Privacy Policy

1. Introduction

WhereTo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our relocation assistance platform. This policy applies to residents of all U.S. states and addresses requirements under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), Nevada SB220, and other applicable privacy laws.

2. Information We Collect

We collect personal information in the following categories as defined by applicable privacy laws:

A. Identifiers

• Name (first and last)
• Email address
• Phone number
• IP address
• Account credentials (password stored in hashed form)
• Unique device identifiers

B. Commercial Information

• Housing preferences (rent vs. buy, number of bedrooms)
• Budget information (purchase price range, monthly rent range)
• Moving timeline
• Current housing situation (own or rent)
• Purchase history and transaction data

C. Geolocation Data

• Current location (city, ZIP code)
• Target/desired locations for relocation
• Approximate location derived from IP address

D. Internet or Network Activity

• Pages visited and features used
• Search queries and results viewed
• Referring website or source
• Browser type and operating system
• Time spent on pages
• Click patterns and interactions

E. Inferences

• Location alignment scores based on your preferences
• Predicted intent (e.g., likelihood to move, buying readiness)

3. How We Use Your Information

We use your information to:

• Provide and improve our services
• Personalize your search results and recommendations
• Process payments and fulfill orders
• Connect you with real estate professionals (with your consent)
• Send service-related communications
• Analyze usage patterns to improve our platform
• Prevent fraud and ensure security
• Comply with legal obligations

4. Sale and Sharing of Personal Information

We do not currently sell your personal information. All location dossiers are available for purchase, and we do not share your information with third-party lead networks or real estate professionals in exchange for monetary compensation.

Future Data Sharing: In the future, we may offer the option to receive free or discounted services in exchange for sharing your information with real estate professionals and moving companies. If we implement such a program, it will be entirely opt-in and clearly disclosed at the time of consent. You will always have the option to pay for services without sharing data.

Your Privacy Rights: You have the right to opt out of any future sale or sharing of your personal information. Visit our Privacy Choices page or contact us at privacy@whereto.live.

5. Data Retention

We retain your personal information for specific periods based on the type of data and purpose:

• Account information: Retained while your account is active, plus 3 years after account closure
• Lead data: Retained for 7 years for legal and compliance purposes
• Search and usage data: Retained for 2 years, then anonymized
• Payment records: Retained for 7 years as required by tax law
• Privacy request records: Retained for 24 months as required by CCPA/CPRA

You may request deletion of your data at any time (see Your Rights section below), subject to legal retention requirements.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications and data sharing
• Do Not Sell: Request that we not sell your personal information

To exercise these rights, contact us at privacy@whereto.live.

8. State Privacy Rights

California (CCPA/CPRA)

California residents have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information
• Right to Limit Use: Limit the use of sensitive personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

Authorized Agents: You may designate an authorized agent to make requests on your behalf. Authorized agents must provide written authorization and verify their identity.

Global Privacy Control (GPC): We honor Global Privacy Control signals. When we detect a GPC signal from your browser, we automatically treat it as a request to opt out of the sale or sharing of your personal information.

Financial Incentive Disclosure: We do not currently operate a financial incentive program that involves the sale or sharing of personal information. All services are available for direct purchase. If we implement such a program in the future, we will update this disclosure accordingly and obtain your explicit consent before any data sharing.

Virginia, Colorado, Connecticut, Utah

Residents of Virginia, Colorado, Connecticut, and Utah have similar rights including the right to access, correct, delete, and opt out of targeted advertising and the sale of personal data.

Nevada

Nevada residents may opt out of the sale of certain personal information by contacting us at privacy@whereto.live.

Visit our Privacy Choices page to exercise these rights or contact us at privacy@whereto.live. We will respond to verified requests within 45 days, with a possible 45-day extension if needed.

9. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

Essential Cookies

• Authentication: Session cookies to keep you logged in (expire on browser close or after 7 days)
• Security: CSRF tokens and security cookies (session-based)
• Preferences: Remember your privacy consent choices (1 year)

Analytics Cookies

• Usage tracking: Anonymous analytics to improve our service (2 years)
• Performance: Monitor site performance and errors (session-based)

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies may affect the functionality of our Service. Analytics cookies can be disabled without affecting core functionality.

11. Third-Party Services

We use third-party services for analytics, payment processing, and other functions. These services have their own privacy policies. Key third parties include:

• Supabase - Database and authentication
• Mapbox - Maps and location services
• Stripe - Payment processing
• Anthropic - AI services for search and recommendations
• Foursquare - Points of interest and amenities data

We may also share your information with real estate lead networks and licensed real estate professionals when you opt in to receive assistance. See Section 4 for details.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: