Legal

Privacy Policy

Effective Date: April 8, 2025

Tenancy LLC ("UTenancy," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform. It also describes your rights under the California Consumer Privacy Act ("CCPA") and other applicable laws. Please read this policy carefully. If you do not agree with its terms, please do not use the Platform.

1. Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

a) Information You Provide

Account data: name, email address, role (student or landlord), and password.
Profile data: university affiliation, .edu email, lifestyle preferences, profile photo.
Listing data (landlords): property address, photos, rent amount, description, availability.
Communications: messages sent through the in-platform messaging system.
Payment data: billing information processed by our third-party payment provider (we do not store full card numbers).
Waitlist data: email address and role preference submitted before account creation.

b) Information Collected Automatically

Usage data: pages viewed, features used, clicks, and session duration.
Device data: IP address, browser type, operating system, and device identifiers.
Location data: approximate geographic location derived from IP address and, with your permission, precise device location for distance-to-campus calculations.
Cookies and similar technologies: session tokens and functional cookies used to keep you signed in and remember preferences.

c) Information from Third Parties

We receive authentication information from Supabase when you sign in and may receive information from university verification services to confirm student enrollment status.

2. How We Use Your Information

We use the information we collect to:

Create and manage your account and authenticate your identity.
Display and match housing listings to students based on location, preferences, and proximity to campus.
Facilitate communication between students and landlords via the Platform messaging system.
Process subscription payments for landlord dashboard features.
Send transactional emails (account confirmations, password resets, listing updates).
Improve the Platform, conduct analytics, and develop new features.
Detect, investigate, and prevent fraud, abuse, and security incidents.
Comply with legal obligations.

We do not sell your personal information to third parties for monetary consideration. We do not use personal information for behavioral advertising by third parties.

3. How We Share Your Information

We may share your information with:

Service providers: Supabase (database and authentication), Vercel (hosting), payment processors, and email delivery services — solely to operate the Platform.
Other users: landlords can see student-provided contact information when a student expresses interest in their listing; students can view landlord contact information displayed on listings.
Legal authorities: when required by law, court order, or to protect the rights and safety of UTenancy or others.
Business transfers: in connection with a merger, acquisition, or sale of all or substantially all of our assets, subject to standard confidentiality obligations.

4. Cookies and Tracking

We use strictly necessary cookies to maintain your session and authenticate you. We do not use third-party advertising or tracking cookies. You can configure your browser to refuse cookies, but some features of the Platform may not function properly as a result.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We retain de-identified analytics data indefinitely. Upon account deletion, we remove or anonymize your personal information within 30 days, except where retention is required by law or to resolve disputes.

6. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure storage via Supabase with row-level security policies, and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and keep your credentials confidential.

7. Children's Privacy

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

8. Your California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the CCPA and California Privacy Rights Act ("CPRA"):

Right to Know

You have the right to request that we disclose: the categories and specific pieces of personal information we have collected about you; the categories of sources from which we collected it; the business or commercial purpose for collecting it; and the categories of third parties with whom we share it.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where retention is necessary to complete a transaction, detect security incidents, or comply with legal obligations).

Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt Out of Sale or Sharing

We do not sell or share your personal information for cross-context behavioral advertising. If this ever changes, we will update this policy and provide a prominent "Do Not Sell or Share My Personal Information" link.

Right to Limit Use of Sensitive Personal Information

We collect certain categories of sensitive personal information (e.g., account login credentials). We use this information only to perform services reasonably expected by you and do not use it for inferring characteristics unrelated to the purposes described in this Policy.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a lower quality of service because you exercised your rights.

How to Submit a Request

To exercise any of the rights above, please submit a verifiable consumer request to cfernandez@utenancy.com or by contacting us at the address below. We will respond within 45 days of receipt (extendable by an additional 45 days with notice). We may need to verify your identity before processing your request.

Authorized Agent

You may designate an authorized agent to make a CCPA request on your behalf. We will require written proof of the agent's authorization and may verify your identity directly.

9. Categories of Personal Information Collected (CCPA Disclosure)

In the past 12 months we have collected the following categories of personal information as defined by the CCPA:

Category	Examples	Collected?
Identifiers	Name, email, IP address	Yes
Personal records	Account profile, billing info	Yes
Protected characteristics	None intentionally collected	No
Commercial info	Subscription history	Yes
Internet/network activity	Usage logs, session data	Yes
Geolocation data	Approximate location (IP-derived)	Yes
Inferences	Housing preferences	Yes
Sensitive personal info	Account credentials	Yes

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the revised policy on this page and updating the effective date. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related inquiries or to exercise your rights, please contact:

Tenancy LLC — Privacy Team
Los Angeles, California
cfernandez@utenancy.com