Introduction
This Privacy Policy ("Policy") describes how SIDAN Corp, a Delaware corporation operating in Austin, Texas ("SIDAN Corp," "we," "us," or "our"), collects, uses, discloses, and protects personal information through the Settl platform, including the Settl operations portal ("Portal") and the Settl customer-facing mobile application ("App") (collectively, the "Platform").
Settl is a business-to-business ("B2B") platform. We provide the Platform to moving companies ("Business Customers"), who in turn offer the App to their end customers ("End Users"). This Policy applies to all users of the Platform, including Business Customers, their authorized staff, and End Users.
By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, please do not use the Platform.
1. Information We Collect
1.1 Information You Provide Directly
- Account Registration: When you create an account, we collect your name, email address, phone number, company name (for Business Customers), and password credentials managed through our authentication provider.
- Business Profile Information: Business Customers may provide company details, staff information, service offerings, scheduling preferences, and operational data.
- Booking and Service Data: Information related to move bookings, including addresses, dates, service details, customer notes, and crew assignments.
- Communications: Messages sent through the Platform's in-app communication features between Business Customers and End Users.
- Photos and Media: Images uploaded through the Visual Move Planner feature for the purpose of furniture placement visualization and move planning.
- Feedback and Surveys: Responses to post-move surveys, ratings, and reviews submitted through the Platform.
1.2 Information Collected Automatically
- Location Data: With your consent, we collect real-time geolocation data during active moves only, for the purpose of providing move tracking functionality. Location data is not collected when a move is not actively in progress.
- Device and Usage Information: We collect information about the device you use to access the Platform, including device type, operating system, browser type, IP address, and general usage patterns such as pages visited and features used.
- Cookies and Similar Technologies: We may use cookies, web beacons, and similar tracking technologies to operate the Platform, analyze usage trends, and improve user experience. You can manage cookie preferences through your browser settings.
1.3 Information from Third Parties
We may receive limited information from our third-party service providers as necessary to operate the Platform, such as payment confirmation status from our payment processor.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Platform Operations: To provide, maintain, and operate the Settl Platform, including scheduling, booking management, crew coordination, and real-time move tracking.
- Payment Processing: To facilitate payment transactions between Business Customers and End Users through our third-party payment processor.
- Communications: To send service-related notifications, booking confirmations, status updates, and support communications via email or in-app messaging.
- Visual Move Planner: To process uploaded photos and media for interactive furniture placement, space visualization, and move planning.
- Platform Improvement: To analyze usage patterns, diagnose technical issues, and improve functionality, including development of AI/ML models using de-identified or aggregated data.
- Safety and Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
3. Data Sharing Between Business Customers and End Users
As a dual-sided platform, certain information is shared between Business Customers and their End Users to facilitate the moving services:
- Business Customers can access: End User name, email address, phone number, booking details, move addresses, communications sent through the Platform, feedback and survey responses, and payment status.
- End Users can access: Business Customer company name, assigned crew information, scheduling details, real-time move status, and pricing information.
This data sharing is essential to the operation of the Platform and the delivery of moving services. By using the Platform, you consent to this exchange of information as described above.
4. Third-Party Service Providers
We engage a limited number of third-party service providers to help operate the Platform. These providers only receive the minimum information necessary to perform their specific function and are contractually obligated to protect your data:
- Payment Processing: We use Stripe, Inc. to process payments. Payment card details are collected and handled directly by Stripe and are never stored on our servers. Stripe's use of your data is governed by the Stripe Privacy Policy.
- Authentication: We use AWS Cognito to manage user authentication. No credentials are stored locally on our systems.
- Email Communications: We use Resend to deliver transactional emails such as booking confirmations and account notifications.
- Cloud Infrastructure: The Platform is hosted on Amazon Web Services (AWS). All data is stored and processed within the United States.
- Analytics: We may use third-party analytics services to understand how users interact with the Platform. We will update this Policy with specific provider details as they are implemented.
We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.
5. Data Retention
We retain your personal information for as long as your account is active and as necessary to fulfill the purposes described in this Policy:
- Account Data: Retained for the duration of your active account and for a compliance period of up to seven (7) years following account closure or deletion.
- Booking and Transaction Records: Retained for up to seven (7) years after the transaction date for financial record-keeping and compliance purposes.
- Photos and Media: Uploaded images may be archived and used for improving Platform features, including AI/ML model development. Images used for AI/ML training will be de-identified where feasible. You may request deletion at any time (see Section 7).
- Location Data: Real-time location data is retained only for the duration necessary to provide tracking and is not stored beyond the completion of the move, except in aggregated, de-identified form.
When personal information is no longer required, we will securely delete or de-identify it in accordance with our internal data management procedures.
6. Data Security
We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information. These measures include:
- Encryption of data in transit using TLS/SSL protocols.
- Encryption of data at rest within our cloud infrastructure.
- Delegated authentication through AWS Cognito, ensuring credentials are never stored on our application servers.
- Role-based access controls limiting internal access to personal information on a need-to-know basis.
- Regular review of security practices and infrastructure.
While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Platform at your own risk.
7. Your Rights and Choices
7.1 All Users
Regardless of your location, you may:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information, subject to our legal retention obligations described in Section 5.
- Location Opt-Out: Disable location services for the App through your device settings at any time.
- Communication Preferences: Opt out of non-essential communications by following the unsubscribe instructions in our emails.
7.2 State Privacy Rights
The Platform is operated from Austin, Texas by SIDAN Corp, a Delaware corporation. Users in various states may have additional privacy rights under their respective state laws. We are committed to honoring applicable state privacy requirements.
7.3 California Residents — Your CCPA Rights
If you are a California resident, the California Consumer Privacy Act ("CCPA") provides you with the following additional rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of your personal information, subject to certain legal exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
- No Sale of Personal Information: We do not sell personal information as defined under the CCPA.
To exercise any of these rights, please submit a verifiable request to privacy@settlmove.com. We will respond to verified requests within forty-five (45) days.
8. Children's Privacy
The Platform is intended for use by adults only. We do not knowingly collect personal information from individuals under the age of eighteen (18). If you believe a minor has provided us with personal information, please contact us at privacy@settlmove.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Effective Date" at the top of this Policy.
- Provide notice through the Platform or via email for significant changes.
Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.