Privacy

Last updated September 18, 2026

Porchlight AI is operated by Ryan Welch, an individual in Florida. This page explains what the service stores, why, who else touches it, and how to have it removed. It is written to be read, not to be defensible.

The short version

• Your association's documents are stored so the assistant can answer from them. Nothing else.
• Resident questions and answers are stored so you can see what was asked and what was said.
• Nothing is sold, rented or shared with other communities.
• Nothing is used to train AI models.
• Residents are not tracked across websites, and this site sets no advertising cookies.
• Ask, and your data is deleted.

What is stored

From the association

The documents you upload — declaration, bylaws, rules, fee schedules, amenity hours, architectural guidelines and similar — along with your community name, the manager's name, the email address that routed questions are sent to, and your plan.

From residents

The text of the questions residents type and the answers the assistant gives. When a question is routed to your office, the name and contact details the resident chooses to provide, and their unit if they give it.

Residents are not asked to create accounts and are not asked to identify themselves in order to ask a question. The widget displays a note asking residents not to send sensitive personal information.

Technical information

Ordinary server logs — timestamps, request paths, error information and, for security and abuse prevention, the IP address a request came from. Logs are kept for a short period and are not used to build profiles of individual residents.

Who else processes it

The assistant's answers are generated by a third-party AI provider. To answer a question, the relevant portions of your documents and the current conversation are sent to that provider, which processes them to produce the answer and returns it. Answers are generated under a commercial API agreement, not a consumer chatbot account, and the content sent is not used by the provider to train models.

Other processors are limited to what running the service requires:

• A hosting provider that runs the application and the database.
• An email provider that delivers routed-question alerts to your office.
• A payment processor, once card billing is live, which handles card details directly — I never see them.

Each is used only to deliver the service. None is given your data for its own purposes.

Separation between communities

Every document and every conversation is tied to a single community, and the assistant for a community can only read that community's documents. One association's documents are never used to answer another association's residents.

How long it is kept

• Documents — as long as your account is active, because they are what the assistant answers from.
• Conversations and routed questions — twenty-four months, so the monthly reports and your inbox history remain useful, unless you ask for a shorter period.
• Server logs — thirty days.
• After cancellation — deleted on request, and in any case within ninety days.

Deletion and access requests

Write to ryan@getporchlightai.com to ask for a copy of what is stored for your community, for a conversation or document to be deleted, or for everything to be deleted. Requests are handled within thirty days, and usually the same week.

If a resident contacts me directly about their own information, I will ask them to confirm which community they live in and will coordinate with the association, since the association is the one that holds the relationship with its residents.

Security

Traffic to the service travels over HTTPS. Access to the console is restricted to the people an association authorizes. Database backups are encrypted at rest by the hosting provider. This is a small operation and honesty matters more than a long list: there is no SOC 2 report and no formal certification. If your association requires one, tell me before signing up.

Cookies

This marketing site sets no advertising or analytics cookies. The console uses a single sign-in cookie that keeps a manager logged in; the resident widget stores only what is needed to keep one conversation going in the browser tab, and it does not follow residents to other sites.

Children

The service is intended for adults dealing with association business. It is not directed at children and does not knowingly collect information from them.

Changes

If this page changes materially, the email address on your account gets notice at least thirty days beforehand, and the date at the top changes.

Contact

Ryan Welch, Owner & Developer · ryan@getporchlightai.com · Parrish, Florida