Privacy Policy

Last updated: June 2, 2026

This Privacy Policy describes how MCCALL SQUARED, LLC (“MCCALL SQUARED,” “we,” “us,” or “our”) collects, uses, stores, and protects information in connection with our internal accounting application, RentApp (the “Service”).

1. Information We Collect

Account & authentication data

To use the Service, authorized users sign in through a secure identity provider. We collect the email address and authentication identifiers necessary to grant access and to scope each user to the entities they are permitted to view.

Financial account data accessed through Plaid

We use Plaid Inc. (“Plaid”) to connect to bank accounts that we own. When an authorized user links a bank account, Plaid acts as our service provider and, with that user’s authorization, provides us with financial data that may include:

• Account identifiers, names, types, and masked account numbers;
• Account balances; and
• Transaction history, including amounts, dates, descriptions, and merchant or counterparty names.

Plaid’s collection and use of information is governed by the Plaid End User Privacy Policy. We do not receive or store your online banking username or password; those credentials are handled by Plaid and the financial institution.

2. How We Use Information

We use the information we collect solely for the following purposes:

• To import and reconcile transactions from our own bank accounts into our general ledger;
• To categorize transactions and produce financial statements (income statements, balance sheets, cash-flow and rent-roll reports);
• To support accounting, bookkeeping, and tax preparation for MCCALL SQUARED, LLC and its affiliated entities; and
• To operate, secure, and maintain the Service.

We do not sell financial data, use it for advertising, or use it for any purpose unrelated to the bookkeeping of accounts we own.

3. How We Store and Protect Information

• Data is stored on infrastructure operated by MCCALL SQUARED, LLC using Amazon Web Services in the United States.
• Database connections are encrypted in transit (TLS), and credentials and access tokens are stored in a managed secrets vault (AWS Secrets Manager).
• Access to financial data is restricted to authorized users and scoped to the specific entities each user is permitted to access.
• Plaid access tokens are stored encrypted and are used only to retrieve data for accounts that have been explicitly linked.

4. Data Sharing

We do not share financial data with third parties except:

• With Plaid, as our service provider, to enable the bank-data connection described above;
• With infrastructure providers (such as Amazon Web Services) that host the Service on our behalf, under their respective security and confidentiality obligations;
• With our accountants or tax advisors for the purpose of preparing our financial statements and tax filings; and
• Where required by law, regulation, or valid legal process.

5. Data Retention

We retain financial and accounting records for as long as necessary to maintain accurate books and to meet our legal, tax, and accounting obligations (generally a minimum of seven years for tax records). You may disconnect a linked bank account at any time, which stops further data collection for that account; previously imported ledger records are retained as part of our accounting books of record. On request, we will delete a stored Plaid access token, which revokes our ongoing access to that account.

6. Your Choices

• Authorized users may disconnect a linked financial institution at any time to stop ongoing data retrieval.
• You may contact us to request information about, or deletion of, data associated with your access.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

8. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at [enable JavaScript to view].