Apartment List Privacy Policy Updated and last reviewed as of: October 12, 2020. Welcome to our website, www.apartmentlist.com, and our related mobile application (“Site”) as operated by Apartment List, Inc. (the “Company” or “we”). We operate the Site and other associated services and offerings that allow companies to list apartments, houses or other real estate for rent or sale, and for individuals to locate apartments, houses or other real estate for rent or sale (collectively with the Site, the “Services”). We make our Services available to individuals subject to this privacy policy and the Terms of Use. This privacy policy applies to your information that: you provide to us, we receive when you send us emails, text messages, and other electronic communications, we learn from you when you access or use the Services and our social media pages such as Facebook, Twitter, Instagram, LinkedIn, and YouTube, we receive from our business customers (for example, property management companies who list properties on our Site), and we learn when you interact with our advertisements that are displayed on other websites or applications. This privacy policy describes how we may collect, use, and disclose your information, as well as options available to you and your rights. If you do not want information about you to be used in the manner described in this privacy policy, please do not use the Services. This privacy policy does not cover, and we are not responsible for the privacy, data or other practices of any our business customers (for example, property management companies) or third parties (except as required by applicable law). See “Third Parties” below for more information. California Users: If you are a resident of California, please see your additional rights and our additional disclosures under the sections titled “Privacy Notice for California Residents” and “California’s Shine the Light Law.” California Employees, Job Applicants, Owners, Directors, Officers, and Contractors: If you are a resident of California and you are an employee, job applicant, controlling owner, director, officer, independent contractor, or medical staff of Apartment List, please see our disclosures under the section titled “Privacy Notice for California Company Resources.” User Consent: By using and accessing the Services, you consent to the practices described in this privacy policy and you represent that you are at least 18 years old and located in the United States. In addition, by choosing to contact a property, you give our property managers and landlords your express written consent to calling and texting you about any inquiries you submit through our Services, including by calling and texting you via automated means and pre-recorded or artificial voices, even if you are on a do-not-call list. Consent is not a condition of purchase. Your use of and access to our Service acts as your binding electronic signature. Message rates and data charges may apply. User Consent for Text Messages: By registering as a user of our Services, you consent to us texting you in order to download our mobile app when you register and when you forget your password. In addition, by choosing to contact a property, you give our business customers (e.g., property managers and landlords) your express written consent to calling and texting you about any inquiries you submit through our Services. You consent to receiving calls and text messages via automated means and pre-recorded or artificial voices, even if you are on a do-not-call list. Consent is not a condition of purchase. Your use of and access to our Service acts as your binding electronic signature. Message rates and data charges may apply. Carriers are not liable for delayed or undelivered messages. If you have any questions about your text or data plan, it is best to contact your carrier. You may cancel receiving text messages from us at any time. To cancel messages received from property managers or landlords, you must contact them directly. To stop receiving text messages from us, just text “STOP” in response to a text message. After you send a text message “STOP” to us, we will send you a text message to confirm that you have been unsubscribed. After this, you will no longer receive text messages from us. If you want to receive text messages from us again, you can email us at support@apartmentlist.com or respond to our last text message with a keyword such as “START” or “YES.” If you are experiencing issues with the text messaging program, you can reply with the keyword “HELP” for more assistance, or you can get help directly at support@apartmentlist.com. Choice and User Rights: See “Your Choices and Opting Out” for information about opting out of certain data practices and see “Your Rights” for information about exercising your rights as a user of our Services. Changes and Updates to this Privacy Policy We may update this privacy policy at any time. When we do, we will also revise the date on this privacy policy. Where required by law, we will notify you or obtain your consent to make these changes. Your continued use of or access to the Service constitutes your agreement to this privacy policy and any updates. Users Must Be At Least 18 Our Service is not intended for individuals under 18 years of age. If you are under 18, do not provide or use any information on this Service. We delete information of people under 18 when we learn that we have collected personal information from them. Please contact us at privacy@apartmentlist.com if you believe that we have information about a person under 18. United States Users Only Our Services are operated in the United States. Our Service is intended for individuals located in the United States only. You are not authorized to use the Service if you are located outside the United States. If you continue to use the Services without authorization from outside the United States, then the information collected through the Services will be transferred to, stored, and processed in the United States or other countries in which our service providers and third party partners operate. Your consent to this privacy policy represents your consent to such transfer, storage and processing outside of your country of residence, including the United States, which may have different data protection rules than those of your country of residence. When we determine that a user of our Services is located outside the United States, we delete such user’s personal information from our systems. The Information the Company Collects User Provided Information. You may provide information to the Company when you register, log in, or use the Service (or request access to our Service via our service providers, such as via the Facebook marketplace). The information you may provide includes your name, email address, telephone number, your social media name, your income range, information about your property search (for example, apartment with two bedrooms in a particular city), physical address (for example, when you participate in our sweepstakes or other promotions, when you provide feedback, or when you apply for housing during a disaster), gender, feedback about our Service, job applicant-related information, as well as a variety of other personal information such as information about your demographic profile and interests. You also provide us information when you send us emails, text messages, chat messages via our Service, or other electronic messages, or when you participate in one of our online sweepstakes or apply for a job through our online Careers page. Any time you enter information into a form or other data entry field available on the Service or send us an electronic message, the Company collects and stores that information for our business use. Please do not include any sensitive information of this forms and fields. Some of the information you may provide is optional. However, if you elect not to provide such information, you will not be able to access the information you had requested to access or use or you may not be able to use the Service. Information Provided by our Business Customers. Our business customers (for example, property management companies) provide us with reports showing which individuals have moved into their properties (i.e., move-in data). You may be listed as one of their tenants in those reports. The report may show the following: your contact information including name, email address, phone number, physical address, the date you moved into our business customer’s property, the date the individual became a potential customer of business customer in business customer’s system, the resident and lead identification numbers created by the business customer, and other information that the business customer deems related to the service that we provide to the business customer, and the name of the third party company that was the source of the individual that converted into a resident at one of the business customer’s properties (for example, if you first saw a property on our Site, then we would be the source). Automatically Collected Information and Cookies. When you visit the Service or open one of our HTML emails or interact with our social media pages, certain information from your web browser, mobile device or mobile identifier, IP address, cookies, or email may be recorded through the use of different types of technology, including clear gifs, web beacons, and cookies. See “Cookies and Other Tracking Technologies” below. This automatically collected information may include the following: unique identification numbers, such as your user identification number for our Service, your IP address (Internet Protocol address) and your location derived from IP address, mobile device type and mobile device identifier, web browser type, the web pages or sites that you visit just before or after the Service, the pages you view, the dates and times that you use the Service, information about interactions with our emails, and information about properties you may be interested in. We also allow analytics companies (for example, Google Analytics) to use tracking technologies to collect information automatically about our users’ computers or mobile devices and their online activities. Logging in via Google or Facebook. You may be given the option to access or register for the Service through the use of your user name and passwords for certain services provided by third parties, such as Google or Facebook account credentials, or you may otherwise have the option to authorize third parties to provide personal information or other information to us. By authorizing us to connect with Google, Facebook or other third parties, you authorize us to access and store your name, email address(es), education, profile pictures, interests and activities, your gender and age, your hometown, school, employer, your username and other information that Google, Facebook or other third parties make available to us, and to use and disclose any such information in accordance with this privacy policy. You should check your privacy settings in your Google, Facebook and other third party account to understand and change the information that they can send to us. Please review their terms of use and privacy policies carefully before using their services and connecting to our Service. Information from Interactions with Ads. We advertise our Services on other websites and applications. When you interact with our advertisements (for example, you view or click on an advertisement), we receive information about that interaction to help us provide our Services to you. Location Information. Some of the features of the Service may enable or require us to access information about your location (“Location-based Services”). In order to use Location-based Services, you must allow the Company to access your localized position through your mobile device, which the Company may accomplish through a variety of means, including IP address, or geo-fencing technology, as available. Your mobile device may automatically enable the provision of some Location-based Services, but you will have the option to enable or disable such Location-based Services at any time by configuring your mobile device’s setting appropriately. See “Your Choices and Opting Out” below. Information from Other Sources. If we combine or associate information from other sources with personal information that we collect through the Service, we will treat the combined information as personal information in accordance with this privacy policy. Aggregated Data. Aggregated data is data we collect about a group or category of features, services or individuals, from which individual identities have been removed. For example, information about how you use a feature may be collected and combined with information about how others use the same feature, without any personal information included in the resulting data. The Way the Company Uses Information We use your information for a variety of purposes, including those described below: Providing and Supporting the Service. The Company uses your information to provide to you all of the features and services found on the Service and to connect you with our business customers and other third parties upon your request. We will use your email address for non-marketing or administrative purposes such as notifying you of major Service updates, responding to your requests, contacting winners of our sweepstakes, and sending you other types of notices. We may also use your information to diagnose and fix server problems. We may use your information to process your job application and to contact you about a job. In addition, we may review the content of communications you make through the Service so that we can provide better services. For example, monitoring user communications may help us identify and remove users who are attempting to scam other users or perform other illegal activity. Managing our Relationships with and Invoicing our Business Customers. We use the reporting information provided by our business customers (i.e., move-in data) in order to match their customers (i.e., renters) against our users. If we are the source of a business transaction, then we charge our business customer a fee. For example, if you saw a property on our Site for the first time and later signed a lease for that property, then our business customer who manages that property would pay us a fee because we were the original source of that transaction. We may also use the move-in data provided by our business customers for audit purposes and to exercise our rights and defenses with respect to our business customers. If an individual included in the move-in data from a business customer has not used our Service, we delete that individual’s information. Improving the Service. The Company may use the information that we collect from our users to understand usage trends and preferences, to improve the way the Service works and looks, to improve our marketing and promotional efforts, and to create new features and functionality. We may also track your use of the Services to improve the design and functionality of the Services. Customizing your Experience. The Company may use your information to remember you when you return to our Site (for example, with cookies) so that you will not have to re-enter it during your visit or the next time you visit the Site. We may also use your information to provide you with custom, personalized advertisements, content and information through the use of cookies. For example, based on your property preferences, we may tailor the search results that you see on our Service. The Company also uses the location information that you provide or that it collects from your mobile device or IP address, to show you properties that may be of interest to you. Analyzing the Service. The Company may use your information to: (a) monitor aggregate usage metrics such as total number of users and number and type of pages viewed, (b) track conversion of prospective renters into actual renters of our business customers, (c) perform fraud monitoring and prevention and security, and (d) determining the effectiveness of our Service. Marketing the Service. Where permitted by applicable law, the Company may use your email address or other personal contact information to send you promotional or marketing messages relating to the Service, which you will have the ability to opt-out of. We use your information to monitor the effectiveness of these promotional and marketing campaigns. Third Party Uses. We may partner with certain third parties to collect other information to engage in analysis, research, and reporting of Service usage patterns. These third parties may also deliver advertising to you on other websites and applications, based on your activity on our website and other websites over time. These third parties may set and access cookies on your computer or other devices and may also use web logs or web beacons. See “Cookies and Other Tracking Technologies” and see “Your Choices and Opting Out” to opt out of interest-based advertising by third parties from cookies. Evaluating a Combination. We may use your information as part of evaluating a merger, acquisition, debt financing, or sale of Company assets, as well as in the event of an insolvency, bankruptcy or receivership. Combining Information. We may combine information from the Services that is linked or reasonably linked to a particular computer or device with personal information. If we combine such information with personal information, the combined information will be treated by us as personal information as long as it is combined. General and Legal Uses. We may use your information if we believe it is appropriate or necessary: (a) to protect our rights, privacy, safety or property, and that of you and others; (b) to prevent or stop activity we may consider to be, or is at risk of being, illegal, unethical or legally actionable activity; (c) to protect our operations and the security of our Services; (d) under applicable law; (e) to comply with legal process and our legal obligations; (f) to respond to requests or requirements from public, law and government authorities (including national security and law enforcement requirements) and private parties; (g) to enforce our terms and conditions; and (h) to allow us to pursue available remedies or limit the damages that we may sustain. Who the Company Discloses Information to The Company discloses your information to the following types of third parties: Affiliates. We may disclose your information to our subsidiaries and other affiliates for the purposes described in this privacy policy. Apartment List, Inc. is the party responsible for the management of the information jointly used by it and its affiliates. Business Customers. We may disclose your information to our business customers. For example, when you click on “Request tours” regarding a property on our Service or you click submit when you see “love is in the air,” then we will share your contact information with the business customer (i.e., property management company) for that property. Also, when you use our Service to send a message or make an Internet-based call to a property, then we will share your message and contact information with the business customer for that property. In addition, if you apply for wildfire disaster housing, we will share your information with our business customers to process your request. THE COMPANY'S PRIVACY POLICY DOES NOT APPLY TO OUR BUSINESS CUSTOMERS AND THEIR HANDLING OF YOUR INFORMATION ONCE THEY HAVE YOUR INFORMATION, SO WHEN YOU INTERACT WITH A PROPERTY, YOU SHOULD CAREFULLY CONSULT THE PRIVACY POLICY OF THE PROPERTY MANAGEMENT COMPANY OR OWNER (OR REQUEST A COPY OF THEIR PRIVACY POLICY). Service Providers. We may disclose your information to certain third parties to process such information on our behalf as our service providers, including to manage our contacts and send out email and other messages on our behalf, to assist us in creating new features and improving the way the Service works and looks, and to provide website hosting and serving, storage, maintenance, technical, security, performance tracking, business analytics, and marketing analytics services. We provide our service providers with only the information necessary for them to perform the services we request, and we ask our service providers not to use such information for any purpose other than as specified by us. Our third party service providers who provide web usage analytics for our Services (e.g., Google Analytics) may also use your information to provide you with more personalized advertising content on other websites and applications. To opt out of interest-based advertising by third parties, see "Your Choices and Opting Out.” Third-Party Marketing Providers. We may provide your information, including contact information (except text messaging originator opt-in data and consent), to third-party organizations for their use in marketing or promoting products or services that they believe may be of interest to you based on your use of the Service, such as moving-related services and renters’ insurance services. Buyer of our Business. We may disclose your information or otherwise transfer it as part of any merger, acquisition, debt financing, or sale of Company assets, as well as in the event of an insolvency, bankruptcy or receivership, in which information is transferred as one of our business assets to third parties. General and Legal Disclosures. We may disclose your information if we believe it is appropriate or necessary: (a) to protect our rights, privacy, safety or property, and that of you and others; (b) to prevent or stop activity we may consider to be, or is at risk of being, illegal, unethical or legally actionable activity; (c) to protect our operations and the security of our Services; (d) under applicable law; (e) to comply with legal process and our legal obligations; (f) to respond to requests or requirements from public, law and government authorities (including national security and law enforcement requirements) and private parties; (g) to enforce our terms and conditions; and (h) to allow us to pursue available remedies or limit the damages that we may sustain. Cookies and Other Tracking Technologies Cookies. When you use the Service, we and our service providers send one or more cookies (small text files containing a string of alphanumeric characters that is an online identifier) to your device. We use both persistent cookies and session cookies. Session cookies: A session cookie is a cookie that is erased when a user closes their web browser. We use session cookies to note users as registered users of our Service while they are on our Service. Persistent cookies: A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to the Service. By using these cookies, we can "remember" you and what you have done on the Service before and personalize our Service for you. Cookies also help us operate our Services, including to verify legitimacy of traffic. Some cookies help us better understand the effectiveness of our Services (for example, by tracking the way in which you respond to, select and interact with our Services). Other cookies collect information about how you use our Services, which highlights areas we can improve, including identifying pages that are not helpful to users. We also use cookies to send you personalized, targeted advertisements when you leave our properties and go to other websites. To opt out of interest-based advertising by us, see “Your Choices and Opting Out.” Cookies can be removed, but each web browser is a little different, so please look through your browser "Help" file to learn the correct way to modify your cookies set-up. Please note that disabling cookies will prevent you from accessing the Service. In addition, if you access or use the Service from your phone, tablet or mobile device, we may store your mobile device identifiers or other unique identifier assigned to a device by the manufacturer that uniquely identifies individual smartphones, tablets, or mobile devices. Unlike cookies, mobile device identifiers or other such identifiers cannot be deleted. Third parties may use cookies or similar technologies on visitors of our Services to serve interest-based advertisements to such visitors when they visit other websites and mobile applications. The collection of information through cookies or similar technologies by such third parties will be governed by such third parties’ own privacy policies and principles, which Apartment List does not control. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.To read about your choices with regard to Apartment List’s and third parties’ uses of cookies in our Services, please see “Your Choices and Opting Out.” Pixel Tags. We and our service providers may also use "pixel tags," "web beacons", "clear GIFs" or similar means ("Pixel Tags") to analyze usage patterns of consumers. A Pixel Tag is an electronic image, often a single pixel, which is typically a transparent graphic image (usually 1 pixel x 1 pixel) that is placed on a web page or in a mobile application and may be associated with cookies on your hard drive. Some Pixel Tags are used to drop cookies on users’ devices. Third Party Buttons. We have third party buttons (such as Facebook “like” or “share” buttons or Twitter “tweet” buttons) on our Service that allow third parties to collect information about you through such third parties’ browser cookies, even when you do not interact with the button. Information collected through buttons is collected directly by these third parties, and the Company does not participate in that data transmission. Information collected by a third party in this manner is subject to that third party’s own data collection, use, and disclosure policies. Do Not Track Signals. We do not respond to browser Do Not Track (DNT) signals. Your Choices and Opting Out Opting Out of Marketing from Apartment List. You may opt-out from receiving electronic communications from us. If you no longer want to receive marketing-related emails from us on a going-forward basis, you may opt-out of receiving these marketing related emails by contacting us at privacy@apartmentlist.com or by clicking on the opt-out link within the email message that you receive from us. Please also note that if you do opt-out of receiving marketing-related emails from us, we may still be required to send you administrative messages relating to the Services from time to time. Opting Out of Apartment List’s Cookies. You may disable cookies, including Apartment List’s cookies, by modifying the settings in your browser. However, please note that if you delete or disable cookies, you will not be able to access the Services. To opt out of receiving interest-based advertising from us through the use of cookies in your current browser and for more information on what it means to opt-out, please email us at privacy@apartmentlist.com. When you opt out of receiving interest-based advertising from us, note that the opt out only applies to the applicable browser in which you set it. Also, our opt out tool is cookie-based which means that if you have cookies blocked, you will not be able to use the opt out cookie. If you delete cookies entirely then you will need to opt out again. Finally, note that once the opt-out has been completed, you may still receive advertisements from us, but such advertisements will not be interest-based ads targeted by us. Opting Out of Interest-Based Advertising by Third Parties from Cookies. Some third parties who use cookies when you visit our Services, have opt out mechanisms either directly from their website or through an industry-developed web page. If you go to optout.aboutads.info or www.aboutads.info/choices, you can learn how to exercise choice regarding the collection of information about your online activities over time and across multiple third-party websites, online services, devices, and applications for interest-based advertising purposes. When you opt out of receiving interest-based advertising from third parties, note that the opt-out only applies to the applicable browser in which you set it. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org. Opting Out of Interest-Based Advertising in Mobile Applications by Third Parties. To opt out of interest-based advertising that takes place through mobile applications, please see the following instructions on utilizing your mobile device operating system’s opt-out settings. For iPhone/iOS users: For instructions on how to “Limit Ad Tracking” on the iOS, please visit this link or see the instructions below: Go to “Settings” > “Privacy” > “Advertising.” Turn on “Limit Ad Tracking.” For Android users: For instructions on how to opt out of interest-based ads in the Android OS, please visit this link or see the instructions below: Open Google settings on your device (may be an app called Google Settings or an entry in your phone’s Settings menu, depending on your device) Tap “Ads” Switch on “Opt out of interest-based ads” or “Opt out of Ads Personalization.” Opting Out of Cross-Device Targeting by Third Parties. Third parties may also combine and use information from websites or applications on your current browser or device with information from your other browsers or devices for advertising purposes. To opt out of such practices, please follow the instructions above for opting out on each of your browsers, and also opt out on each of your mobile devices. Please note that you will need to opt out separately on (1) each of your browsers and (2) each of your mobile devices to ensure that information collected on a particular browser or device is not used on another browser or device. Opting Out of Use of Precise Location. To disable the collection of precise location information from your mobile device through mobile applications, you can access your mobile device settings and choose to limit that collection. Android: For Android 6.0 and above: you can modify privacy settings in Settings > Applications > App Permissions > Location and tap the on/off toggle switch next to Location for each app which has permission to use your location data. For earlier versions of Android: you can modify privacy settings in Settings > More > Permission and tap the on/off toggle switch next to Location to turn location functions off for your device. Alternatively, you may uninstall the relevant program(s). iOS: In iOS you can modify privacy settings in Settings > Privacy. You can select location data from this list to see which apps have asked for permission to use your location data. ‍ Access, Deletion and Other Rights You may decline to share your personal information with the Company, in which case the Company will not be able to provide any of its Services to you. To exercise your access and deletion rights (if applicable to you), please submit a verifiable consumer request to us using one of the following methods: submitting a request from https://www.apartmentlist.com/feedback and providing your full name and email address and the type of request you are making (e.g., right to access or deletion), or emailing us at CCPArequest@apartmentlist.com and providing your full name and email address and the type of request you are making (e.g., right to access or deletion). Please note that for deletion requests, while such deletions may be reflected in our active user databases, we may retain your personal information for a variety of other purposes, including backups and archiving, prevention of fraud and abuse, analytics, and invoicing purposes (for example, to resolve an invoicing dispute with a business customer if the business customer believes that you were not a lead sourced by Apartment List). California Users. If you reside in California, see “Privacy Notice for California Residents” for additional rights regarding your information and methods for making your requests. Business Customers’ Deletion of Information. If you would like our business customers (e.g., property management companies) to delete your information, you should contact them directly. To opt out of receiving marketing communications from us, please see “Your Choices and Opting Out.” To opt out of Apartment List’s cookies, please see “Your Choices and Opting Out.” To opt out of interest-based advertising by third parties from cookies, please see “Your Choices and Opting Out.” To opt out of interest-based advertising by third parties from mobile applications, please see “Your Choices and Opting Out.” To opt out of cross device targeting by third parties, please see “Your Choices and Opting Out.” To opt out of the use of precise location, please see “Your Choices and Opting Out.” Sensitive Information We ask that you not send us, and you not disclose to us, any sensitive information (e.g., social security numbers or other government identifiers, information related to racial or ethnic origin, political opinions, religion or other beliefs, medical or health conditions, criminal background, trade union membership, or information concerning sex life or sexual orientation) on or through the Services or otherwise to us, except where such information is legally required. Third Parties This privacy policy does not cover, and we are not responsible for the privacy, data or other practices of any third parties (except as required by applicable law), including any third parties (e.g., property management companies) operating any site or service to which our Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates. These third parties are bound by their own privacy policies. Our Commitment to Data Security Information that we collect is stored using reasonable security procedures and practices designed to protect the personal information. To protect your privacy and security, we take reasonable steps to verify your identity before granting you access to your account for the Service. You are responsible for maintaining the secrecy of your unique password and account information at all times. If the Company learns of a security systems or other personal data breach on its Services, then we may attempt to notify you electronically so that you can take appropriate protective steps. By using the Service or providing personal information to us, you agree that we can communicate with you electronically regarding security, privacy, and administrative issues regarding your use of the Services. The Company may post a notice on the Service if a security breach occurs. If this happens, you will need a web browser enabling you to access and view the notice on the Service. The Company may also send an email to you at the email address you have provided to us in these circumstances. Retention We will retain your personal information for the period necessary to fulfill the purposes outlined in this privacy policy or until an individual requests deletion in accordance with applicable law and this privacy policy, unless a longer retention period is required or permitted by law. See “Access and Rights regarding Personal Information.” Contacting the Company If you have any questions, comments, or concerns about this privacy policy, please contact us at: Email: privacy@apartmentlist.com Postal address: Apartment List Attention: Privacy 475 Brannan Street, Suite 410 San Francisco, CA 94107 To request access to or deletion of your information or similar requests regarding your information: see “Access, Deletion and Other Rights” for information on how to exercise your rights. California’s Shine the Light Law California's "Shine the Light" law permits users of our Service that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please see “Contacting the Company” for ways to contact us. Privacy Notice for California Residents Effective as of: January 1, 2020 This Privacy Notice for California Residents (“California Notice”) supplements the information contained in our privacy policy above and applies to California residents whose personal information we collect ("consumers" or "you"). However, we bring to your attention that certain California residents (e.g., employees, job applicants, contractors, owners, directors and officers of Apartment List) do not have all of the rights under this California Notice with respect to their personal information. See additional information about excluded personal information under “Information We Collect.” Also, where noted in this California Notice, the CCPA temporarily exempts certain personal information reflecting a written or verbal business-to-business communication or transaction (“B2B personal information”) from certain CCPA requirements. We have adopted this California Notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this California Notice. Information We Collect We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device or household ("personal information"). However, from January 1, 2020 through December 31, 2020, certain personal information is excluded from our definition of personal information, which we refer to as excluded personal information in this California Notice. By “excluded personal information,” we mean personal information that we collect about a natural person who is a resident of the State of California in the course of the person acting as any of the following (to the extent we collect and use the information solely within the context of that role): a job applicant for Apartment List (for example, if you apply for a job at Apartment List, the personal information collected as part of your application and your potential hiring will not be covered by this California Notice), an employee of Apartment List (for example, your personal information collected as part of your employment with Apartment List will not be covered by this California Notice), a controlling owner of Apartment List (for example, the personal information of an individual who owns 50% or more of the voting stock of Apartment List or controls a majority of our board or otherwise exercises controlling influence, that individual’s personal information relating to his/her ownership in the company will not be covered by this California Notice), a director of the board or an officer of Apartment List (for example, your personal information collected as part of your role as a director on the company’s board or as a board-appointed or elected officer such as the chief executive officer, president, secretary of treasurer, will not be covered by this California Notice), a contractor of Apartment List (for example, your personal information collected as part of your role as an independent contractor providing services to the Company will not be covered by this California Notice), and a medical staff member of Apartment List (if any). In addition, “excluded personal information” includes: emergency contact information for the individuals covered above, to the extent collected and used by us solely within the context of using emergency contact information, and information necessary to administer benefits for another person relating to the individuals covered above (for example, if you are a spouse or dependent of an employee of Apartment List and receive benefits through Apartment List’s health insurance, the information necessary to administer benefits for you as a spouse or dependent will not be covered by this California Notice). We have collected the following categories of personal information from our consumers (as defined under the CCPA) within the last twelve (12) months: Category Examples Collected A. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. YES, for example name, email address, physical address, IP address, and cookie ID B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. YES, for example name, phone number and physical address C. Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). YES, for example gender and age D. Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. YES, for example consuming tendencies and histories E. Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. NO F. Internet or other similar network activity. Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. YES G. Geolocation data. Physical location or movements. YES H. Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. NO I. Professional or employment-related information. Current or past job history or performance evaluations. NO J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. NO K. Inferences drawn from other personal information. Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. YES Personal information does not include: Publicly available information from government records. Deidentified or aggregated consumer information. Other information excluded from the CCPA's scope: health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994. The Company obtains the categories of personal information listed in the chart above from the following categories of sources: Directly from you. For example, from forms you complete on our Services or from clicking on our features such as “Request a Tour.” Indirectly from you. For example, from observing your actions on our Services. From our business customers, for example property management companies. From the use of cookies and similar tracking technologies. From third parties such as Google and Facebook when you log in to our Services via their accounts. From your interactions with our advertisements. From your location. Use of Personal Information We may use the personal information we collect for one or more of the following purposes, as described in more detail in our general privacy policy above. See “The Way the Company Uses Information.” Providing and Supporting the Service. Managing our Relationships with and Invoicing our Business Customers. Improving the Service. Customizing your Experience. Analyzing the Service. Marketing the Service. Third Party Uses. Combining Information. General and Legal Uses. We may use your information as described to you when collecting your personal information or as otherwise set forth in the CCPA. The Company will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. Sharing Personal Information The Company may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. Disclosures of Personal Information for a Business Purpose In the preceding twelve (12) months, the Company has disclosed the following categories of personal information for a business purpose: Category A: Identifiers. Category B: California Customer Records personal information categories. Category C. Protected classification characteristics Category D: Commercial information. Category F: Internet or other similar network activity. Category G: Geolocation data. Category K: Inferences drawn from other personal information. We share your personal information for a business purpose with the following categories of third parties: Our affiliates, such as subsidiaries of Apartment List. Our business customers, such as property management companies. Service providers. Marketing providers. A buyer of our business. We may also disclose your information if we believe it is appropriate or necessary: (a) to protect our rights, privacy, safety or property, and that of you and others; (b) to prevent or stop activity we may consider to be, or is at risk of being, illegal, unethical or legally actionable activity; (c) to protect our operations and the security of our Services; (d) under applicable law; (e) to comply with legal process and our legal obligations; (f) to respond to requests or requirements from public, law and government authorities (including national security and law enforcement requirements) and private parties; (g) to enforce our terms and conditions; and (h) to allow us to pursue available remedies or limit the damages that we may sustain. Sales of Personal Information In the preceding twelve (12) months, the Company has not sold personal information. “Sold” is defined under the CCPA. Your Rights and Choices The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights. Please note that certain California residents will not have these rights to the extent their personal information is “excluded personal information.” See “Information We Collect.” The CCPA does not provide these rights to B2B personal information. Access and Data Portability Rights You have the right to request that the Company disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability, and Deletion”), we will disclose to you: The categories of personal information we collected about you. The categories of sources for the personal information we collected about you. Our business or commercial purpose for collecting that personal information. The categories of third parties with whom we shared that personal information. The specific pieces of personal information we collected about you (which allows you to copy and port your information, i.e., a data portability request). The CCPA does not provide these rights to B2B personal information. Deletion Request Rights You have the right to request that the Company delete any of your personal information that the Company collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access, Data Portability, and Deletion), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. You must contact the applicable business customers directly to delete your information that they have in their systems. We may deny your deletion request or not delete some of your personal information, if retaining the information is necessary for us or our service provider(s) to: Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities. Debug products to identify and repair errors that impair existing intended functionality. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.). Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us. Comply with a legal obligation. Make other internal and lawful uses of that information that are compatible with the context in which you provided it. We may also limit our deletion to the extent permitted by applicable law. The CCPA does not provide these rights to B2B personal information. Exercising Access, Data Portability, and Deletion Rights To exercise the California access, data portability, and deletion rights described above, please submit a verifiable consumer request to us using one of the following methods: If you have an account with us, you must submit your request online under the preferences section of your user profile page, If you do not have an account with us, you may submit your request by: submitting a request from https://www.apartmentlist.com/feedback and including your full name and email address and the type of request you are making (e.g., right to access, portability or deletion), or emailing us at CCPArequest@apartmentlist.com and including your full name and email address and the type of request you are making (e.g., right to access, portability or deletion). Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must: Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. However, if you have an account with us, we require you to log in to our Services and make your request and verify your identity via your profile page. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request. The CCPA does not provide these rights to B2B personal information. Response Timing and Format We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. We will deliver our response to you either via email, mail, or in your account (if you have an account with us). Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. Non-Discrimination We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not: Deny you goods or services. Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties. Provide you a different level or quality of goods or services. Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value to Apartment List and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time. We currently do not provide any financial incentives. Privacy Notice for California Company Resources Effective as of January 1, 2020 This Privacy Notice for California Company Resources (“California Resources Notice”) applies solely to employees, job applicants, controlling owners, directors, officers, independent contractors, and medical staff of Apartment List (if any) who are California residents (“you” or a “Company Resource”). We have adopted this California Resources Notice to comply with the California Consumer Privacy Act of 2018 (CCPA) with respect to certain Company Resources. Any terms defined in the CCPA have the same meaning when used in this California Resources Notice. Information We Collect from Company Resources We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Company Resource in the course of the natural person acting in his/her capacity as a Company Resource ("personal information"). We have collected the following categories of personal information from our Company Resources within the last twelve (12) months: Category Examples Collected A. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. YES B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. YES C. Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). YES D. Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. NO E. Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. YES, for example health data F. Internet or other similar network activity. Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. YES G. Geolocation data. Physical location or movements. YES H. Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. YES, for example recordings from security cameras on the premises I. Professional or employment-related information. Current or past job history or performance evaluations. YES J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. NO K. Inferences drawn from other personal information. Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. YES Personal information does not include: Publicly available information from government records. Deidentified or aggregated consumer information. Information excluded from the CCPA's scope: health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994. Use of Personal Information We may use the personal information of Company Resources that we collect for one or more of the following purposes: Employees, directors and officers: We may use your information for the following purposes: identifying you, verifying work authorization, administering taxes and health, medical and other benefit plans, keeping track of your records, contacting you, facilitating payment to bank accounts, contributing to 401(k) plans, garnishing wages required by law, evaluating performance, tracking efficiency and productivity, protecting against disclosure of confidential information and trade secrets, and ensuring compliance with applicable laws and company policies. Job applicants: We may use your information for the following purposes: identifying you, keeping track of records, contacting you, evaluating your candidacy, performing background and reference checks, and onboarding you. Independent contractors: We may use your information for the following purposes: identifying you, administering taxes, keeping track of your records, contacting you, facilitating payment to bank accounts, evaluating performance, tracking efficiency and productivity, protecting against disclosure of confidential information and trade secrets, and ensuring compliance with applicable laws and company policies. General and Legal Uses. We may use your information if we believe it is appropriate or necessary: (a) to protect our rights, privacy, safety or property, and that of you and others; (b) to prevent or stop activity we may consider to be, or at risk of being, illegal, unethical or legally actionable activity; (c) to protect our operations and the security of our Services and systems; (d) under applicable law; (e) to comply with legal process and our legal obligations; (f) to respond to requests or requirements from public, law and government authorities (including national security and law enforcement requirements) and private parties; (g) to enforce our terms and conditions; and (h) to allow us to pursue available remedies or limit the damages that we may sustain. We may use your information as described to you when collecting your personal information or as otherwise set forth in the CCPA. The Company will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. ‍ About UsCareersHome Bridge Austin Apartments Charlotte Apartments Chicago Apartments Dallas Apartments Denver Apartments Fort Worth Apartments Houston Apartments Indianapolis Apartments Jacksonville Apartments Los Angeles Apartments Nashville Apartments New York Apartments Philadelphia Apartments Phoenix Apartments San Antonio Apartments San Diego Apartments San Francisco Apartments Seattle Apartments Washington Apartments ABOUT USCAREERSRENTAL TRENDSBROKERSFEEDBACKPRIVACY POLICYTERMS