Legal

Privacy Policy

How PorchLight collects, uses, and protects your information.

Effective date: September 20, 2026

PorchLight is a product of 605media LLC ("PorchLight," "we," "us"). This policy explains what we collect and how we use it when homeowners, board members, and community managers use PorchLight and its websites.

Information we collect

How we use information

Your mobile information is never sold or shared for marketing. No mobile information — including your phone number, opt-in data, and consent — will be shared with third parties or affiliates for their marketing or promotional purposes. We share it only with service providers (such as our SMS carrier, Twilio) strictly to deliver the messages you requested.

SMS messaging

If you opt in, we send text messages through Twilio on behalf of your homeowners association. Message frequency varies, and message & data rates may apply. You can opt out at any time by replying STOP, or get help by replying HELP or emailing hello@605media.net. Opting out of texts does not affect your HOA membership. See our Terms & Conditions for full program terms.

How information is shared

We share information only as needed to run the service: with your homeowners association and its authorized representatives; with service providers who process data on our behalf under confidentiality obligations (for example, hosting, database, and SMS delivery); and when required by law. We do not sell your personal information.

Data retention

While your community is an active PorchLight customer, we retain its account, inspection, notice, and homeowner-response records so the board keeps a continuous history. Anything you submit in response to a notice is retained alongside the notice it answers.

If your community's subscription ends, its records are not deleted right away. For 30 days we actively prompt the board to download a complete copy of everything we hold for them. The records themselves are retained for 365 days from the end of the subscription, and the ability to export them stays available for that entire period — we will not hold a community's records while refusing to hand them back. After that window, the community's records become eligible for permanent deletion.

Consent and opt-out records for text messaging are kept separately from the above and are retained for at least five years, as required by law and carrier rules. They reflect the current state of your consent: a community can export a copy of its own sign-up records, but restoring an old backup never rewrites them, so a withdrawn consent stays withdrawn.

Security logs

When someone signs in to a PorchLight account — a board member, an inspector, or our own staff — we record the account, the time, the IP address the sign-in came from, and the browser or app used. We do this for one reason: so that if a community's records are ever accessed by someone who should not have them, we can establish who, when, and from where. It is not used for advertising, analytics, or tracking anyone's activity in the product.

These sign-in records are kept for 90 days and then automatically deleted. They are never visible to other communities, and they are not part of the data a community exports — a board can see who is on its own roster and when they were last active, but not the addresses anyone connected from.

This applies only to people who hold an account. If you are a homeowner responding to a notice, you do not sign in at all: the link in a notice opens a page that needs no account, and no sign-in record is created for you.

Your choices

Contact us

605media LLC
Frederick County, Maryland, USA
hello@605media.net