Skip to main content

Website Privacy Policy

Last updated: October 19, 2026

Carrollton Lakes Homeowners Association operates carrolltonlakeshoa.com. This policy explains information handled through this community website, including Cora, our AI assistant. For privacy questions, email hello@carrolltonlakeshoa.com.

The Homeowner Portal (opens in a new tab) is a separate service used for association accounts, payments, official records and architectural submissions. Ocean Blue Community Management and the portal provider handle information submitted there under their own practices. This website policy does not replace those notices or the rules governing HOA records.

Information you provide

Contacting the board. The contact form asks for your name, email address and message. It prepares a message in your own email application; it does not submit the form to a website database. You decide whether to send it. If you send an email, the board receives the message and sender information, and your email provider and the receiving email service process it. Cora's “Email the board” option similarly prepares an email containing your question.

Using Cora. Cora does not require an account, name or email address, but anything you type may contain personal information. Questions are sent to the website server. To generate an answer, recent conversation text (up to 12 messages) and relevant published community information are sent through Lovable's AI gateway to the configured OpenAI model.

The website records question text, the page where it was asked, the time, a stable identifier derived from your IP address, and answer outcome and confidence information. Thumbs-up/down feedback and any optional comment are stored with the question. These records are not anonymous: text you enter can identify you, and the IP-derived identifier can link requests. Authorized website administrators can review questions and feedback to understand problems and improve Cora. The system also derives source-matching terms and summaries of unanswered questions from recent use.

Please do not enter passwords, payment details, personal account information, or confidential information about yourself or someone else into Cora or its feedback box. Use the Homeowner Portal or the appropriate board or management contact for private association matters.

Website search. Search terms are sent to the server to find public site content. An IP-derived identifier and request counts are used to limit excessive requests. Hosting or diagnostic records may also include search requests.

Board administration. Board sign-in uses an email address and password processed by the website's authentication service. Account and session information supports sign-in, password resets and administrator access. Authorized administrators can upload and publish community content, including documents and images. Material published on the public website can be read, downloaded and indexed by search engines and AI services.

Hosting, analytics and service providers

The website uses Lovable hosting and cloud services, including Supabase-based database, authentication and file storage, and Lovable's AI gateway with OpenAI for Cora. These services process information needed to provide their functions.

Visitor analytics are active. They measure visits, pages viewed, referring sites, device information, approximate country and visit duration. Hosting and diagnostic systems also process technical information such as IP addresses, page URLs, browser information, errors and performance measurements to deliver the site, protect it and help diagnose problems. URLs can include information placed in their query strings. Cloudflare provides delivery and bot protection.

Cora's website logs support abuse prevention, feedback review and better matching of questions to published sources. AI and hosting providers also process information under applicable service terms. Their retention practices are separate from the website's database cleanup.

Information may also need to be retained or disclosed to meet applicable legal requirements or HOA recordkeeping obligations.

Cookies, browser storage and your choices

The hosting and analytics services use cookies, including an analytics session identifier and a Cloudflare bot-management cookie. The currently served analytics script sets its session cookie for 30 minutes and refreshes it during use.

This website also saves information in your browser:

Cora's Start over button clears the conversation in that browser. It does not delete server-side questions or feedback, erase saved feedback selections, or clear provider records. You can use your browser settings to remove site data or restrict cookies and third-party content. Doing so may sign you out, reset preferences or prevent features from working. You can browse public information without using Cora.

Embedded content and external links

The homepage Facebook feed loads when you scroll near it. The Events page contains an embedded Google Calendar that loads as the browser displays it. Loading these features connects your browser to Meta or Google, which may receive technical information, use cookies and associate activity with your account according to their settings and policies.

Links to the Homeowner Portal, Ocean Blue, government agencies, utilities and other sites take you to services we do not operate. Review their notices before providing information. Provider information is available in the Lovable Privacy Policy (opens in a new tab), Google Privacy Policy (opens in a new tab), Meta Privacy Policy (opens in a new tab) and Cloudflare Privacy Policy (opens in a new tab).

How long information stays

The website has a nightly cleanup configured to delete Cora question records once they are older than 12 months. Related feedback is deleted with those records. This is a scheduled cleanup of the website database, not a guarantee that every copy is erased exactly at 12 months.

That cleanup does not cover email correspondence, administrator accounts, published community materials, operational summaries, browser data, backups or service-provider records. Those records have separate handling and may be subject to applicable recordkeeping requirements. Browser data remains until cleared, replaced or removed by your browser.

Questions and requests

Email hello@carrolltonlakeshoa.com with questions or requests concerning access, correction or deletion of information handled through this website. Tell us enough to locate the relevant information, such as an approximate date and the feature used; do not email passwords or unnecessary sensitive information.

We may need to verify your identity or authority before responding. What can be provided, corrected or deleted depends on the information, applicable law, recordkeeping duties and our ability to identify the record. Contact Ocean Blue or the portal provider about information submitted directly to the Homeowner Portal.

We will update this page when the website's practices change. The date above identifies the latest revision.