Privacy

Privacy Policy

This is the single governing privacy policy for the Lighthouse and LAMP applications and for this website. It is written to be read, not to be survived.

Last updated: August 19, 2026

Who we are

Lighthouse is built and operated by Lighthouse Intelligent Asset Platform L.L.C., a Colorado limited liability company. We publish two applications under the name Lighthouse — the property-management workspace and LAMP, its accounting counterpart — together with this website at lighthouseamp.com.

Privacy point of contact: info@lighthouseamp.com. A person reads that mailbox and answers it. A postal address is available on request.

Two different relationships

Almost everyone who reads this page falls into one of two groups, and the answer is different for each.

  • Visitors to this website. You are here to read about the product. We collect nothing about you unless you fill in the walkthrough-request form. There are no cookies, no analytics, and no trackers on this site.
  • People who use Lighthouse at work. Your employer — a property-management firm, an owner, or a similar business — licenses Lighthouse and decides what goes into it. That firm determines the purposes of the records; we hold and process them on the firm's instructions, as its service provider. If you want a record about you changed or removed, the firm can do it directly, and we will help. You may also write to us and we will route your request to the firm and follow up.

What this website collects

Very little, and we would rather say so plainly than bury it.

  • No cookies. No analytics. No advertising or tracking pixels. This site sets no cookies and uses no browser storage. There is no Google Analytics, no advertising SDK, and no third-party tracker of any kind.
  • Typefaces load from a font service. The page requests its typefaces from Fontshare (api.fontshare.com). As with any request to any server, that provider necessarily receives your IP address and browser user-agent in order to answer. We receive nothing from them about you.
  • The walkthrough-request form. If you submit it, we receive the fields you typed — your name, company, email address, portfolio description, and message — and they are delivered to our own mailbox as an email through our transactional email provider. We use them to answer you. We do not add you to a marketing list, sell them, or share them with anyone else.
  • Hosting logs. Our host records ordinary server request logs for security and reliability. We do not use them to build a profile of you.

What the Lighthouse and LAMP apps hold

Lighthouse is business software for managing commercial and residential property. Most of what it holds is a business record — a lease, an invoice, a work order — that happens to name people. Here is every category, and why it is there.

Identity and sign-in

Your work name, work email address, and job title, as your firm's directory reports them when you sign in through Microsoft. Sign-in requires your firm's own multi-factor authentication. We never see or store your password.

Property and lease records

Properties, units, leases, amendments, clauses, options, tenants and their contacts, charge schedules, and the operating history your team enters. Tenants and vendors appear here as parties to a business agreement.

Financial records

Invoices, payments, ledgers, budgets, deposits, and reconciliations. Vendor payment details, where your firm enters them, so a payment can be released. Bank data appears only as the statement lines your firm imports or types.

Documents and photographs

Leases, invoices, estimates, statements, and the photographs your team takes to document a condition or a move-out. These are stored inside your firm's own database — not in a third-party file service.

Mailbox items you grant us

Where a firm connects a mailbox so invoices can be filed automatically, the grant is narrow and logged. We extract the specific attachment and the sender and subject needed to file the record. Extracting is not reading: no person browses the mailbox, and every access leaves an entry.

What you type, and what you say

Text you enter, and — if you choose to use voice — the text your spoken words were transcribed into. The transcript is kept verbatim in your firm's own records so there is an honest account of what was asked for.

Things we do not do

These are commitments, not aspirations. If any of them ever changes, this page changes first.

  • We do not sell your data, and we do not share it for cross-context behavioral advertising. We run no advertising business of any kind, so there is nothing for us to sell it into.
  • We do not build advertising or marketing profiles of tenants, applicants, vendors, owners, or your staff.
  • We do not collect biometric data. See the section below — this one matters enough to say twice.
  • We do not use your records to train artificial-intelligence models, our own or anyone else's. Where the platform asks a language model to draft or summarize something, it goes to our provider under a commercial agreement whose terms state that Anthropic may not train models on customer content (Anthropic Commercial Terms of Service).
  • We do not take money amounts, dates, or account numbers from speech. Voice can navigate and read; it cannot enter a figure. A person types every number that matters.
  • We do not pool your rents with other firms' rents to recommend pricing. Nothing in Lighthouse compares your rent roll against a competitor's.

Biometric unlock is not face recognition

On a phone or tablet, Lighthouse can let you reopen a session you already signed into by using Face ID, Touch ID, or your device's fingerprint or face unlock. It is worth being precise about what happens, because the two things are often confused.

Your device's operating system performs the match, on the device, in hardware built for that purpose. It tells Lighthouse one thing: yes or no. No face image, fingerprint image, template, score, or other biometric identifier is ever transmitted to, received by, or stored by Lighthouse. We could not produce one if we were asked. What the unlock releases is a saved sign-in reference held in your device's own secure keystore — never your password, which we never hold at all.

Accordingly, we declare that our apps collect no biometric data, and that declaration is accurate rather than convenient. If you would rather not use it, you can sign in the ordinary way every time.

Automated systems, and who decides

Lighthouse uses automation and language models to draft, summarize, flag, and suggest. It does not decide. A person reviews and releases anything that leaves the platform or changes a record that matters, and the platform is built to hold a draft rather than send it.

Where an automated system contributes to a decision that affects a person — a tenant, an applicant, an employee — we support disclosure of that fact, keep a record of what the system contributed, and provide a path to ask about it, appeal it, or have it looked at by a human being. Requests of that kind are answered on a stated clock rather than at our leisure.

The longer explanation, including the specific state and federal rules we design for, is on our Compliance & Responsible AI page.

Where the data lives, and who processes it

Each client firm gets its own database and its own deployment. Firms are not neighbors in a shared table with a filter between them. Data is hosted in the United States.

We use a small number of providers to run the service. Each is bound by its agreement with us to process data only to provide its service:

  • Supabase — the managed PostgreSQL database that holds each firm's records.
  • Vercel — application hosting and delivery.
  • Microsoft — identity and sign-in through Microsoft Entra ID, and, where a firm connects a mailbox, the mail service that grant is made against.
  • Anthropic — the language model that drafts and summarizes, under commercial terms that bar training on customer content.
  • Resend — transactional email, including messages your team approves and sends from the platform, and this website's contact form.
  • Apple and Google — distribution of the mobile applications, and app updates. Push notifications are not enabled in the current release; if that changes, this page will say so before it ships.
  • Your device's speech service. Voice transcription in the web application is performed by the speech recognizer built into your web browser. Depending on which browser you use, that recognizer may send the audio to its own vendor to be transcribed. That is the browser's behavior, not ours — Lighthouse receives only the resulting text. The mobile applications do not dictate at all — they contain no speech recognizer, and every voice surface in them says so plainly and offers the keyboard instead. If you would rather not use voice in the browser either, type instead; every voice surface in the platform has a keyboard.

Security

Traffic is encrypted in transit and data is encrypted at rest by our database and hosting providers. Sign-in runs through your firm's Microsoft identity with multi-factor authentication, and access inside the platform is scoped to your role — a leasing manager and a controller do not see the same screens. Consequential records keep their history rather than being overwritten, so a correction is visible as a correction. Saved sign-in references on a device expire, and can be revoked centrally when a device is lost.

No system is perfect, and we will not claim otherwise. If we discover a breach affecting your records, we will tell the affected firm promptly and in writing, with what we know and what we do not yet know.

How long we keep records, and how they are deleted

  • Client records are kept for as long as the firm's engagement with us continues, because a property ledger is a permanent business record. The firm decides retention within its own account.
  • When an engagement ends, the firm receives a complete export of its data, and its database and deployment are decommissioned and deleted.
  • Website form submissions live in our own mailbox and are deleted when they are no longer needed to answer you.
  • Audit and access logs are retained deliberately, because their purpose is to show what happened; they hold who did what and when, not the substance of a message.
  • Legal holds. Where a law, a court, or an ongoing dispute requires a record to be preserved, it is preserved, and we say so rather than deleting it quietly.

Deleting your account

Lighthouse accounts are not self-registered; your firm's administrator adds and removes people from its roster, and removing you from the roster ends your access immediately. If you want your access ended or your personal details corrected or deleted, you can ask your firm's administrator, or write to info@lighthouseamp.com and we will act on it with the firm and confirm the outcome to you.

Your privacy rights

Depending on where you live — Colorado, California, and a growing number of other states — you may have the right to know what personal data is held about you, to get a copy, to correct it, to have it deleted, to opt out of its sale or of profiling, and not to be retaliated against for asking. Because we hold most personal data on behalf of a client firm, the fastest route is usually through that firm. Either way, write to info@lighthouseamp.com and we will help you get to the right place.

We do not sell personal data and we do not share it for cross-context behavioral advertising, so there is no opt-out to offer you for either. We do not charge for making a request and we will not ask you to create an account in order to make one. We may need to verify who you are before releasing records about you, which protects you rather than us.

Children

Lighthouse is workplace software for property professionals. It is not directed to children, we do not knowingly collect personal information from anyone under 13, and the apps are not designed, marketed, or age-rated for children. If a household record entered by a client firm happens to name a minor as an occupant, it is held as part of that firm's tenancy record under this policy and is never used for advertising or profiling.

Changes, and how to reach us

When this policy changes we will change the date at the top and, for anything that materially affects how records are handled, tell client firms directly rather than relying on you to notice. We will not quietly broaden what we collect and let this page catch up later.

Questions about this policy, about a record concerning you, or about anything above: info@lighthouseamp.com. Need help using the product instead? That is the Support page.