Spot Privacy Policy

We collect information you provide directly to us, including:

• Name, mailing address, email address, and phone number
• Property information and rental details
• Financial information, including bank account details and income documentation
• Communications you send us via email, phone, or SMS/text message

We also collect information automatically when you visit our website, including your IP address, browser type, pages visited, and referring URLs.

We use the information we collect to:

• Provide, maintain, and improve our financial products and services, including Rent Advance and Guaranteed Rent programs
• Process applications and verify eligibility
• Communicate with you about your account and our services
• Send you marketing and promotional communications (with your consent)
• Comply with legal obligations and enforce our agreements
• Detect, investigate, and prevent fraudulent or unauthorized activity

By providing your phone number to Spot, you consent to receive calls and text messages (SMS/MMS) from Spot or its authorized agents at the number provided. These communications may relate to your account, applications, service updates, and marketing. Message and data rates may apply. Message frequency varies.

To opt out of text messages at any time, reply STOP to any message we send you. You may also contact us as described in Section 8 below. After opting out, you may receive a single confirmation message. Opting out of marketing messages will not affect transactional or account-related messages.

To opt out of marketing phone calls, please contact us using the information provided in Section 8.

We may share your information with:

• Service providers who perform services on our behalf
• Financial partners and funding sources involved in delivering our products
• Property management platforms through which our services are distributed (including AppFolio and its marketplace partners)
• Credit bureaus and data verification services
• Legal or regulatory authorities when required by law, court order, or to protect our rights
• Successor entities in connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for their own marketing or advertising purposes.

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Financial records may be retained for up to seven (7) years in accordance with applicable law and regulatory requirements.

We use commercially reasonable administrative, technical, and physical security measures designed to protect your information from unauthorized access, use, or disclosure. However, no security system is impenetrable and we cannot guarantee the absolute security of our systems or your information.

Depending on your state of residence, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to legal retention obligations
• Opt out of the sale or sharing of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

Residents of Colorado may exercise rights under the Colorado Privacy Act (CPA) by contacting us as described in Section 8. We will respond to verified requests within 45 days, with an option to extend by an additional 45 days when reasonably necessary.

Residents of California may exercise rights under the California Consumer Privacy Act (CCPA/CPRA) by contacting us as described in Section 8.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

• Email: hello@spotrent.co
• Phone: 805 894 0669
• Mail: 108 W 13th St Suite 100 Wilmington DE 19801

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where required by law, by seeking your consent. The date at the top of this policy reflects when it was last updated. Your continued use of our services after any changes constitutes your acceptance of the updated policy.