Privacy policy

Moveout helps tenants work out what they may be owed on a security deposit and, once letters are available in California, prepare and mail a demand letter they sign themselves. Doing that requires facts about your tenancy. This page says exactly which facts, why we need each of them, how long we keep them, and what we do not do with them.

What we collect

You give us these directly, one question at a time, and you confirm each one:

• The rental address you moved out of, including its state — we need it to know which state's deposit law applies and, if you buy a letter, where the letter is addressed from.
• Dates — your move-out date, and the date the landlord did or did not respond. Every statutory deadline is computed from these; without them there is no number to show you.
• Your name, if you start a checkout for a letter. It is printed on the letter as the person sending and signing it, and we use it only to prepare, sign and mail that letter.
• Amounts — the deposit you paid and the amount returned to you. The withheld balance and any statutory penalty are arithmetic on those two figures.
• Your email address, if you give it to us. It is how you get back to your case from another browser or device. We do not sell it and we do not rent it to anyone.
• Your landlord's name and mailing address, if you start a checkout for a letter. Each landlord address you enter is sent to our mail provider to be checked, whether or not you go on to buy the letter. Beyond that, the address is used to address and mail that letter and for nothing else. The landlord addresses you check, and what the check said about each, are kept with your case.

We never ask for a Social Security number, a government ID, a date of birth, or a bank account number. If you buy a letter, card details go directly to our payment processor; they never reach our servers and we never see or store them.

Why we use it

To compute and show you your own result; if you buy a letter, to prepare it, let you sign it, and mail it; to keep a record of what you saw and authorized, for as long as your account exists, so that the consent behind a mailed letter can be proven; to keep the purchase record described below; and to keep the service working, secure and free of abuse. That is the whole list. We do not build advertising profiles, and we do not use your case facts to market anything to you.

Who else sees it

Only the service providers that make the product work, and each sees only what its job requires: our hosting and database providers store your case; our sign-in provider handles signing in; on the pages where you answer questions about your case, including our front page, we load Cloudflare Turnstile to check that a person, not a bot, is using them, and it receives your network address, the page and signals from your browser; when we count page visits, our analytics provider does the counting; our mail provider receives each landlord address you enter, to check it, whether or not you buy a letter; and, if you buy a letter, our payment processor handles the purchase and our mail provider receives the letter and the landlord's address when you authorize the mailing. They process your information to do that job for us, under their own terms. Beyond that, we disclose information only when you ask us to, or when a law or valid legal process requires it.

Analytics

When we count page visits, we use Plausible, without cookies, advertising trackers or cross-site tracking. To count a visit, Plausible receives the page's address, the page you came from, your IP address and your browser's user agent. Plausible says it doesn't store your IP address or user agent; it uses them to make a visitor code that applies only to this site and only for that day, and it stores records of the pages viewed and the visits. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing for a Global Privacy Control signal from your browser to switch off, and we don't read the signal. See our Do not sell or share my personal information page.

How long we keep it

An abandoned case stays until you delete it; we don't yet delete abandoned cases automatically. A completed case is kept while your account exists so you can come back to it. If we store a file for your case, it is deleted when you delete your account. If that clean-up fails, or a case is removed some other way, the file can remain in our private storage, which only our own server can read, and we don't yet remove those files automatically.

If you pay for a letter, we also keep a record of the purchase, even if you delete your account. It says what you bought, what you paid and when, our order number and the reference our payment processor gave the payment, whether the payment was refunded or disputed, and which versions of our letter template, the law and our terms it was sold under. If the letter was handed to our mail provider, it also says the provider's reference and the tracking number, when we handed it over, and whether a refund or a dispute arrived while it was being sent. When we have it, the record also keeps a fingerprint of the exact letter file we handed over: a code worked out from the file, which can show that a given copy is the letter we handed over, but from which the letter's words, names or addresses can't be read back. That record also keeps the name you typed to sign your letter, when you signed, the network address you signed from, what your browser reported about itself, a fingerprint of the letter you signed and which agreement texts you accepted. It has no email address and no case address on it, but the payment and mailing references can be matched back to you by those companies, and the tracking number by anyone who has it, through the Postal Service's tracking site. So we treat it as personal information.

We keep that record for four years from the payment, or from the handover to our mail provider if that came later, and it is then scheduled for deletion by our daily clean-up. That is also true of a letter that was paid for but never mailed, and of a payment that was refunded. The messages our payment processor sends us about the purchase are kept with the record. If a payment was disputed and your account still exists when the four years end, we keep our note of the dispute for as long as your account exists, so that a letter lost in a dispute can't be downloaded again; once your account is gone, it is scheduled for daily deletion 90 days after the dispute closed. Anything we hold about a checkout that was never paid for is kept no longer than your case, or about 90 days after the checkout if that is later, and is then scheduled for daily deletion. Delivery notices from our mail provider are scheduled for daily deletion after 90 days, and crash reports after 30 days. We keep any of these longer while a letter you paid for is still waiting to be mailed or refunded, while a dispute about a payment is open, or while a message about a payment is still being processed or is waiting for us to review it, even if a later message seems to settle it. Two things wait for a person to review them before they are deleted: a message from our payment processor that arrived without its timestamp, and a payment whose records are too tangled for the daily clean-up to delete safely. We delete them once that review is done.

If you delete your account while a payment is being confirmed, we ask you to try again once it's recorded, which never takes more than about a day after you opened the payment page; after that we delete regardless.

Aggregate page-visit counts, when we keep them, carry no personal information and are kept indefinitely.

Your choices

You can see everything in your case at any time, correct any fact by re-confirming it, and delete your case and account. Deleting your account deletes your case, your answers and any files stored for it, as described above. It does not delete the purchase record described above, which we keep for the time stated there.

Security

Traffic to the site is encrypted in transit, data is encrypted at rest, and your case is readable only through your own account and by our own server. No system is perfect, and we do not claim otherwise.

Children

Moveout is for adults who have signed a lease. It is not directed at children under 13 and we do not knowingly collect their information.

Changes

If we change this policy, the revision date below changes with it, and we will tell you before a change materially affects information we already hold about you.

Contact

A contact address for ask about this policy, or to make a privacy request is not configured for this deployment of the site.

Last updated: September 26, 2026.