Now in early access. We’re onboarding a first group of flex space operators. Book a demo →
Privacy Policy
Effective date: October 28, 2026
Cardinal Ops (“Cardinal,” “we,” or “us”) provides a Salesforce-native operating system for flex rental businesses, including coworking spaces, outdoor storage lots, and storage container rentals. This policy explains what information we collect through our website (cardinalops.co) and the Cardinal platform, including the booking, leasing, and payment pages operators share with their renters, how we use it, and the choices you have.
Information we collect
We collect the following kinds of information:
Website inquiries: When you book a demo or contact us, we collect your name, email address, company, the type of space you rent, and anything you include in your message.
Account information: When your organization sets you up with Cardinal, we receive basic account details such as your name, work email, and role, tied to your organization’s Salesforce environment.
Renter and booking information: When a renter books, leases, or pays for a space through an operator using Cardinal, we process details such as their name, contact information, company, the unit or space reserved, lease terms, signed documents, and billing history on the operator’s behalf.
Payment information: Card and ACH payments are processed through Cardinal Payments, which is powered by our payment processing partner. Payment status and transaction records sync to the operator’s Salesforce environment.
Access information: Where an operator uses Cardinal’s access control features, we process gate codes or door credentials assigned to a renter and entry logs that record when access was used.
Device and usage information: Basic browser and device details and diagnostic logs that help us keep the product reliable and fix issues.
How we use information
We use the information we collect to:
Provide the service: operate the Cardinal platform, including bookings, leases, billing, and access, and sync data with your organization’s Salesforce environment.
Respond to you: answer inquiries, schedule walkthroughs, and provide support.
Improve the product: understand how the product is used, diagnose problems, and build better features.
Communicate: send service-related messages such as onboarding help and important product updates.
Your data belongs to your organization
Cardinal connects to a Salesforce environment operated by the rental business you work for, the one you run, or the one you rent from. Units, renters, leases, invoices, payments, and access records managed in Cardinal are stored in that Salesforce environment and are controlled by that business. Cardinal processes this data on the business’s behalf.
If you rent space from an operator that uses Cardinal and have questions about how they handle your data, please contact that operator directly.
How we share information
We do not sell your personal information. We share information only with service providers that help us operate, such as Salesforce, which hosts the platform your data lives on, our payment processing partner for Cardinal Payments, and our website hosting provider, and when required by law or to protect our rights.
Data retention
We keep website inquiries for as long as needed to respond and maintain business records. Renter, lease, billing, and access data managed in Cardinal is retained according to the policies of the business that controls the Salesforce environment.
Security
Data is encrypted in transit using TLS. Data stored in Salesforce inherits the Salesforce platform’s security controls and your organization’s permission settings. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.
Your choices and rights
Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you. To make a request about information Cardinal controls, reach out through the contact form on our website. For data stored in an operator’s Salesforce environment, contact the business that operates it. We will support them in fulfilling your request.
Children’s privacy
Our website and platform are intended for business use and are not directed to children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. When we do, we will post the updated version on this page with a new effective date. Meaningful changes will be communicated through the product or by email where appropriate.
Contact us
Questions about this policy or how we handle data? Reach us through the contact form on our website and we’ll get back to you within a business day.