Privacy Policy

This Privacy Policy explains how Sharelet ("Sharelet", "we", "us") collects, uses, and shares information when you use our website, applications, and services (the "Services"). By using the Services, you agree to this Policy.

Information you provide:

• Account details (name, email, password);
• Profile and Renter Passport information (such as budget, move-in timing, lifestyle preferences, occupation, pets);
• Listings and other content you post, including photos and messages;
• Verification information you submit to our identity and background-check partners;
• Payment information you provide to our payment processor (we do not store full card numbers).

Information collected automatically:

• Usage data (pages viewed, listings viewed, searches, interactions);
• Device and log data (IP address, browser type, approximate location, timestamps);
• Cookies and similar technologies (see Cookies below).

Information from third parties: our verification and payment partners may return results (such as a pass/fail verification status) that we associate with your account.

Income verification (optional): if you choose to verify your affordability, you connect your bank through our income provider (Plaid) at your own direction. Plaid handles your bank connection and credentials directly under Plaid's privacy policy. Sharelet uses the income information only to compute a coarse income band (for example, a range such as "$60k–$100k/yr") and stores ONLY that band together with a verified status and timestamp. We never receive or store your banking credentials, and we do not store your raw income figures, account balances, statements, or transactions.

We use information to:

• Provide, operate, and improve the Services, including matching, search, and the assistant;
• Verify identity and trust signals and reduce fraud and scams;
• Facilitate communication, applications, agreements, deposits, and payments between users;
• Send transactional messages and, where permitted, notifications about matches, messages, and updates;
• Personalize content and recommendations;
• Maintain security, enforce our Terms, and comply with legal obligations.

We share information:

• With other users as needed to provide the Services (for example, your profile, verification level, and messages are visible to users you interact with);
• With service providers who process data on our behalf, such as hosting and database (e.g., Supabase, Vercel), payments (e.g., Stripe), income verification (e.g., Stripe Financial Connections or Plaid), background and identity checks (e.g., Stripe Identity, Checkr), email (e.g., Resend), and AI features (e.g., Anthropic);
• With companies whose content is embedded in a page you view (e.g., Spotify, when a member has added a player to their profile, or Trustpilot). These are not processing data on our behalf: your browser contacts them directly and they receive your IP address and browser information under their own privacy policies;
• When required by law, to respond to legal process, or to protect the rights, safety, and property of ${B}, our users, or the public;
• In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do NOT sell your personal information for money. We do not share the contents of your private messages with other users beyond the intended recipients.

Host payouts: when you set up payouts to receive deposits, our payments provider (Stripe) collects and verifies your identity and bank details directly through Stripe Connect and stores them under Stripe's own privacy policy. Sharelet does not receive or store your full Social Security number or bank account number; we retain only your payout account's identifier and status.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand usage. We may use privacy-respecting analytics to measure traffic and improve the Services. You can control cookies through your browser settings; disabling some cookies may affect functionality.

We do NOT use advertising, retargeting, or cross-context behavioral-advertising cookies, and we do not sell or share your personal information for cross-context behavioral advertising.

Embedded content. Some pages include content embedded from other companies — for example a Spotify player a member chose to add to their profile, a Stripe payment form, a Plaid bank-linking window, or a Trustpilot widget. Embedded content loads in its own frame directly from that company, which means that company receives your IP address and browser information and may set its own cookies or storage under its own privacy policy, exactly as if you had visited it directly. We do not control that and we receive nothing from it. Profile embeds load only when you scroll to them, and only from the single provider named above.

Do Not Track. Because there is no consistent industry standard for how websites should respond to browser "Do Not Track" (DNT) signals, we do not currently respond differently to them. Regardless of your DNT setting, we do not track you across third-party websites for advertising.

We keep personal information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. We follow data minimization: we collect the least information necessary and keep it for the shortest practical time.

When you delete your account, your associated records are removed through cascading deletion across our database and file storage. Security and audit logs are retained for a limited period (generally up to 12 months) and then purged. Payment records may be retained as required for tax and accounting purposes. Deleted data ages out of our encrypted backups as the backup window rotates.

Income verification data is minimized by design: we store only a coarse income band, a verified status, and a timestamp (never your raw financial data), so there is no sensitive financial dataset to retain or dispose of. This retention and disposal practice is reviewed at least annually.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. You can update much of your information in your account, opt out of notification emails in settings, and request deletion of your account by contacting info@shareletspace.com. We will respond consistent with applicable law and will not discriminate against you for exercising your rights.

California residents. Under the California Consumer Privacy Act, as amended by the CPRA, you have the right to: know the categories and specific pieces of personal information we collect and how we use and disclose it; request deletion of your personal information; correct inaccurate personal information; and opt out of the "sale" or "sharing" of personal information. We do NOT sell your personal information, and we do NOT share it for cross-context behavioral advertising. The categories of information we collect, our purposes, and the parties we disclose to are described in the sections above. You will not receive discriminatory treatment for exercising any of these rights.

To exercise these rights, contact info@shareletspace.com. We will verify your request as required by law before acting on it, and you may use an authorized agent to submit a request on your behalf.

Verifying your identity at Level 2 involves a photo of your government ID and a short selfie. Matching the two produces a scan of facial geometry, which is a biometric identifier under laws including the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and Washington's biometric privacy statute.

We collect it for one purpose: confirming you are the real, named person you say you are before you host a home or move into one. It is never used for advertising, never sold, leased, traded, or otherwise profited from, and never disclosed to other members. Other members see only that you are verified.

Retention and destruction. The images and the facial scan are processed by our verification provider, Stripe Identity. Sharelet does not receive, store, or have any means of retrieving them. They are destroyed when the purpose for collection has been satisfied — that is, once the check completes — and in any event no later than three years after your last interaction with Sharelet, whichever occurs first. Sharelet retains only the outcome of the check and its date.

We obtain your written release before any biometric identifier is collected, and we record which version of that notice you agreed to and when. You can withdraw consent at any time from your account settings; withdrawal prevents any future check but cannot reverse one already completed.

Biometric consent is not required to use Sharelet. You can browse, search, message, apply to a listing, and book a viewing without ever being asked for it. Identity verification IS required before you publish a listing, sign an agreement, or move money on the platform, and today the ID check is performed by our provider using the photo-and-selfie match described above — so declining consent means you can continue to use Sharelet but cannot complete those particular steps. Withdrawing consent does not remove a verification already recorded.

We use technical and organizational measures designed to protect your information, including encryption in transit (TLS 1.2+), encryption at rest, row-level access controls on our database, multi-factor authentication on administrative systems, and the principle of least privilege. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact info@shareletspace.com and we will take appropriate steps.

We operate in the United States. If you access the Services from outside the United States, you understand your information may be processed in the United States, where data-protection laws may differ from those in your country.

We may update this Policy from time to time. We will post the updated Policy with a new effective date and, for material changes, take reasonable steps to notify you.

Questions or requests about your privacy? Contact us at info@shareletspace.com.