The Talvi Privacy Policy.

Welcome to Talvi. Talvi is a property management and resident experience platform that provides tools for property managers, landlords, building operators, residents, and applicants to manage leasing, rent payments, maintenance, communication, documents, amenities, and related services.

This Privacy Policy explains how Talvi collects, uses, stores, shares, and protects information across our web applications, mobile applications, APIs, and related services.

By using Talvi, you agree to the practices described in this Privacy Policy.

A. Account Information

• Name
• Email address
• Phone number
• Mailing address
• Profile information
• Login credentials
• Organization or company information
• Building or property information

B. Resident & Applicant Information

• Lease information
• Rental applications
• Employment information
• Income information
• Government-issued identification
• Identity verification results
• Tenant screening results
• Emergency contact information
• Occupancy information

C. Identity Verification & Screening Data

When we verify identities or screen for fraud and sanctions risk (see Section 05), we and our providers may collect:

• Name, date of birth, and residential address
• Government-issued identification documents and images
• A photograph or video of you (e.g., a selfie) and liveness data
• Device, network, and behavioral fraud signals
• Sanctions, watchlist, and politically-exposed-person (PEP) screening results, including OFAC results
• Financial-account and income data, where you use income or asset verification

D. Payment Information

Talvi does not directly store full payment card information.

Payments are processed through third-party payment providers such as Stripe, and bank linking for payments is performed through Stripe Financial Connections.

We may collect:

• Payment history
• Transaction status
• Payment method metadata
• Billing information
• Bank account linking status

E. Documents & Files

Users may upload:

• Leases
• Addendums
• Insurance documents
• Compliance documents
• Maintenance photos
• Vendor contracts
• Identification documents

F. Communications

• Messages between residents and management
• Support communications
• Announcements
• Maintenance notes
• Notification preferences

G. Device & Usage Data

• IP address
• Browser information
• Device information
• App usage analytics
• Session information
• Log data
• Crash reports

H. Location Data

• Property addresses
• Building information
• Device IP addresses

Talvi uses information to:

• Provide and operate the platform
• Process rent payments and related transactions
• Facilitate lease signing and document workflows
• Manage maintenance requests
• Process applications and screenings
• Authenticate users
• Verify identities and detect fraud (including through Plaid)
• Screen against sanctions and watchlists, including OFAC, and meet anti-money-laundering obligations
• Verify income and financial eligibility
• Improve platform functionality
• Provide customer support
• Send notifications and communications
• Prevent fraud and abuse
• Comply with legal obligations
• Generate analytics and reporting
• Personalize the resident and manager experience

Talvi integrates with third-party providers including but not limited to:

• Stripe (payments and bank linking via Stripe Financial Connections)
• Plaid (identity verification, anti-fraud, sanctions/AML screening via Plaid Monitor, and income or asset verification)
• Sanctions and watchlist data sources (e.g., OFAC, OpenSanctions)
• Dropbox Sign (e-signatures)
• SmartMove or other tenant-screening / consumer-reporting providers
• Persona (identity verification, where applicable)
• Twilio (SMS)
• SendGrid (email)
• Google Maps Platform
• Rewards and gift card providers

These providers may independently collect and process information subject to their own privacy policies.

Talvi uses Plaid Inc. (“Plaid”) to provide identity verification, anti-fraud, sanctions and anti-money-laundering screening (Plaid Monitor), and income or asset verification. We plan to expand our use of Plaid's income-verification services over time.

For these services, you (or, where applicable, your property manager acting on your enrollment) direct the processing, and Plaid acts as Talvi's service provider, processor, or subprocessor. Where a property manager or other business customer determines how this data is used, that customer is the controller and its privacy policy governs; Talvi and Plaid act on its instructions.

The data processed for these purposes may include:

• name, date of birth, address, phone number, government-issued identification documents and images, and photos/videos (e.g., selfies) and liveness data;
• device, network, and behavioral fraud signals;
• sanctions, watchlist, and PEP screening results, including OFAC results; and
• financial-account, balance, transaction, asset, and income data, where you use income or asset verification.

Consent & provider privacy terms.Before you use these features, the notices and consents required by law are provided and obtained so Plaid may process your data in accordance with Plaid's end-user privacy policy (plaid.com/legal) and, for identity verification, the IDV privacy statement (plaid.com/legal/#idv-privacy-statement).

How this data is handled.This data is not sold. It is used only to provide the verification, fraud, screening, and income services and for limited fraud-prevention and service-improvement purposes permitted under applicable law. Financial-account data is accessed only through your financial institution's authorized interfaces (no credential screen-scraping). You may request deletion of your data, and it will be deleted except where retention is required by law.

Legal framing.Use of the identity-verification, fraud, and sanctions-screening services is limited to purposes permitted under Section 6802(e) of the Gramm-Leach-Bliley Act (GLBA); for those services, Plaid is neither a “consumer reporting agency” nor a “furnisher” under the FCRA, and the identity-verification and Plaid-provided data they produce are not “consumer reports” under the FCRA and are not used as such. Applicant income and financial-stability verification, however, is furnished by Plaid Check, Inc., a consumer reporting agency, and is a “consumer report” under the FCRA; it is provided to property managers for tenant screening subject to the FCRA Tenant-Screening Addendum in our Terms of Service. Plaid maintains an information-security program and SOC 2 controls for these services.

A. Property Managers & Building Operators

Resident and applicant information may be shared with authorized property managers, landlords, building owners, and authorized personnel associated with a property.

B. Residents

Certain information may be visible to other residents where functionality requires it, such as roommate payment splitting or shared lease management.

C. Service Providers

We may share information with vendors and service providers necessary to operate the platform, including payment processors, identity verification, fraud, and sanctions-screening providers (such as Plaid), and, where you link a financial account or verify income, your financial institution and Plaid, solely to provide the requested service.

D. Legal Requirements

We may disclose information when required by law or to protect the rights, safety, and security of Talvi, our users, or others.

E. Business Transfers

Information may be transferred in connection with mergers, acquisitions, financing events, or asset sales.

Talvi maintains a defined data retention policy and enforces it automatically. We retain information for as long as necessary to:

• Provide services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
• Maintain operational records

Retention periods vary by data type. Transient and low-value data is purged on a short schedule — for example, expired invitations and their contact details after 30 days, delivered notifications after 180 days, and cached technical data within 90 days. Financial records, leasing and screening records, and security audit logs are retained for longer periods as required by tax, fair-housing, consumer-reporting, and compliance obligations.

Deletion of data past its retention period runs automatically on a recurring schedule, and the policy is reviewed at least annually.

Talvi uses reasonable administrative, technical, and organizational safeguards designed to protect information.

These measures may include:

• Encryption
• Access controls
• Secure infrastructure
• Audit logging
• Authentication protections
• Monitoring systems

However, no method of transmission or storage is completely secure.

Depending on your jurisdiction, you may have rights to:

• Access your information
• Correct inaccurate information
• Delete certain information
• Restrict processing
• Export certain data
• Opt out of certain communications

Requests may be submitted through Talvi support.

Talvi may use cookies, analytics tools, and related technologies to:

• Authenticate sessions
• Improve user experience
• Analyze platform performance
• Measure engagement
• Remember preferences

Users may control cookies through browser settings.

Talvi is not intended for use by children under 18.

We do not knowingly collect information from children.

Talvi operates primarily in the United States.

Users accessing Talvi from other jurisdictions acknowledge that information may be processed and stored in the United States.

Talvi sends operational notifications — such as rent reminders, payment receipts, maintenance updates, announcements, and security alerts — by email, in-app notification, and text message (SMS). Text messages are delivered through Twilio and email through SendGrid; to send them we share your phone number or email address and the message contents with those providers, who process that information under their own privacy policies.

We send these communications only with your consent. Residents control notifications per category in their notification settings, and text messages are sent only for the SMS categories you have enabled. For property-management organizations, notification and SMS consent is managed at the organization level by an authorized administrator.

You can opt out at any time by disabling the relevant category in your settings, or, for text messages, by replying STOP to any message. We retain your notification preferences so we can honor them. See the Terms of Service for the full text-messaging terms.

Talvi may update this Privacy Policy periodically.

Updated versions will be posted with revised effective dates.

Continued use of Talvi constitutes acceptance of the updated Privacy Policy.

For privacy-related inquiries, contact:

Talvi — support@trytalvi.com · https://www.trytalvi.com