Privacy Policy

This Privacy Policy explains how Costanza & Providence Real Estate Agency Inc. (“Costanza,” “we,” “us”), which operates the StanzaX platform at stanzax.com, collects, uses, shares, protects, and retains personal information when you use our website, request a home valuation, submit a rental or listing request, or complete a rental application and tenant-screening flow (the “Services”). It also describes the choices and rights you have regarding your information.

1. Who we are

Costanza & Providence Real Estate Agency Inc. is a licensed New Jersey real-estate brokerage serving Hudson County. StanzaX is our software platform. Our mailing address is 546 Broadway, Bayonne, NJ 07002. For any privacy question, contact us at [email protected] or [email protected].

2. Information we collect

We collect only what we need to provide the Service you request. Depending on how you use StanzaX, this may include:

• Contact & identity information — name, email address, phone number, and mailing/property address.
• Property & transaction details — the address, features, and details of a home you ask us to value, list, buy, or rent.
• Rental-application information (only if you apply to rent) — current and prior addresses, employment and income details, references, occupants, and similar application data.
• Sensitive identifiers for screening (only if you authorize a screening check that requires them) — date of birth and, where required by a consumer-reporting agency, Social Security number.
• Financial verification data (only if you connect a bank through Plaid) — income, account balances, and account-ownership information that you authorize Plaid to share with us. We do not receive your banking login credentials. See Section 5.
• Identity-verification data (only if a government-ID check is requested) — processed by our identity-verification provider (Stripe Identity); we receive the verification result.
• Payment information — if a screening fee applies, payment is processed by Stripe. We do not receive or store your full card number; we store only a Stripe reference to the transaction.
• Communication content — messages you send us and messages sent through our secure-message portal.
• Technical & usage data — IP address, browser/user-agent, and timestamps, recorded for security, fraud prevention, and audit purposes.

3. How we use information

• To provide the Service you requested — a home valuation, a listing, a rental application, or a tenant-screening report.
• To verify identity and income and to obtain the consumer reports (credit, eviction, criminal background) that you authorize, for the purpose of evaluating a rental application for a tenancy we are involved in.
• To communicate with you about your request and to send transactional notices.
• To process payment for any screening you authorize.
• To maintain the security and integrity of our Services, prevent fraud, and keep required audit records.
• To comply with our legal, regulatory, and licensing obligations.

We do not use your screening or financial data for advertising, and we do not sell your personal information.

4. How we share information

We share personal information only as needed to deliver the Service and only with parties bound to protect it:

• Consumer-reporting agencies — when you authorize a credit, eviction, or criminal check, we submit the information necessary to obtain that report from a screening provider governed by the Fair Credit Reporting Act (FCRA).
• Plaid Inc. — to connect your financial institution for income/bank verification at your election. See Section 5.
• Stripe Inc. — to process payments and, where requested, government-ID verification.
• Service providers — infrastructure (DigitalOcean), security/CDN (Cloudflare), and transactional email (Resend), acting on our behalf under confidentiality obligations.
• Legal & safety — where required by law, subpoena, or to protect rights and safety.

We do not sell personal information, and we do not share it with third parties for their own marketing.

5. Financial data & Plaid

If you choose to verify income or bank information during a rental application, you will connect your bank account through Plaid. You authenticate directly with your financial institution inside Plaid’s secure interface. We do not see or store your banking username or password, and we cannot move money. Plaid provides us only the verification data you authorize — such as income, balances, and account-ownership details — which we store encrypted and use solely to evaluate your application. Plaid’s collection and use of your data is described in the Plaid End User Privacy Policy. Connecting a bank is always optional; you may skip it and provide income documentation another way.

6. Consent & authorization

We collect, process, and store your information based on your consent and to fulfill the Service you request. Before any tenant-screening check runs, you must review and affirmatively agree to a written authorization that discloses the reports that may be obtained and their purpose, and you separately consent to the use of electronic records and signatures. We record the version of that authorization along with the date, time, and originating IP address, and we retain it as part of the application’s audit record. You may withdraw your consent or authorization at any time by contacting us, subject to processing already underway and to records we are legally required to keep.

7. Consumer reports & FCRA rights

Credit, eviction, and criminal-background reports are “consumer reports” under the Fair Credit Reporting Act. You have the right to request a copy of any report obtained about you, to know if information in a report was the basis of an adverse decision, and to dispute inaccurate information with the reporting agency. If we decline or condition an application based in whole or in part on such a report, we will provide an adverse-action notice identifying the reporting agency and your rights. No decision is made automatically; a person reviews every application.

8. Data retention

We keep personal information only as long as necessary for the purpose it was collected, for legitimate business needs, and to meet legal, tax, and regulatory retention requirements, after which it is deleted or anonymized. In summary:

• Rental applications and screening records are retained in accordance with FCRA and applicable record-keeping obligations; the applicant status link expires by default 45 days after submission.
• Executed listing and e-signature documents are retained for the period required by New Jersey real-estate recordkeeping rules (approximately six years).
• Secure-portal messages expire by default after seven days and can be revoked earlier.
• Financial-verification data obtained via Plaid is retained only as long as needed to complete and document the tenancy decision.
• Security and audit logs are retained as needed to protect the Services.

Our full Data Retention & Deletion Policy is available on request.

9. How we protect your data

We apply safeguards appropriate to the sensitivity of the data:

• Encryption in transit — all connections between your browser and our Services use TLS 1.2 or higher.
• Encryption at rest — sensitive fields, including screening identifiers, financial data received via Plaid, and report contents, are encrypted at rest with strong authenticated encryption using 256-bit keys; encryption keys are stored separately from the data.
• Access control — access to sensitive data is restricted to the authorized operator, protected by scoped credentials, failed-attempt lockout, and least-privilege isolation.
• Auditing — access to and actions on screening records are recorded in an append-only audit trail.

No method of transmission or storage is perfectly secure, but we work to protect your information using commercially reasonable measures.

10. Your privacy rights

Depending on your state of residence, you may have the right to request access to the personal information we hold about you, to request correction or deletion, to withdraw consent, and to be free from discrimination for exercising these rights. To make a request, email [email protected]. We will verify your identity before acting and will respond within the time required by applicable law. Some information must be retained to meet legal obligations (for example, FCRA and tax recordkeeping) and cannot be deleted on request until those obligations lapse.

11. Cookies

Our public pages use minimal, essential cookies only. We use a session cookie to keep our private staff console logged in; this cookie is not set for consumers browsing the public site or completing an application. We do not use third-party advertising or cross-site tracking cookies on the application flow.

12. Children

Our Services are intended for adults (18+) and are not directed to children. We do not knowingly collect personal information from anyone under 18.

13. Fair housing

Costanza & Providence is an Equal Housing Opportunity brokerage. We evaluate applications on lawful, non-discriminatory criteria and do not use protected-class characteristics in screening or decisioning.

14. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by a new “Last updated” date on this page, and where appropriate we will provide additional notice.

15. Contact us

Costanza & Providence Real Estate Agency Inc.
546 Broadway, Bayonne, NJ 07002
Privacy: [email protected] · General: [email protected]