Privacy Policy
Effective Date: April 8, 2026 · Last Updated: April 8, 2026
1. Information We Collect
We collect the following categories of information: A. Information You Provide Directly: - Account registration information: name, email address, password, and role (Landlord or Tenant) - Profile information: profile photo, phone number - Property listing information: address, rent, deposit, amenities, photos - Rental application information: full name, email, phone number, annual income, desired move-in date, and personal message - Payment information: processed through Stripe; we do not store full card numbers or bank account details - Identity verification data: processed through Stripe Identity; may include government-issued ID images and biometric data (selfie) - Communications: messages sent through the Platform's messaging system, including text and file attachments - Digital signatures: typed signatures used to execute rental agreements B. Information Collected Automatically: - Log data: IP address, browser type, pages visited, time and date of access - Device information: device type, operating system, unique device identifiers - Usage data: features used, clicks, searches, and interactions with the Platform - Cookies and similar technologies: session cookies, analytics cookies C. Information from Third Parties: - Stripe: payment status, Stripe account ID, onboarding completion status, and identity verification results - Anthropic: AI-generated content is processed through Anthropic's API; no personal data is retained by Anthropic beyond their standard API processing terms
2. How We Use Your Information
We use the information we collect to: (a) Provide, operate, and improve the Platform and its features; (b) Create and manage your account; (c) Process rental applications and facilitate connections between Landlords and Tenants; (d) Generate AI-assisted rental agreements using listing and applicant data; (e) Process payments and disburse funds to Landlords through Stripe; (f) Verify user identities through Stripe Identity; (g) Generate Settler Scores as applicant assessment tools; (h) Send transactional communications, including application updates, agreement notifications, and payment confirmations; (i) Respond to your inquiries and provide customer support; (j) Detect, investigate, and prevent fraudulent transactions and other illegal activities; (k) Comply with applicable legal obligations; (l) Enforce our Terms of Service; and (m) Analyze usage patterns to improve Platform functionality and user experience.
3. Legal Basis for Processing (where applicable)
Where required by applicable law, we process your personal information on the following legal bases: - Contract performance: processing necessary to perform our agreement with you - Legitimate interests: fraud prevention, platform security, and service improvement - Legal obligation: compliance with applicable laws and regulations - Consent: where you have provided explicit consent, such as for identity verification
4. How We Share Your Information
We do not sell your personal information. We share your information in the following circumstances: A. Between Platform Users: When a Tenant submits a rental application, their application information (name, email, phone, income, move-in date, message, identity verification status, and Settler Score) is shared with the applicable Landlord. Property listing information is publicly visible to all Platform users. B. Service Providers: We share information with trusted third-party service providers who assist us in operating the Platform, including: - Stripe, Inc.: payment processing, identity verification, and Connect account management - Supabase, Inc.: database hosting and authentication services - Anthropic, PBC: AI agreement generation and applicant assessment - Vercel, Inc.: cloud hosting and deployment infrastructure All service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed. C. Legal Requirements: We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud. D. Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described herein.
5. Data Retention
We retain your personal information for as long as necessary to provide the Platform and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by applicable law. Specifically: - Account information: retained for the duration of your account and for up to seven (7) years thereafter for legal and compliance purposes - Rental agreements: retained permanently as legally required records - Payment receipts and transaction records: retained for a minimum of seven (7) years as required by applicable tax and financial regulations - Messages and communications: retained for up to three (3) years following account closure - Identity verification data: processed and retained by Stripe pursuant to Stripe's data retention policies Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law.
6. Data Security
We implement industry-standard technical and organizational security measures to protect your information, including: - Encryption of data in transit using TLS/SSL - Encryption of sensitive data at rest - Row-level security controls in our database - Access controls limiting employee access to personal data - Regular security assessments and monitoring However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your information. In the event of a data breach that affects your rights and freedoms, we will notify you and applicable authorities as required by law.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on the Platform. Types of cookies we use: - Essential cookies: necessary for the Platform to function, including authentication sessions - Analytics cookies: help us understand how users interact with the Platform (e.g., page views, feature usage) - Preference cookies: remember your settings and preferences You may control cookie settings through your browser settings. Disabling certain cookies may affect Platform functionality. We do not use cookies for advertising or cross-site tracking purposes.
8. Third-Party Services
The Platform integrates with the following third-party services, each with their own privacy policies: - Stripe, Inc. (payments and identity): https://stripe.com/privacy - Supabase, Inc. (data storage): https://supabase.com/privacy - Anthropic, PBC (AI services): https://anthropic.com/privacy - Vercel, Inc. (hosting): https://vercel.com/legal/privacy-policy We encourage you to review the privacy policies of these third parties. Settlerspace is not responsible for the privacy practices of third-party services.
9. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information: - Right to Access: request a copy of the personal information we hold about you - Right to Correction: request correction of inaccurate or incomplete information - Right to Deletion: request deletion of your personal information, subject to legal retention requirements - Right to Portability: request your personal information in a structured, machine-readable format - Right to Restrict Processing: request that we limit how we use your information - Right to Object: object to processing based on legitimate interests - Right to Withdraw Consent: where processing is based on consent, withdraw it at any time California Residents: Under the California Consumer Privacy Act (CCPA), you have additional rights including the right to know what personal information is collected, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your rights. To exercise your rights, contact us at: privacy@settlerspace.com. We will respond within 30 days of receiving a verifiable request.
10. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a person under 18 without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a minor, please contact us at privacy@settlerspace.com.
11. Interstate Data Transfers
Settlerspace operates in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to such transfer and processing.
12. Identity Verification and Biometric Data
Settlerspace offers optional identity verification through Stripe Identity. When you submit to identity verification: (a) Stripe collects and processes your government-issued ID and biometric facial data; (b) biometric data is processed solely for identity verification and is not retained by Settlerspace; (c) Stripe's collection and use of biometric data is governed by Stripe's Biometric Privacy Policy; and (d) where required by state law (including Illinois, Texas, and Washington), you provide explicit consent to the collection of biometric identifiers. We will not sell, lease, trade, or profit from your biometric data. We will not disclose your biometric data to third parties without your consent except as required by law.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by sending you an email notification. Your continued use of the Platform following any changes constitutes your acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team at: Settlerspace Attn: Privacy Officer Email: privacy@settlerspace.com Website: https://www.settlerspace.com For data deletion requests or to exercise your privacy rights, please email: privacy@settlerspace.com with the subject line "Privacy Request."