations.
Cookies, preferences, and analytics
Section titled “Cookies, preferences, and analytics”We and our authentication provider use cookies and similar browser storage for sign-in, sessions, security, and essential service functions. We also use browser storage for preferences such as your selected association or display theme. Blocking essential storage can prevent parts of the service from working.
We use self-hosted Umami analytics on the marketing site and, when enabled, in the app to understand visits and usage, such as page views, referring sites, and browser or device information. We do not use this information for targeted advertising.
When information is shared
Section titled “When information is shared”We share information as needed with:
- Your association and its authorized members, according to their access permissions.
- Service providers that help deliver the service. These include Clerk for authentication, Stripe for subscription billing and payments, Resend for transactional email, and providers of hosting, databases, file storage, and backups.
- Services you authorize, including an AI tool or other client you connect through MCP.
- Legal or security recipients, when reasonably necessary to comply with law or valid legal process, address fraud or abuse, or protect people and the service.
- A successor business, if a merger, acquisition, or similar transaction involves the service, subject to applicable privacy requirements.
Service providers receive the information needed for their functions. Some providers also process information under their own privacy policies, such as when they supply authentication or payment services directly to you.
AI tools and MCP connections
Section titled “AI tools and MCP connections”Connecting an external AI tool is optional. When you authorize a connection, the tool can request association information and perform supported actions within your account’s permissions. The information returned to that tool leaves HOA Bucket and is subject to that tool’s terms, privacy policy, retention rules, and settings.
Our commitment not to use association content to train AI models applies to HOA Bucket. It does not determine how a third-party AI provider handles information you choose to share with it. Review that provider’s settings before connecting it. Disconnecting a tool does not necessarily delete information it already received; contact that provider about its copies.
Retention and deletion
Section titled “Retention and deletion”We retain association records and uploaded files while providing the active service. When paid access ends or a free trial expires without a subscription, the association has 90 days to read and search existing records and download existing files. This period supports retrieval or reactivation.
The 90-day period starts at the end of paid access, including the effective date of an early cancellation with a prorated refund, or at the end of an unsubscribed trial. If the association reactivates during the period, its retained records remain part of the active service. Otherwise, we delete association records and uploaded files from the live system after the period ends, subject to the limited exceptions below.
An authorized association representative can request earlier deletion at hello@hoabucket.com. Individual privacy requests are handled according to applicable law; the 90-day recovery window does not override a legal obligation to act sooner.
Backups
Section titled “Backups”Backup copies are separate from the live system. Our configured backup retention is up to 6 days for daily backups, 27 days for weekly backups, and 89 days for monthly backups. A copy made before live-system deletion can therefore remain in a backup for up to 89 additional days after deletion. Backup retention does not extend ordinary account access or guarantee that deleted records can be recovered.
Limited retained records
Section titled “Limited retained records”We may retain specific billing, transaction, support, security, or legal records for as long as reasonably necessary to meet legal obligations, resolve disputes, prevent abuse, or document how requests were handled. These exceptions do not authorize keeping the entire association workspace indefinitely.
Deleting an association does not necessarily delete a user’s account if that user belongs to another association. Removing a member or closing an individual account also does not automatically erase shared association history that the association is entitled or required to retain. Information already downloaded by members or shared with external services is held separately from HOA Bucket.
Your choices and requests
Section titled “Your choices and requests”Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to certain uses. Email hello@hoabucket.com and describe your request. We may ask for information needed to verify your identity, an authorized agent’s authority, or your authority over an association workspace.
We will respond within the time required by applicable law and explain any limits or exceptions. If you disagree with our response, reply with Privacy appeal in the subject line so we can review it. You may also contact the relevant state privacy regulator. We will not discriminate against you for exercising applicable privacy rights.
Our typical two-business-day support response is an acknowledgment target; completing a privacy request can require verification and additional time.
Security and children
Section titled “Security and children”We use authentication, access controls, and other safeguards intended to protect information. No service can guarantee absolute security. Please keep your sign-in credentials private and report suspected unauthorized access to hello@hoabucket.com.
HOA Bucket is intended for adults managing associations, not for children to create accounts. If you believe a child has provided personal information through an account, contact us so we can review and address it.
Changes and contact
Section titled “Changes and contact”We will update the date above when this policy changes and provide additional notice of material changes when required by applicable law. A future change does not override consent or other rights required by law.
Anglerfish Software LLC
Colorado, United States
hello@hoabucket.com