Privacy Policy

Last updated: May 21, 2026

1. Introduction

Vacnt, Inc. ("Vacnt," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.

2. Information We Collect

2.1 Information You Provide

  • Account registration: email address, password (hashed), and display name.
  • Profile information: profile photo, phone number, and bio.
  • Listing information: unit address, rent amount, move-out date, photos, and unit description.
  • Identity verification: government-issued ID, selfie, and SSN last 4 digits (via Stripe Identity).
  • Messages sent through the in-app messaging system.
  • Tour scheduling information and preferences.
  • Support requests and communications with our team.

2.2 Information Collected Automatically

  • Log data: IP address, browser type, pages visited, time spent, referring URL.
  • Device information: device type, operating system, and unique device identifiers.
  • Cookies and similar tracking technologies (see Section 7).
  • Usage patterns and interaction data within the Platform.

2.3 Information from Third Parties

  • Stripe: Payment method tokens, payout account details, and transaction status. We do not store raw card numbers.
  • Plaid: If you connect a bank account, Plaid provides us with bank account verification status and institution name. We do not receive or store your full account number or login credentials.
  • Supabase: Our backend database and authentication provider. User authentication tokens and session data are managed through Supabase's infrastructure.
  • Mapbox: Address geocoding data for listing locations.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Platform.
  • Verify user identity and prevent fraud.
  • Process finder's fee payments and manage escrow.
  • Facilitate communication between Listers and Claimers.
  • Send transactional emails (payment confirmations, dispute updates, payout notifications).
  • Send marketing emails if you have opted in (you may opt out at any time).
  • Resolve disputes and enforce our Terms of Service.
  • Comply with legal obligations and respond to lawful requests.
  • Analyze usage trends to improve user experience.

4. Plaid Data Handling

We use Plaid Technologies, Inc. to facilitate bank account connectivity. When you connect your bank account through Plaid, you interact directly with Plaid's interface. Plaid's privacy policy governs Plaid's collection and use of your data. We receive only a Plaid account token and verification status — we never receive your banking credentials or full account numbers. Data shared via Plaid is used solely for identity and bank verification purposes.

5. Stripe Data Handling

Payment processing is handled by Stripe, Inc. All payment card data is tokenized and processed directly by Stripe — Vacnt never stores raw card numbers or full bank account numbers. Stripe may conduct its own KYC (Know Your Customer) and identity verification for payout accounts. Stripe's use of your data is governed by Stripe's Privacy Policy. We store Stripe customer and account identifiers in our database solely to facilitate transaction processing and payouts.

6. Supabase Data Handling

Vacnt uses Supabase as our primary database and authentication infrastructure. User data, listings, messages, and transaction records are stored in Supabase-managed PostgreSQL databases hosted on AWS infrastructure. Data is encrypted at rest and in transit. Supabase's security practices comply with SOC 2 Type II standards. You may request deletion of your data as described in Section 9.

7. Cookies

We use essential cookies for session management and authentication. We may use analytics cookies (e.g., PostHog or similar) to understand Platform usage. You may disable non-essential cookies in your browser settings, though this may affect some Platform functionality. We do not sell cookie data to third parties.

8. Information Sharing

We do not sell your personal information. We share your information only:

  • With the other party in a confirmed listing transaction (e.g., Lister and Claimer see each other's name and contact info after a claim).
  • With service providers (Stripe, Plaid, Supabase, Mapbox) under data processing agreements.
  • As required by law, court order, or to protect the rights, property, or safety of Vacnt, our users, or the public.
  • In connection with a merger, acquisition, or sale of assets (with advance notice to you).

9. CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out: Opt out of the sale or sharing of your personal information. (We do not sell personal information.)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, email privacy@vacnt.com with "CCPA Request" in the subject line. We will respond within 45 days. We may need to verify your identity before processing your request.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We retain transaction records for 7 years for legal and accounting purposes. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

11. Security

We implement industry-standard security measures including TLS encryption in transit, encryption at rest, access controls, and regular security reviews. However, no system is completely secure. Please notify us immediately at security@vacnt.com if you believe your account has been compromised.

12. Children's Privacy

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us immediately.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at: privacy@vacnt.com or write to: Vacnt, Inc., Attn: Privacy, San Francisco, CA.