Click here for the Spanish translation of this Privacy Notice

Important to Note:

Entrata provides a suite of products and services (collectively, the "Entrata Platforms" or "Platforms") for use by our business clients ("Clients"), which are typically residential and commercial real estate property managers and property owners. Our Clients use our Platforms for many purposes, such as to manage the leasing lifecycle, and to facilitate communication with their end users and residents ("End Users"). Entrata typically has no direct relationship with End Users; we simply process and store End Users' personal information ("Client Data") on our Clients' behalf, as their service provider; Clients are responsible for directing Entrata in the processing of such information. Any use of Client Data by us is carried out pursuant to an agreement (and/or our applicable Terms of Service) in place between Entrata and our Client.

If you, as an End User, have any questions or concerns about the data handling practices of a Client using our Platforms to process and store your personal information, please contact the relevant Client directly.

Our ProspectPortal Platform permits our Clients to create their own websites, which facilitate communication and transactions between prospective and current tenants and our Clients. While these websites are built using our Platforms, and Client Data obtained through these websites are stored on our systems, this data is considered Client Data and is governed by our Clients' privacy notices/policies.

Finally, our Entrata Sites may contain links to other third-party websites. The information practices and content of such third-party websites are governed by their own privacy notices. We encourage you to review the privacy notices of such third-party websites to understand their information practices.

Entrata, Inc. and its affiliated entities (collectively, "Entrata", "we", "us", "our") are committed to protecting individual privacy and maintaining the trust of our Clients, the actual users of our services who are employed or contracted by our Clients ("Client Staff"), and visitors to our websites ("Visitors") (collectively, "you," "your"). It is important to us that we provide transparency regarding our collection, use, and disclosure of information that can be reasonably linked with you ("Personal Information").

To help us meet this commitment to you, we have created this Privacy Notice ("Privacy Notice"). This Privacy Notice governs data protection matters across the websites we control and which link to this Privacy Notice ("Entrata Sites") including related services other than the Platforms we provide to our Clients (collectively, "Services"). This Privacy Notice, along with our Terms of Use (available here), form an integral part of our relationship with you.

Please Note: This Privacy Notice only governs our processing of Personal Information in the United States. You can view our additional Privacy Notices here by region.

This Privacy Notice describes how we use, share, and protect the Personal Information of Clients, Client Staff, and Visitors who visit the Entrata Sites. It also describes the rights and choices regarding use, access to, and correction of Personal Information available.

This Privacy Notice does not govern websites created by our Clients using our ProspectPortal Platform to facilitate communication and transactions between Clients and their prospective and current tenants. Client Data obtained through these Platforms websites is governed by our Clients' privacy notices/policies.

Finally, our Entrata Sites may contain links to other third-party websites. The information practices and content of such third-party websites are governed by their own privacy notices. We encourage you to review the privacy notices of such third-party websites to understand their information practices.

We and our service providers collect Personal Information in various ways, such as when you: enter into a transaction or contractual arrangement with us; provide us with your Personal Information via the Services; participate in our programs or activities (e.g., our contests, online webinars, Entrata Connect, and Basecamp); provide Personal Information at industry events and trade shows; visit our facilities or we visit you at your offices; contact our customer service; or make any inquiries and communications with us. More information is set out below. We also collect Personal Information from other sources, including publicly-accessible databases and joint marketing partners.

Personal data includes:

1. Contact information: First and last name, email address, employer, phone number (work), physical address (work), job title.
2. Marketing preferences and customer service interactions: Marketing preferences; responses to voluntary surveys.
3. Operational data: Transactions, sales, purchases, uses, supplier information, credentials to online services and platforms, and electronic content produced by individuals using company systems (including online interactive and voice communications such as blog, chat, webcam use, and network sessions).

We will indicate which information is mandatory and must be provided in order for us to provide the requested Services to you at the point of collection. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so.

We also collect data through our Entrata Sites, such as browser and device information, application usage data, information collected through cookies, pixel tags and other similar technologies, and IP addresses. We also use cookies and similar technologies on our Entrata Sites.

"Do Not Track" Notice: "Do Not Track" is a preference that you can set in your browser to let websites you visit know that you do not want them collecting certain information about you. Entrata does not currently respond to, or honor, Do Not Track signals or requests from your browser.

We and our service providers use Personal Information for the following purposes:

1. Communicating with Clients and Client Staff for the purpose of our legitimate interest (providing our Clients with market-leading property management tools and Platforms). This includes:
   • Informing Clients about our various Platforms and solutions, and providing access to our Platforms where the Client enters into an agreement with us.
   • Providing back-end access to the Platforms for Clients and Client Staff.
   • Tracking and responding to Clients' inquiries, reports, reviews or correspondence regarding products and services.
   • Administering Client account(s).
   • Providing and improving our customer service.
   • Facilitating communications generally in the context of our business activities.
   • Sending administrative information to Clients, such as changes to our terms, conditions and policies.
   • Enforcing our Terms of Use and any other contractual terms and conditions that govern the relationship between Entrata and Clients.
2. Operating our business for the purpose of our legitimate interest (continuously improving, customizing and personalizing our Services). This includes:
   • Analyzing and improving the safety and security of our Services.
   • Supporting internal Entrata operations, including CRM and Client technical support.
   • Providing Clients and Client Staff with access to our 'App Store' to allow Clients to directly enable third-party application.
   • Carrying out machine learning, data extracting and loading data in data warehouses, in order to support Entrata enterprise software, data access, modifications, and operations.
3. Contacting Client Staff at prospective Clients in order to set up demos of our Platforms. This includes:
   • For marketing purposes, such as re-engaging with prospective Clients who have expressed an interest in our Services.
   • Administering account access to our Platforms for the purposes of providing demos/tutorials of the Platforms to prospective Clients.
   • Responding to your inquiries, for example, when you send us questions, suggestions, compliments or complaints, or when you request further information about our services.
4. Providing you with our newsletter and/or other marketing materials and facilitating social sharing or for the purpose of our legitimate interest (making it easier for you to get the benefit of your social sharing functionalities). This includes:
   • Sending you marketing related emails, with information about our services, new products and other news about our company.
   • Facilitating social sharing functionality that you choose to use.
   • Aggregating and/or anonymizing or de-identifying Personal Information so that it will no longer be considered Personal Information, for the purpose of our legitimate interest (to anonymize and aggregate for business purposes). We do so to generate other data for our use, which we may use and disclose for any purpose, as it no longer identifies you or any other individual. Where we maintain or use de-identified data, we will continue to maintain and use the de-identified data only in a de-identified fashion and will not attempt to re-identify the data.
5. Carrying out general organizational activities, for the purpose of our legitimate interest (to keep the Services updated and relevant and to develop our organization) and where necessary to comply with our legal obligations. This includes:
   • Data analysis, for example, to improve the efficiency of our Services.
   • Audits, to verify that our internal processes function as intended and to address legal, regulatory, or contractual requirements.
   • Fraud prevention and fraud security monitoring purposes, for example, to detect and prevent cyberattacks or attempts to commit identity theft.
   • Enhancing, improving, repairing, maintaining, or modifying our current Services.
   • Identifying usage trends, for example, understanding which parts of our Services are of most interest to users.
   • Operating and expanding our organization's activities, for example, understanding which parts of our Services are of most interest to our users so we can focus our energies on meeting our users' interests.

We will not disclose any Personal Information that we collect from you to any external parties except as indicated below:

1. Our Affiliates. We may disclose Personal Information to any of our subsidiaries and affiliates within the Entrata corporate group. Specifically, if our Clients utilize our applicant screening service, we will share Personal Information with our subsidiary ResidentVerify, LLC. Additionally, if you utilize our renters insurance agent, we will share Personal Information with our subsidiary Homebody Insurance Agency, LLC . We do not share any SMS or other contact information of End Users with Entrata affiliates or subsidiaries. Any opt-in collected by Entrata is collected on behalf of the Client, and therefore the sharing of such opt-in or the underlying contact information is only done at the direction of Entrata's Client.
2. Service Providers. We may disclose Personal Information to our service providers who perform certain services necessary to run our business (for example, data hosting and development, data analysis, customer service, auditing and other services), provided that these service providers have entered into legally binding agreements with us to protect the Personal Information shared, limit their use, retention, and disclosure of the Personal Information, and assist us with our compliance requirements.
3. Legal Request. We may disclose Personal Information to comply with applicable law and our regulatory monitoring and reporting obligations (which may include laws outside your country of residence), to respond to requests from public and government authorities (which may include authorities outside your country of residence), to cooperate with law enforcement, or for other legal reasons.
4. Business Transfer. We may disclose Personal Information to a third party in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Entrata’s assets, business, or stock, whether as a going concern or as part of bankruptcy, liquidation, receivership, or similar proceeding in which Personal Information held by Entrata are among the assets to be transferred.
5. API Transfer. We may disclose Client Data, at the direction of our Clients, through API to third parties. All API transfers are governed by a separate agreement between Entrata and the third party requesting API access, and all data usage and processing is governed by our Clients' agreements with such third parties.
6. Enforcement of Our or Others' Rights. We may disclose Personal Information to external parties the extent that this is necessary to enforce or protect our rights, privacy, safety or property, and/or that of our affiliates, you, or others, including enforcing our Terms of Use and any other agreements (such as for billing and collection purposes and fraud prevention).

We do not knowingly collect Personal Information from children under the age of sixteen (16) without authorization by a holder of parental responsibility. If you believe that we may have collected Personal Information from or about a child under the age of sixteen (16), please send an email to dataprivacy@entrata.com with the subject line "Personal Information of a Minor."

We seek to use commercially reasonable organizational, technical and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the "Contact Us" section below.

Where we collect your payment card information, we will comply with all applicable Payment Card Industry Data Security Standards (PCI-DSS).

We retain personal information for as long as needed or permitted in light of the purpose(s) for which they were obtained and consistent with applicable law. The criteria used to determine our retention periods include:

1. The length of time we have an ongoing relationship with you or our Client, and provide the use of our Platforms to you or our Client (for example, for as long as you have an account with us or keep using the Platforms);
2. Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
3. Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

We give you choices regarding our use and disclosure of your Personal Information for marketing purposes. You may opt out from:

1. Receiving marketing-related emails from us. If you no longer want to receive marketing related emails from us on a going-forward basis, you may opt out by following the "unsubscribe" option contained in any such email.
2. Receiving other promotional text communications, like SMS. If you no longer want to receive marketing related texts, you may opt out by replying "STOP" to any message you may receive from us.

It is up to you to keep your Personal Information on our Services up to date. You can update your Personal Information by logging into your account. If you are unable to update your Personal Information, you can contact us in accordance with the "Contact Us" section below.

End Users should contact our relevant Client with which they have a primary relationship. If our Client is unable to assist the End User, we will endeavor to assist our Client with updating the End User’s information.

In this section of the Privacy Policy, we provide supplemental information to California residents about our collection, use, disclosure and other processing of their Personal Information.

This section details which categories of Personal Information we collect and process, as well as which categories of Personal Information we disclose to third parties for our operational business purposes, including within the twelve (12) months preceding the date this Privacy Notice was last updated.

We do not sell Personal Information, and we do not share or otherwise process Personal Information for purposes of cross-context behavioral, as defined under applicable law. We have not engaged in such activities in the 12 months preceding the date this Privacy Policy was last updated. Without limiting the foregoing, we do not sell or share the Personal Information of minors under 16 years of age.

California consumers have the right to:

1. Identifiers, such as name, address, IP address that can reasonably be linked or associated with a particular consumer or household, email address, account name, online identifiers.
   • Disclosed to affiliates; service providers; contest sponsors; legal authorities; other parties in litigation for operational business purposes.
2. Personal information as defined in the California customer records law, such as name, contact information; financial account number; employment insurance, and financial information.
   • Disclosed to affiliates; service providers; contest sponsors; legal authorities; other parties in litigation for operational business purposes.
3. Commercial Information, such as transaction, sales, information and purchase history, including purchases considered, consuming histories or tendencies, supplier information.
   • Disclosed to affiliates; service providers; contest sponsors; legal authorities; other parties in litigation for operational business purposes.
4. Biometric Information, such as voiceprints and faceprints.
   • Disclosed to affiliates; service providers for operational business purposes.
5. Internet or network activity information, such as interactions with our online properties or marketing communications.
   • Disclosed to affiliates; service providers for operational business purposes.
6. Audio/Video Data. Audio, electronic, visual, and similar information, such as call and video recordings.
   • Disclosed to affiliates; service providers for operational business purposes.
7. Employment Information. Professional or employment-related information, such as employer and job title.
   • Disclosed to affiliates; service providers for operational business purposes.
8. Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences, characteristics.
   • Disclosed to affiliates; service providers for operational business purposes.

Individual Requests

Note: To the extent your request relates to information collected through the Platforms, please contact our Clients and review their privacy notices.

1. Request disclosure of the categories and specific pieces of Personal Information that a business has collected about you;
2. Request disclosure of the categories of sources from which a business has collected Personal Information about you;
3. Disclosure of the business or commercial purpose(s) for which your Personal Information has been collected;
4. Receive a list of the categories of third parties to which a business has disclosed your Personal Information;
5. Request that a business delete any Personal Information that it has collected from you (subject to exceptions).
6. Request that a business correct inaccuracies in your Personal Information.
7. Not be discriminated against by a business (e.g. charged different rates, provided different levels of service, denied goods or services, or suggested any of the preceding) for exercising any of the individual rights granted above.
8. Designate an authorized agent to exercise any of the individual rights granted above, on your behalf.

We will not unlawfully discriminate against you exercising your rights under California law. To exercise any of your rights as a California resident, you should contact the Client with which you have a direct relationship, or contact Entrata directly if your relationship is only with us (e.g., Client Staff or potential Clients, Visitors) by sending an email to dataprivacy@entrata.com or contacting us in accordance with the "Contact Us" section below.

If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the same submission method noted in this section. Before complying with your request, our Clients (or Entrata) may need to verify that it is you that is making the request. To accomplish this, you (or your authorized agent) may be requested to (1) confirm specific pieces of Personal Information that our Clients (or Entrata) already know about you, or (2) provide our Clients (or Entrata) with appropriate identification depending on the sensitivity of the information requested. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent. In addition, we may require that you confirm that you provided the agent permission to submit the request. If you make a request to delete, we may ask you to confirm your request before we delete your Personal Information. California residents are limited to two requests for Personal Information per twelve-month period. In some instances, we may decline to honor your request where the law or right you are invoking does not apply or where an exception applies.

Entrata does not disclose Personal Information to third parties, except to its wholly owned subsidiaries, for their direct marketing purposes. California residents who wish to opt-out of the sharing on a go-forward basis may contact us in accordance with the "Contact Us" section below. California residents may request further information about our compliance with this law by emailing us at dataprivacy@entrata.com.

It is our policy to post any changes we make to our Privacy Notice on this page, with a notice that it has been updated on our main homepage. If we make material changes to how we treat your Personal Information, we will notify you through a notice on the homepage. The date that this Privacy Notice was last revised is listed at the top of the page ("Effective Date"). You are responsible for visiting our site and this Privacy Notice to check for any changes.

If you have any questions or complaints related to our practices with respect to the collection, use, or disclosure of Personal Information, please feel free to contact us at dataprivacy@entrata.com, or call our toll-free number: 1-877-826-9700. If you would like to submit a data privacy rights request for personal information controlled by Entrata, please click here.

Entrata Legal Department 4205 Chapel Ridge Road Lehi, UT 84043

Please reach out to security@entrata.com for any security related inquiries.