California Privacy Notice

This California Privacy Notice explains how Residwell, operated by Dakota C. Cookenmaster, doing business as Residwell ("Residwell," "we," "us," or "our"), handles personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"). It supplements our Privacy Policy and applies to California residents whose personal information we handle.

How Residwell fits in

Residwell is provided to housing organizations such as property managers and residence-life teams. Most personal information in the Service is provided and controlled by the housing organization that gives you access. For that information, your organization is the business that decides how the data is used, and Residwell acts as its service provider, handling the data on the organization's behalf and only as its contract permits. When you interact with our public website directly, for example by requesting a demo or creating an account, Residwell is the business responsible for that information. Because your organization controls most of your data, we ask you to send your privacy requests to your organization first, and we will help fulfill them as its service provider.

Categories of personal information we collect

In the last twelve months, we have collected the following categories of personal information. The specific pieces depend on how you and your organization use the Service.

Identifiers. Name, email address, phone number, account and login identifiers, an identifier your organization assigns you, and your IP address.
Customer records. Contact details such as name and phone number, and account security information including login credentials.
Protected classifications. Date of birth or age, which some housing organizations require for their residents. We use this only to run the Service, such as confirming eligibility, and not to make decisions unrelated to housing.
Commercial information. Records of your activity in the community, such as maintenance requests, package records, engagement or credit activity, leave requests, and resident check records.
Internet or network activity. Device and browser information, log records, and your interactions within the Service. We do not use advertising or analytics tracking.
Geolocation data. Approximate location inferred from your IP address, used to run and secure the Service. We do not collect precise device location.
Professional or employment information. Your role in the community, such as resident, resident assistant, or administrator.
Sensitive personal information. Your account log-in credentials, and date of birth where your organization requires it. We use sensitive personal information only to provide the Service and to secure accounts, not to infer characteristics about you.

How we use personal information

We use personal information for the business purposes described in our Privacy Policy, including to:

Provide, operate, and maintain the Service for your housing organization and its residents.
Send service messages and notifications by in-app message, email, or text message where enabled.
Authenticate users, secure accounts, and prevent fraud or abuse.
Respond to requests, including demo requests, support questions, and privacy requests.
Maintain, improve, and troubleshoot the Service.
Comply with legal obligations and enforce our Terms of Service.

Where the information comes from

From you directly, such as when you use the Service or contact us.
From your housing organization, such as roster and unit-assignment information.
Automatically, such as limited technical and log data collected as you use the Service.

How we disclose personal information

In the last twelve months, we have disclosed personal information for business purposes to the following categories of recipients:

Your housing organization and its authorized staff, consistent with their role in the community.
Service providers that help us operate the Service under contracts that limit their use of the data, currently Google Cloud (hosting and database), Twilio SendGrid (email delivery), and Twilio (text messaging, where enabled). Our public demo form uses Google reCAPTCHA to prevent spam.
Legal and safety recipients, such as when we must comply with law or protect the rights, safety, and security of residents, organizations, the public, or Residwell.
A successor entity, in connection with a merger, acquisition, or sale of assets, with continued protection and notice as required by law.

We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA. Because we do not sell or share personal information, we do not offer a "Do Not Sell or Share My Personal Information" opt-out; there is nothing to opt out of. We have not sold or shared the personal information of California residents, including minors under 16, in the last twelve months.

Your California privacy rights

Subject to the limits in the CCPA, California residents have the following rights:

Right to know and access. Request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collecting it, and the categories of recipients.
Right to delete. Request that we delete personal information we have collected from you, subject to legal exceptions such as records we must keep.
Right to correct. Request that we correct inaccurate personal information we hold about you.
Right to opt out of sale or sharing. You have this right, but it does not apply here because we do not sell or share personal information.
Right to limit use of sensitive personal information. We only use sensitive personal information to provide and secure the Service, which are uses the CCPA does not require us to let you limit.
Right to non-discrimination. We will not discriminate against you for exercising any of your privacy rights.

How to exercise your rights

Because your housing organization controls most of the personal information in the Service, please send your request to your organization first, and we will help fulfill it as its service provider. For personal information we control directly, or if you are not sure who to contact, you can reach us using the details below. We will confirm your request and may need to verify your identity, using information already associated with your account, before we act on it. We will not ask for more information than necessary to verify you.

You may use an authorized agent to submit a request on your behalf. We may ask the agent for proof that you gave them permission, and we may still ask you to verify your own identity with us directly.

How we respond

We will acknowledge a verifiable request promptly and respond within the time the CCPA allows, generally 45 days, and we will let you know if we need more time. There is no charge to make a request in most cases. If we cannot fulfill a request, we will explain why.

How long we keep information

We keep personal information for as long as needed to provide the Service and as described in our Privacy Policy. We do not keep personal information longer than reasonably necessary for the purposes for which it was collected.

Changes to this notice

We may update this California Privacy Notice from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

Contact us

To exercise a privacy right, or if you have questions about this notice, contact us at hello@residwell.com.

For a full description of our privacy practices, see our Privacy Policy.