Privacy Policy
This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Student Tenants Association platform.
1.0Introduction
Student Tenants Association LLC ("STA," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website at studenttenants.org and any associated mobile applications (collectively, the "Platform"). By using the Platform, you consent to the data practices described in this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.
2.0Information We Collect
3.0How We Use Your Information
We use the information we collect to:
(a) Operate, maintain, and improve the Platform; (b) process and display User-generated content including reviews and reports; (c) facilitate the content moderation and dispute resolution process; (d) create and manage your account; (e) process subscription payments for property owner accounts; (f) communicate with you regarding your account, submissions, or support requests; (g) send administrative communications such as updates to our Terms and Conditions or Privacy Policy; (h) detect, prevent, and address fraud, security issues, and technical problems; (i) comply with legal obligations; (j) enforce our Terms and Conditions; (k) deliver targeted advertising and measure the effectiveness of advertising campaigns, including by sharing or selling identifiers and behavioral data to ad networks and marketing partners; (l) sell, license, or otherwise transfer email addresses and contact information to third-party marketing partners and lead-generation services; and (m) generate aggregate and de-identified data for our own commercial use and for sharing or sale to third parties.
We may share or sell your personal information, including contact details, email addresses, and behavioral data, to third-party advertising networks, data brokers, marketing partners, and lead-generation services for commercial purposes, including targeted advertising and email marketing. Depending on your state of residence, you have the right to opt out of the sale or sharing of your personal information and its processing for targeted advertising. To opt out, use the "Do Not Sell or Share My Personal Information" link in the site footer, transmit a recognized Universal Opt-Out Mechanism such as Global Privacy Control (GPC), or contact us at [email protected]. See Section 8 ("Your Rights") for the full list of state-specific rights and how to exercise them.
We do not sell or license uploaded documents (including lease agreements, photographs, or videos), and we do not knowingly sell sensitive personal information as defined under applicable state law.
4.0Disclosure of Information
We may disclose your information in the following circumstances:
5.0Aggregate and De-Identified Data
6.0Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure cloud infrastructure, access controls, and regular security reviews.
However, no method of transmission over the Internet and no method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.
7.0Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with services. We may also retain your information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes such as maintaining platform integrity.
User-generated content (reviews, reports, owner responses) may be retained on the Platform even after account deletion, as this content serves the public interest purpose of the Platform. Content may be anonymized upon account deletion.
8.0Children's Privacy
The Platform is not directed at children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. In compliance with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501-6506), if we become aware that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete such information from our systems.
Users must be at least eighteen (18) years of age to create an account on the Platform. If you believe that a child under 13 has provided personal information to us, please contact us at [email protected].
9.0Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate personal information; (c) request deletion of your personal information, subject to certain legal exceptions; (d) object to or restrict certain processing of your personal information; (e) receive a copy of your personal information in a portable format; (f) opt out of the sale or sharing of your personal information; (g) opt out of the processing of your personal information for targeted advertising; and (h) opt out of certain forms of profiling.
How to Opt Out of the Sale or Sharing of Your Personal Information. You may opt out at any time, without creating an account and without identity verification, by: (1) using the "Do Not Sell or Share My Personal Information" link in the site footer; (2) transmitting a recognized Universal Opt-Out Mechanism such as Global Privacy Control (GPC), which we honor as a valid opt-out request; (3) on the iOS app, declining or revoking tracking permission (Settings, then Privacy & Security, then Tracking), which prevents any sale or sharing of personal information collected through the app; or (4) contacting us at [email protected]. Once you opt out, we will not request that you opt back in for at least twelve (12) months. We will also instruct our downstream third-party recipients to stop processing your data for sale or sharing.
Sensitive Personal Information. We do not knowingly sell, share, or use for targeted advertising any sensitive personal information, including precise geolocation, biometric or genetic data, health information, racial or ethnic origin, religious beliefs, immigration status, citizenship status, sexual orientation, union membership, or the contents of private communications. You may further request that we limit our use of any sensitive personal information we hold to the purposes necessary to provide the services you have requested.
California Residents. Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), California residents have the right to know what personal information is collected, the right to request deletion and correction, the right to limit the use of sensitive personal information, the right to non-discrimination for exercising these rights, and the right to opt out of the sale or sharing of personal information, including for cross-context behavioral advertising. STA sells and shares personal information as those terms are defined under the CCPA. See the opt-out instructions above.
Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Tennessee, Indiana, Iowa, Delaware, New Jersey, New Hampshire, Kentucky, Rhode Island, Minnesota, Maryland, and Nebraska Residents. Residents of states with comprehensive consumer privacy laws have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling. To exercise these rights, use the opt-out mechanisms described above or email us at [email protected].
Florida Residents. While the Florida Digital Bill of Rights (FDBR) primarily applies to businesses with annual gross revenues exceeding $1 billion, STA respects the data privacy principles set forth in the FDBR and honors reasonable data access, correction, deletion, and opt-out requests from Florida residents.
How We Respond. We will respond to verified requests within thirty (30) days, except where applicable law permits a longer period. If we cannot verify your identity, we may decline a request that would require us to release personal information; we will never decline an opt-out of sale or sharing for failure to verify identity. We will not discriminate against you for exercising any of these rights.
10.0Third-Party Links & Services
The Platform may contain links to third-party websites, services, or resources that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies only to the Platform.
11.0Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy on the Platform and updating the "Last Updated" date. Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.
12.0Contact Us
If you have questions or concerns about this Privacy Policy, your personal information, or our data practices, please contact us at:
Student Tenants Association LLC
Privacy & Compliance
Email: [email protected]
General Support: [email protected]