Skip to content
SubletBuff

Privacy Policy

Last updated: March 5, 2026

SubletBuff (“we,” “us,” or “our”) operates subletbuff.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Site.

1. Information We Collect

Information you provide

  • Account data: Name, email address, and password when you create an account.
  • Profile data: Verification documents (lease documents, .edu email) if you opt in to verification.
  • Listing data: Property details, photos, descriptions, pricing, and availability dates.
  • Communications: Messages sent through the inquiry system.

Information collected automatically

  • Usage data: Pages visited, search queries, timestamps, and referring URLs.
  • Device data: Browser type, operating system, screen resolution, and IP address.
  • Cookies: We use essential cookies for authentication and session management. See Section 6 for details.

Information from third parties

  • Google OAuth: If you sign in with Google, we receive your name, email, and profile picture from Google.
  • Analytics: We may use third-party analytics services that collect aggregated usage data.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Site.
  • Create and manage your account.
  • Display your listings to other users.
  • Facilitate communication between listers and renters.
  • Review listings for quality and policy compliance.
  • Send transactional emails (account confirmation, password resets, inquiry notifications).
  • Detect, prevent, and address fraud, abuse, and security issues.
  • Comply with legal obligations.

We do not sell your personal information. We do not use your data for targeted advertising.

3. How We Share Your Information

We may share your information in the following circumstances:

  • With other users: Your listing details, display name, and verification status are visible to other users. Your email address is not shared publicly.
  • Service providers: We use Supabase (database and authentication), Vercel (hosting), and Google (OAuth). These providers process data on our behalf under their respective privacy policies.
  • Legal requirements: We may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of SubletBuff, our users, or the public.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.

4. Data Storage and Security

Your data is stored on servers provided by Supabase (hosted on AWS in the United States). We use industry-standard security measures including encrypted connections (TLS/SSL), row-level security policies, and secure authentication tokens. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account data for as long as your account is active. Listing data for expired or deleted listings may be retained for up to 12 months for dispute resolution purposes. You may request deletion of your data at any time (see Section 7).

6. Cookies

We use the following types of cookies:

  • Essential cookies: Required for authentication and session management. These cannot be disabled.
  • Functional cookies: Remember your preferences (e.g., search filters). These are optional.

We do not use advertising or tracking cookies. Most browsers allow you to control cookies through their settings.

7. Your Rights

Depending on your location, you may have the following rights under applicable privacy laws, including the California Consumer Privacy Act (CCPA) and the Colorado Privacy Act (CPA):

  • Right to know: Request what personal information we have collected about you.
  • Right to access: Obtain a copy of your personal information.
  • Right to delete: Request deletion of your personal information.
  • Right to correct: Request correction of inaccurate personal information.
  • Right to opt out: Opt out of the sale of personal information (we do not sell your data).
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at subletbuff@gmail.com. We will respond within 45 days as required by law.

8. Children's Privacy

SubletBuff is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the “Last updated” date at the top of this page. Continued use of the Site after changes constitutes acceptance of the revised policy.

10. Contact

Questions or concerns about this Privacy Policy? Contact us at subletbuff@gmail.com.