Skip to content
← Back to tenant portal

Ankro System Privacy Policy

Ankro Property Group LLC ("Ankro," "we," or "us") operates Ankro System. This Policy explains how we handle personal information through the system's web and mobile applications, staff and property portals, and related support. It covers staff, owners, tenants, prospective tenants, vendors and other people whose information is entered into the system. The information handled depends on your role, the services used and the features available to you. Ankro provides property-management services for separate property owners and entities. Your landlord or property owner is identified in your lease or property records. Where we handle information on behalf of an owner or another business customer, that organization may direct how its property records are used and may have its own privacy obligations. This Policy describes Ankro's handling of information; it does not replace another organization's privacy notice or change your lease. Contact us if you need help identifying the organization responsible for a particular record.

Information we collect

Account and contact information. We handle names, business affiliations, email addresses, telephone numbers, mailing and property addresses, account roles, access permissions, invitations and sign-in records. Microsoft sign-in provides profile information used to identify and authenticate a staff account.

Property and business records. These can include property and unit details, tenant and owner contacts, prospect notes, leases, insurance records, invoices, balances, payment history, maintenance requests, access instructions, correspondence, photos and uploaded documents. We may record who uploaded a file, when it was uploaded, and when a document or announcement was opened or acknowledged. Files and free-text fields may contain additional personal information or metadata.

Banking and payment records. We handle payment amounts, fees, status, payee information, processor references, masked payment-method details and authorization records. Payment or autopay authorization records can include the wording accepted, time, contact, IP address, browser details and mandate reference. Internal property, vendor and accounting records can also contain full bank account and routing numbers and, where entered by authorized personnel, bank-access credentials. This is separate from payment details that tenants enter directly through Stripe.

Connected services and communications. Depending on the feature, we handle email recipients, subjects, message bodies, attachments, delivery results and errors. A connected staff Microsoft account can provide calendar subjects, dates, times and locations. A configured invoice mailbox can supply messages and attachments for invoice processing. We store connection and authorization information needed to operate these services.

Technical and activity information. We handle session and access records, IP addresses, browser or device details, notification tokens, and audit records identifying the user, request and changes made. The applications can store sign-in information, preferences, temporary data and downloaded files on your device.

We receive information from you, authorized property teams and business contacts, connected providers, and your use of the system. Submit only information needed for the task. Do not send passwords, full payment-card details or government identification in ordinary messages, support requests or document uploads. Enter online payment details only in the payment provider's designated flow.

How we use information

We use information to authenticate users and manage access; administer properties, leases, accounts and vendor relationships; coordinate maintenance; provide records and communications; process available payments; reconcile accounts; respond to support and privacy requests; investigate errors or misuse; and maintain the system. We also keep records for accounting, disputes and applicable legal obligations. AI-assisted staff inquiries and invoice processing are described below.

Who receives information

Property teams and authorized recipients. Ankro personnel and the relevant property owner, manager, payee or business customer can receive information for their responsibilities. Contractors may receive contact details, work descriptions, photos or access instructions needed for assigned work. People within an authorized tenant or business account may have access to shared records. We may also disclose information at your direction or where needed to comply with law, respond to legal process, resolve a dispute or protect rights and security.

Service providers. We use providers for hosting, database operations, storage, communications, payments and related functions. Depending on the enabled feature:

AI assistance. When enabled, staff-assistance features send questions, page context, conversation history and relevant retrieved records to Anthropic. Those records can include contact details, notes, leases, financial information and maintenance content. Invoice scanning sends the selected PDF or image and supporting vendor, property and account lists to Anthropic; a configured invoice inbox can run this processing automatically. Restrictions on structured bank or secret fields do not remove sensitive information that a person includes in a document or free-text question. Not every portal upload is automatically scanned.

Provider services may also handle information under their own privacy notices, including for their own security or legal responsibilities.

If you download, export or share a file, a copy can remain on your device or with the recipient you choose.

Online payments

If online payment features are available to you, Stripe collects payment details through its payment flow. Ankro sends Stripe information such as the customer name and email, invoice description, amount and references needed to administer the payment. Ankro receives payment results, processor references, masked payment-method information and related authorization records. The relevant property payee can receive transaction information. Stripe explains its handling at https://stripe.com/privacy. Bank verification, saving a payment method, making a payment and enrolling in optional autopay are separate actions. A tenant payment connection does not by itself give Ankro a general feed of the tenant's bank transactions. This Policy is not a payment authorization. Any payment or recurring debit requires the applicable separate authorization.

Operating bank feeds — property owners and authorized managers only

This section does not apply to tenants making rent payments. Paying rent does not give Ankro access to the tenant’s general bank-transaction history.

When you connect an eligible property or business operating account through Stripe Financial Connections, a separate connection and consent from an authorized representative of the account-owning entity are required. Permission for one entity does not authorize access to another entity's accounts. For connected accounts, we receive selected-account identifiers and labels, institution details, and transaction information such as dates, amounts, currencies, descriptions and status. A selected account's history may include transactions unrelated to a particular property. The feed supports accounting review, matching and reconciliation, with imported transactions placed in a review queue rather than automatically posted to the books. Bank login takes place through the connection provider or bank, not by sending credentials to Ankro. Before connection, the feature must explain the data requested, its use, storage and recipients, and how to disconnect. The feed involves Stripe and the hosting or other providers needed for that disclosed purpose. It does not itself authorize money movement. Disconnecting a feed does not automatically cancel a separate payment authorization or erase information already imported and retained for the purposes explained in this Policy. The connection notice and consent, rather than this Policy, govern the particular access requested.

Cookies and device choices

The web applications use session and timezone cookies and browser storage to maintain sign-in and interface settings. You can manage these through your browser, but blocking or clearing them may affect functionality. Pages that load Google Fonts or Stripe components send browser requests to those providers, which can receive network and device information. You can manage camera, photo and notification permissions in your device settings. Declining a permission may limit the related feature. Signing out does not necessarily remove files you downloaded or shared outside the application.

Storage and security

Information is stored in application databases, uploaded files, logs, backups and connected services. We use authentication, access permissions and encryption for selected sensitive fields to help protect information. No system can guarantee complete security. Our primary application and database hosting is in the United States. Providers may process or store information in other locations, depending on their services and account configurations.

Retention and deletion

The period we retain information depends on the record, its purpose, the relationship or unresolved matter, and applicable legal requirements. Property, lease, accounting, payment, authorization and audit records may remain necessary after a person's system access ends. Backups, archives, email records and provider copies may also remain. Disabling an account is not the same as deleting its associated information. You can request account closure or deletion of personal information by emailing support@ankrogroup.com. We review the request, the information involved and any need to retain particular records. Deletion does not end a lease, cancel money owed, remove another person's account or automatically delete another organization's independent records. If you use autopay or a connected service, identify that in your request so the related instructions and access can be addressed separately.

Your requests and questions

Contact support@ankrogroup.com to ask about your information or request access, a copy, correction or deletion. Depending on applicable law and the context, you may also have rights to restrict or object to processing, opt out of certain uses, or appeal a decision on a request. You can use the same address to request review of a decision. We will handle requests in accordance with applicable law and explain relevant limitations. Please identify the account or property involved and, where possible, write from your account email. We may request information reasonably needed to verify your identity and authority, including when someone acts for you. Do not send a password, full bank account number or government ID in your initial request. Where a record is controlled by a property owner or business customer, we may coordinate with that organization or direct you to the appropriate contact.

Changes to this Policy

We may update this Policy as the system or our practices change. The published policy will show its effective or updated date. We will provide additional notice or obtain consent for changes when required by applicable law. A policy update does not replace a separate permission required for a payment or bank connection.

Contact

Ankro Property Group LLC Privacy questions and requests: support@ankrogroup.com