Flatz Living Privacy Policy

This Privacy Policy (the “Privacy Policy” or “Policy”) of Flatz Living (“Company,” “we,” “us,” or “our”) describes our privacy practices regarding personal information we collect, including from persons (“you” or “your”) who access our websites, property websites, resident portals (including RENTCafé or similar third-party platforms), or related mobile applications that may be available for download (collectively, the “Site”).

PURPOSE

The purpose of this Privacy Policy is to inform you about the types of personal information we collect about you, including information gathered when you visit or interact with the Site, apply for housing, lease an apartment, communicate with us, or use resident services. This Policy also explains how we use that information, whether we disclose it, and the choices you have regarding our use of, and your ability to access or correct, the information.

This Policy does not cover information that is exempt from privacy notice requirements, including information about employees, contractors, job applicants, or information processed solely in a business-to-business context.

CHILDREN’S INFORMATION

THE SITE IS NOT INTENDED FOR CHILDREN. Flatz Living does not knowingly solicit or collect personal information from children under the age of 13 through the Site. If we learn that a child under the age of 13 has submitted personal information to us, we will take reasonable steps to delete such information from our records and not use it for any purpose, except as required by law or to protect safety.

YOUR CONSENT AND POLICY CHANGES

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY USING THE SITE, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF INFORMATION AS DESCRIBED IN THIS POLICY. IF YOU DO NOT AGREE, YOU SHOULD NOT USE THE SITE.

We may update this Privacy Policy from time to time. Any changes will be posted on our website and the “Updated” date below will be revised. In some cases, we may also notify you by email or by a notice on the Site.

PERSONAL INFORMATION COLLECTED IN THE PAST 12 MONTHS

We collect, process, and store various types of Personal Information, which means information that identifies, relates to, describes, or could reasonably be linked to a particular individual or household. This does not include de-identified, aggregated, or publicly available information.

Types of Personal Information We May Collect

Personal Information may include, but is not limited to:

• Name, email address, mailing address, and postal code

• Telephone number and communication preferences

• Internet Protocol (IP) address and device information

• Date of birth, age, and demographic information

• Social Security number or government-issued identification

• Driver’s license number

• Employment information, income, and rental history

• Credit, banking, and payment information

• Username and password for resident portals

• Emergency contact information

• Pet and vehicle information (including license plate numbers)

• Biometric information (if used for self-guided tours or identity verification)

• Application, leasing, and residency-related information

• Usage data related to your interaction with the Site

We retain Personal Information for as long as necessary to provide services, comply with legal obligations, resolve disputes, or enforce agreements. Retention periods may be extended as required by law or legal proceedings.

We do not sell your Personal Information.

HOW WE COLLECT AND SHARE PERSONAL INFORMATION

We may collect Personal Information directly from you, automatically through your use of the Site, or from third parties such as screening providers, service vendors, marketing partners, or government agencies, as permitted by law.

We may share Personal Information with third parties:

• To comply with legal obligations or lawful requests

• To prevent fraud, security threats, or technical issues

• To respond to emergencies

• With service providers who perform services on our behalf

• In connection with a business transfer, sale, or merger

Biometric information, if collected, may be shared with technology providers solely for identity verification purposes.

PERSONAL INFORMATION WE WILL CONTINUE TO COLLECT

We expect to continue collecting the categories of Personal Information described above for the same business and operational purposes.

COOKIES AND OTHER TECHNOLOGIES

Flatz Living may use cookies, pixels, and similar technologies to personalize content, analyze traffic, and improve the Site. Cookies are small data files stored on your device.

We may use:

• Lead attribution and marketing attribution tools

• Google Analytics or similar analytics platforms

Google Analytics uses cookies to collect information about Site usage. Google’s privacy policy is available at:

https://www.google.com/policies/privacy/

You may manage or disable cookies through your browser settings; however, doing so may limit Site functionality.

EMAIL AND TEXT COMMUNICATIONS

You may receive emails or text messages from us regarding applications, leasing, residency, or marketing. You may manage certain communication preferences through your account settings or by following unsubscribe instructions. Transactional or legally required communications may still be sent.

THIRD-PARTY WEBSITES

This Privacy Policy applies only to information collected by Flatz Living. We are not responsible for the privacy practices of third-party websites linked from the Site.

ACCESSING AND UPDATING YOUR INFORMATION

You may review and update certain Personal Information by logging into your resident or applicant account. You may also contact us for assistance. We may need to verify your identity before fulfilling requests. If we cannot fulfill a request, we will provide an explanation where required by law.

PERSONAL INFORMATION OF MINORS

Our Sites are not directed to minors under 16. Personal Information of minors may be collected from parents or guardians solely in connection with leasing or residency services. We do not sell minors’ Personal Information.

CALIFORNIA RESIDENTS’ RIGHTS

If applicable, California residents may have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to request disclosure or deletion of Personal Information, subject to legal exceptions.

Requests may include:

• Categories and specific pieces of Personal Information collected

• Sources of information

• Business purposes for collection or disclosure

• Categories of third parties with whom information is shared

Requests apply to the 12-month period preceding the request.

DO NOT TRACK

We do not respond to “Do Not Track” browser signals.

ACCESSIBILITY

We are committed to providing accessible communications. To request accommodations or report accessibility issues, please contact us using the information below.

CONTACTING US

If you have questions about this Privacy Policy or our data practices, please contact your property management office or use the Contact Us form on the applicable property website.

CANADA

Where applicable, this Policy is intended to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). Oversight is provided by the Office of the Privacy Commissioner of Canada.

Updated: January 29, 2026