Privacy Policy
Effective October 2026 (replaces the September 2026 version) · Premier Gardens & Whisperwind Apartments, Fort Worth, TX
This policy covers the public website at premiergardensapts.com and the Resident Portal at premiergardensapts.com/app, including online rent payments. If you pay through the portal, please also read the Payment Terms.
What we collect
- Account information: name, email, phone number, preferred language.
- Tour requests: your preferred times and party size.
- Rental applications: the information you enter — occupants, residence history, employment and income, vehicles, emergency contact — plus your typed signature and consent records.
- Applicant documents: after you submit an application, we ask each adult applicant to email a copy of a government-issued photo ID and proof of income to documents@premiergardensapts.com. These are used only to verify identity and income against our published criteria.
- Resident maintenance requests: descriptions and photos you submit.
- Resident portal payments: payment records, saved-payment-method descriptions and debit authorizations, described in detail under Resident portal payments below.
What we deliberately never collect on our systems
- Screening information. Credit, criminal, and eviction screening is performed by an independent consumer reporting agency on its own secure system — this website never asks for or stores that information.
- Full card numbers, bank account numbers, or bank login credentials. When you pay or save a payment method in the Resident Portal, those details are entered only in secure fields served by Stripe, our payment processor, and go directly to Stripe. They never pass through, and are never stored on, our website, our database, or our office computers. We receive only the descriptions listed below — for example “Visa ending in 4242” or “Chase account ending in 6789”.
Resident portal payments
Residents can pay rent and other lease charges through the Resident Portal beginning September 2026. This section explains what the payment features collect, who processes it, why, and for how long.
What we collect and keep
- Who paid: your name, unit, email address and phone number, from your portal account and our resident roster.
- Payment records: the amount, date, payment method type (bank account or credit card), status (processing, completed, returned, refunded), confirmation number, any card fee, and the reason a bank or card issuer gives when a payment fails or is returned.
- Saved payment methods: only a description — the last four digits, the bank name or card brand, the card’s expiration month and year, a nickname if you add one, and its verification status — plus the reference identifiers Stripe assigns to you as a customer and to each payment method. Those identifiers let us ask Stripe to charge a method you saved; they cannot be used to reconstruct your account or card number.
- Authorization records: for bank payments, the one-time debit authorization you accept before clicking Pay, with the date and time, the IP address, and the browser and device information from which you accepted it. If you enroll in autopay (when it becomes available), we keep the executed Recurring ACH Debit Authorization exactly as you signed it — its version, a digital fingerprint (SHA-256) of the text, the date and time of your consent, the IP address, device information, and the email address the copy was sent to. If you tick “Save … for next time” when you pay, we also keep the save authorization you accepted — its version, a digital fingerprint (SHA-256) of the text, the date and time, the IP address, and the browser information.
- Status notifications from Stripe: the event records Stripe sends us when a payment is created, completes, fails, or is returned, so that the portal and Stripe always agree. We remove bank routing numbers and Stripe’s internal identifiers from these records before storing them.
- Emails we send you: a log of receipts and notices (recipient, subject, date) so we can prove they were sent and re-send them on request.
Who processes payments
- Stripe, Inc. processes every portal payment and holds the card and bank details you enter. Stripe’s handling of your information is described in the Stripe Privacy Policy (en español). As a user of Stripe’s payment forms you are also subject to Stripe’s Consumer Terms of Service.
- Stripe Financial Connections is how you link a bank account. You sign in to your bank inside Stripe’s own window; Stripe retrieves your account and routing numbers and account-holder details to set up the payment method, and we receive only the bank name, the last four digits and a verification status. We do not request your balance or your transaction history. Your use of Financial Connections is governed by the Financial Connections section of Stripe’s Consumer Terms of Service and by the Stripe Privacy Policy. A bank that cannot be linked instantly is verified instead with a $0.01 deposit with a code that starts with SM, which the account holder enters.
- Supabase hosts the portal’s database and sign-in system, where the records above are stored. Cloudflare hosts this website and the portal. Microsoft 365 delivers receipts and notices by email from maintenance@premiergardensapts.com.
- RealPage OneSite is the property’s resident-ledger system. Your payment’s amount, date, name, unit and confirmation number are posted to your ledger there; no bank or card details are sent to it.
Why we use it
- To take your payment, credit it to your resident ledger, and send you a receipt.
- To tell you when a payment is processing, completed, returned or refunded — and, for autopay, to email you the amount and date of every debit in advance.
- To keep the proof of authorization that banking rules (Nacha) and federal law (Regulation E) require for electronic debits, and to answer a bank’s inquiry about a payment you made.
- To prevent fraud and misuse — for example, verifying that a bank account is yours before it is charged, limiting how many payments and payment methods can be added in a day, and emailing you whenever a payment method is added or removed.
- To keep the property’s books, reconcile bank deposits, and meet tax and record-keeping obligations.
Who we share it with
- Stripe, and through Stripe the banking and card networks and your own bank, to the extent needed to process, verify, return or refund a payment.
- The property owner and its accounting staff, who see payment amounts, dates, names, units and confirmation numbers for bookkeeping, deposit reconciliation and tax reporting — never card or bank details.
- RealPage OneSite, the resident-ledger system, as described above.
- Our infrastructure providers named above (Supabase, Cloudflare, Microsoft 365), which store or transmit data on our behalf under their own security commitments.
- When required by law or court order, or to enforce your lease — for example, your ledger payment history in a collections or eviction matter.
We do not sell your information, and we do not share it for advertising.
How long we keep it
- Payment records (amount, date, status, confirmation number and method description) are kept for at least two years after your tenancy ends, and longer where tax and accounting rules require.
- Authorization and consent records for bank debits — including any autopay authorization — are kept for at least two years after the authorization ends or is revoked, as banking rules require.
- Saved payment methods: when you remove one, it is detached from your account and can no longer be charged; its description (for example “ending in 6789”) remains on the past payments it was used for. Stripe keeps its own records under its own policy.
- Stripe status notifications and email logs are kept as part of the payment record.
Your choices
- Every payment and receipt is available under Payments in the portal. You can remove a saved payment method at any time, and cancel autopay (when available) at any time in the portal.
- You can ask us for a copy of any bank-debit authorization you accepted, for a paper copy of any receipt or notice at no charge, or for a correction to a payment record you believe is wrong.
- Online payment is optional. Every payment method your lease allows today remains available at the office.
- If you believe a debit was not authorized or a payment is wrong, contact the office first — we can trace it faster than a bank dispute can, and a dispute filed with your bank ends your ability to pay online. Contacting us first does not waive any rights you have with your own bank or card issuer.
How it is protected
Card and bank details are entered only in Stripe-hosted fields and travel encrypted directly to Stripe, a PCI DSS Level 1 service provider. Everything else travels encrypted between your browser and our systems. Adding a payment method or enrolling in autopay requires you to re-enter your password, and you receive an email whenever a payment method is added or removed. You can also turn on two-step verification (an authenticator app) for your login on the portal’s Security page. Only office staff with a manager login can see payment records; on-site maintenance staff cannot. We will never ask you for a full card number, bank account number or bank password by phone, text or email. If someone claiming to be the office does, hang up and call us at 817-738-8701.
How your data is used
Only to operate the property: scheduling tours, evaluating applications against our published criteria, managing residency and maintenance, processing the payments you choose to make online, and contacting you about your requests. We do not sell or share your information for advertising.
Where it lives & how it’s protected
Data is stored with our infrastructure providers (Supabase — database and authentication; Cloudflare — website hosting; Microsoft 365 — email; Stripe — payment processing; RealPage OneSite — resident ledger), encrypted in transit, with per-account access controls enforced at the database level. Only office staff with a manager login can access applications and payment records; on-site maintenance staff see only maintenance requests.
Retention
Applications and decisions are retained at least two years to comply with fair-housing record-keeping. Identity and income documents are different: once your application is decided and the verification is recorded, the document copies themselves are deleted — we keep the record that verification happened, not the images — except where a legal hold requires otherwise. Resident records are retained for the duration of tenancy plus applicable legal periods; payment and authorization records follow the periods listed under Resident portal payments. You may request deactivation of your account, or deletion of your submitted documents, at any time.
Changes to this policy
We update this page when our practices change; the date at the top tells you which version you are reading. Changes that affect portal payments are also announced by email or in the portal.
Contact
Questions or requests: leasing@premiergardensapts.com · 682-489-6623.
Payment questions: the office at 817-738-8701 (calls only — the office line does not receive texts), or in person at 3613 Dexter Ave, Fort Worth, TX 76107.