Privacy Policy

Dibs ("we", "us", "our") is a rental listing alert service operated at getdibs.app. We help renters find available apartments faster by monitoring listing sources and sending real-time alerts. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

Questions? Email us at support@getdibs.app.

Account information: When you sign up, we collect your email address. We do not collect a password — authentication is handled via magic links (one-time codes sent to your email).

Alert preferences: The search criteria you configure (city, state, max rent, bedrooms, keywords, notification channels) are stored so we can run searches on your behalf.

Phone number (optional): If you enable SMS alerts (Pro plan), we collect your phone number to send text message notifications via Twilio.

Payment information: We use Stripe to process payments. We never see or store your full card number. Stripe handles all payment data under their own privacy policy.

Usage data: We may log technical information such as pages visited and actions taken within the app to understand how the product is used and to fix bugs.

We use the data we collect solely to operate and improve the Dibs service:

• To send you rental listing alerts matching your saved search criteria
• To process subscription payments via Stripe
• To send transactional emails (alert notifications, account confirmations)
• To send SMS alerts when you have a Pro subscription and have provided your phone number
• To improve the product based on aggregate usage patterns

We do not sell your personal data to third parties. We do not use your data for advertising.

We use a small number of trusted third-party services to operate Dibs:

• Supabase — database and authentication
• Stripe — payment processing
• Resend — transactional email delivery
• Twilio — SMS delivery (Pro plan)
• Vercel — web hosting
• Railway — background worker hosting

Each of these services has their own privacy policy governing their use of data shared with them.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law (e.g., billing records).

Alert history and seen-listing records are retained to prevent duplicate notifications and may be kept for up to 12 months after an alert is deleted.

You have the right to:

• Access your personal data by contacting us
• Correct inaccurate data from your account settings
• Delete your account by emailing support@getdibs.app
• Unsubscribe from alert emails using the link at the bottom of any alert email
• Port your data — contact us and we'll provide an export

Dibs uses cookies only for session management (keeping you logged in). We do not use tracking or advertising cookies. No cookie consent banner is required.

We take reasonable measures to protect your data, including encrypted connections (HTTPS), row-level security on our database, and limited access to production systems. No system is perfectly secure — please use a strong, unique email address for your account.

Dibs is not intended for users under 13 years of age. We do not knowingly collect data from children.

We may update this policy from time to time. If we make material changes, we'll notify you by email. Continued use of Dibs after changes take effect constitutes acceptance of the updated policy.