The Talvi Privacy Policy.

Welcome to Talvi. Talvi is a property management and resident experience platform that provides tools for property managers, landlords, building operators, residents, and applicants to manage leasing, rent payments, maintenance, communication, documents, amenities, and related services.

This Privacy Policy explains how Talvi collects, uses, stores, shares, and protects information across our web applications, mobile applications, APIs, and related services.

By using Talvi, you agree to the practices described in this Privacy Policy.

A. Account Information

• Name
• Email address
• Phone number
• Mailing address
• Profile information
• Login credentials
• Organization or company information
• Building or property information

B. Resident & Applicant Information

• Lease information
• Rental applications
• Employment information
• Income information
• Government-issued identification
• Identity verification results
• Tenant screening results
• Emergency contact information
• Occupancy information

C. Identity Verification & Screening Data

When we verify identities or screen for fraud and sanctions risk (see Section 05), we and our providers may collect:

• Name, date of birth, and residential address
• Government-issued identification documents and images
• A photograph or video of you (e.g., a selfie) and liveness data
• Device, network, and behavioral fraud signals
• Sanctions, watchlist, and politically-exposed-person (PEP) screening results, including OFAC results
• Financial-account and income data, where you use income or asset verification

D. Payment Information

Talvi does not directly store full payment card information.

Payments are processed through third-party payment providers such as Stripe, and bank linking for payments is performed through Stripe Financial Connections.

We may collect:

• Payment history
• Transaction status
• Payment method metadata
• Billing information
• Bank account linking status

E. Documents & Files

Users may upload:

• Leases
• Addendums
• Insurance documents
• Compliance documents
• Maintenance photos
• Vendor contracts
• Identification documents

F. Communications

• Messages between residents and management
• Support communications
• Announcements
• Maintenance notes
• Notification preferences

G. Device & Usage Data

• IP address
• Browser information
• Device information
• App usage analytics
• Session information
• Log data
• Crash reports

H. Location Data

• Property addresses
• Building information
• Device IP addresses

I. Partner Program Information

If you enroll in the Talvi partner (affiliate) program, we collect your display name, contact email, referral code, referral activity, and commission and payout records. See Section 14 for details, including how payout identity and banking information is handled by Stripe.

Talvi uses information to:

• Provide and operate the platform
• Process rent payments and related transactions
• Facilitate lease signing and document workflows
• Manage maintenance requests
• Process applications and screenings
• Authenticate users
• Verify identities and detect fraud (including through Plaid)
• Screen against sanctions and watchlists, including OFAC, and meet anti-money-laundering obligations
• Verify income and financial eligibility
• Improve platform functionality
• Provide customer support
• Send notifications and communications
• Prevent fraud and abuse
• Comply with legal obligations
• Generate analytics and reporting
• Personalize the resident and manager experience

Talvi integrates with third-party providers including but not limited to:

• Stripe (payments and bank linking via Stripe Financial Connections)
• Plaid (identity verification, anti-fraud, sanctions/AML screening via Plaid Monitor, and income or asset verification)
• Sanctions and watchlist data sources (e.g., OFAC, OpenSanctions)
• Dropbox Sign (e-signatures)
• SmartMove or other tenant-screening / consumer-reporting providers
• Persona (identity verification, where applicable)
• Twilio (SMS)
• Resend (email)
• Google Maps Platform
• Rewards and gift card providers

These providers may independently collect and process information subject to their own privacy policies.

Talvi uses Plaid Inc. (“Plaid”) to provide identity verification, anti-fraud, sanctions and anti-money-laundering screening (Plaid Monitor), and income or asset verification. We plan to expand our use of Plaid's income-verification services over time.

For these services, you (or, where applicable, your property manager acting on your enrollment) direct the processing, and Plaid acts as Talvi's service provider, processor, or subprocessor. Where a property manager or other business customer determines how this data is used, that customer is the controller and its privacy policy governs; Talvi and Plaid act on its instructions.

The data processed for these purposes may include:

• name, date of birth, address, phone number, government-issued identification documents and images, and photos/videos (e.g., selfies) and liveness data;
• device, network, and behavioral fraud signals;
• sanctions, watchlist, and PEP screening results, including OFAC results; and
• financial-account, balance, transaction, asset, and income data, where you use income or asset verification.

Consent & provider privacy terms. Before you use these features, the notices and consents required by law are provided and obtained so Plaid may process your data in accordance with Plaid's end-user privacy policy (plaid.com/legal) and, for identity verification, the IDV privacy statement (plaid.com/legal/#idv-privacy-statement).

How this data is handled. This data is not sold. It is used only to provide the verification, fraud, screening, and income services and for limited fraud-prevention and service-improvement purposes permitted under applicable law. Financial-account data is accessed only through your financial institution's authorized interfaces (no credential screen-scraping). You may request deletion of your data, and it will be deleted except where retention is required by law.

Legal framing. Use of these services is limited to purposes permitted under Section 6802(e) of the Gramm-Leach-Bliley Act (GLBA). Plaid is neither a “consumer reporting agency” nor a “furnisher” under the FCRA, and the identity-verification and Plaid-provided data are not “consumer reports” under the FCRA and are not used as such. Plaid maintains an information-security program and SOC 2 controls for these services.

A. Property Managers & Building Operators

Resident and applicant information may be shared with authorized property managers, landlords, building owners, and authorized personnel associated with a property.

B. Residents

Certain information may be visible to other residents where functionality requires it, such as roommate payment splitting or shared lease management.

C. Service Providers

We may share information with vendors and service providers necessary to operate the platform, including payment processors, identity verification, fraud, and sanctions-screening providers (such as Plaid), and, where you link a financial account or verify income, your financial institution and Plaid, solely to provide the requested service.

D. Legal Requirements

We may disclose information when required by law or to protect the rights, safety, and security of Talvi, our users, or others.

E. Business Transfers

Information may be transferred in connection with mergers, acquisitions, financing events, or asset sales.

F. Referring Partners

If a property-management organization signs up for Talvi through a partner's referral link, we show that partner the organization's name, whether its subscription has become active, and the commission amounts earned from the referral (which reflect a share of the organization's subscription payments). No resident data, payment methods, or other account contents are shared with referring partners. See Section 14.

Talvi maintains a defined data retention policy and enforces it automatically. We retain information for as long as necessary to:

• Provide services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
• Maintain operational records

Retention periods vary by data type. Transient and low-value data is purged on a short schedule — for example, expired invitations and their contact details after 30 days, delivered notifications after 180 days, and cached technical data within 90 days. Financial records, leasing and screening records, and security audit logs are retained for longer periods as required by tax, fair-housing, consumer-reporting, and compliance obligations.

Deletion of data past its retention period runs automatically on a recurring schedule, and the policy is reviewed at least annually.

Talvi uses reasonable administrative, technical, and organizational safeguards designed to protect information.

These measures may include:

• Encryption
• Access controls
• Secure infrastructure
• Audit logging
• Authentication protections
• Monitoring systems

However, no method of transmission or storage is completely secure.

Depending on your jurisdiction, you may have rights to:

• Access your information
• Correct inaccurate information
• Delete certain information
• Restrict processing
• Export certain data
• Opt out of certain communications

Requests may be submitted through Talvi support.

Talvi may use cookies, analytics tools, and related technologies to:

• Authenticate sessions
• Improve user experience
• Analyze platform performance
• Measure engagement
• Remember preferences
• Attribute partner referrals (see Section 14)

When you open a partner referral link, we store the partner's referral code in a cookie for up to 90 days so that a property-management organization created on Talvi within that window can be attributed to the referring partner. This cookie contains only the referral code — no personal information — and is removed once used.

Users may control cookies through browser settings.

Talvi is not intended for use by children under 18.

We do not knowingly collect information from children.

Talvi operates primarily in the United States.

Users accessing Talvi from other jurisdictions acknowledge that information may be processed and stored in the United States.

Talvi sends operational notifications — such as rent reminders, payment receipts, maintenance updates, announcements, and security alerts — by email, in-app notification, and text message (SMS). Text messages are delivered through Twilio and email through Resend; to send them we share your phone number or email address and the message contents with those providers, who process that information under their own privacy policies.

We send these communications only with your consent. Residents control notifications per category in their notification settings, and text messages are sent only for the SMS categories you have enabled. For property-management organizations, notification and SMS consent is managed at the organization level by an authorized administrator.

You can opt out at any time by disabling the relevant category in your settings, or, for text messages, by replying STOP to any message. We retain your notification preferences so we can honor them. See the Terms of Service for the full text-messaging terms.

Talvi offers a partner (affiliate) program in which participants share a personal referral link and earn a share of the subscription payments made by property-management organizations they refer. This section explains the data practices specific to that program.

A. Information We Collect from Partners

• Display name and contact email
• Your referral code and referral link activity
• Referral records (which organizations signed up through your link and their conversion status)
• Commission accruals, adjustments, and payout records

B. Payouts, Identity & Tax Information

Partner payouts are made through Stripe. To receive payouts, you complete Stripe's onboarding, in which Stripe — not Talvi — collects your identity, date of birth, tax identification, and bank account details under Stripe's own privacy policy. Talvi stores only your Stripe account identifier, payout readiness status, and payout amounts and statuses. Tax documentation and reporting related to payouts (such as IRS Form 1099 filings, where required) are handled through Stripe.

C. Referral Attribution

Opening a partner's referral link stores that partner's referral code in a cookie for up to 90 days (see Section 10). If a property-management organization is created on Talvi during that window, the referral is attributed to that partner on a first-link basis. Self-referrals are not eligible.

D. What Partners Can See

A partner can see the name of each organization that signed up through their link, whether the referral has converted to a paying subscription, and the commission amounts earned. Partners never see resident or applicant data, payment methods, invoices, or any other contents of a referred organization's account.

E. Retention

Commission and payout records are financial records and are retained in accordance with Section 07, including for tax and accounting compliance, after a partner leaves the program.

Talvi may update this Privacy Policy periodically.

Updated versions will be posted with revised effective dates.

Continued use of Talvi constitutes acceptance of the updated Privacy Policy.

For privacy-related inquiries, contact:

Talvi — support@trytalvi.com · https://www.trytalvi.com