Privacy Policy

1. Who We Are and About This Policy

SecuredStays LLC ("SecuredStays," "we," "us," or "our") operates a verified housing marketplace that connects travel healthcare professionals ("Travelers") with property owners ("Owners"). SecuredStays LLC is a Florida limited liability company and is wholly owned by Grimaxca Enterprises LLC, a Wyoming limited liability company.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, and the rights and choices available to you. It applies to the SecuredStays website, applications, and related services (the "Platform"). It does not govern the independent privacy practices of the third-party providers described in Section 4, each of which maintains its own privacy policy.

Some activity on the Platform involves "consumer reports" as defined by the federal Fair Credit Reporting Act (the "FCRA"). Section 5 explains how the FCRA applies to Travelers and to Owners, and the rights that come with it.

2. Information We Collect and Why

We collect the categories of information set out below. We collect only what we need for the purposes described.

Information we do not collect:

• The contents of a Traveler's Portable Tenant Screening Report. The report is produced and held by Portable Tenant. We receive only the authenticated link and the screening status.
• Raw financial account or card data. Payment details are tokenized by Stripe. We do not store raw card numbers.
• Security deposit and escrow funds. Funds are held by the Escrow Provider at lease signing. We do not hold, control, or disburse these funds.

3. How We Use Information

We use the information we collect for the following purposes:

• To operate and administer the Platform, including creating and maintaining your account
• To verify identity and, for Travelers, professional licensure
• To facilitate connections, placements, and lease execution between Travelers and Owners
• To process membership fees and placement success fees
• To conduct and administer owner criminal background screening and to meet our obligations as a user of consumer reports under the FCRA
• To support on-platform messaging and to maintain the integrity and safety of the Platform
• To communicate with you about your account, transactions, and service-related matters
• To secure, troubleshoot, and improve the Platform
• To comply with legal obligations and to establish, exercise, or defend legal claims

We do not use your information for advertising, profiling for marketing purposes, or any purpose not listed above.

4. Third-Party Providers and What They Receive

SecuredStays shares personal information with third-party service providers only when necessary to operate the Platform. We do not sell your personal information. Each provider acts under contract, processes information only for the purposes described, and maintains its own privacy practices.

We may also disclose information when required by law, in response to lawful requests by public authorities, to protect the rights and safety of Members and the public, or in connection with a corporate transaction such as a merger or acquisition.

5. Consumer Reports and Your Rights Under the FCRA

Two different arrangements apply, depending on whether you are a Traveler or an Owner.

5.1 Travelers — Your Screening Report

As a Traveler, you obtain a Portable Tenant Screening Report directly from Portable Tenant, which is a consumer reporting agency. You are the subject of that report. SecuredStays is not a party to the consumer reporting relationship for your screening report and does not receive or store its contents. We receive only an authenticated link to the report and your screening status.

Because the designated Screening Provider is the consumer reporting agency that produces your report:

• You have the right to obtain a copy of your report from the designated Screening Provider
• You have the right to dispute the accuracy or completeness of information in your report directly with the designated Screening Provider
• The designated Screening Provider is responsible for investigating disputes and correcting inaccurate information under the FCRA

You control whether to share your report link with an Owner. SecuredStays facilitates that sharing at your direction and does not make the report available to Owners on its own.

5.2 Owners — Criminal Background Screening

As an Owner, you authorize a criminal background check that is performed by the designated Owner CRA, a consumer reporting agency. You are the subject of that consumer report, and SecuredStays is the user of the report under the FCRA. As the user, SecuredStays is responsible for handling, retaining, and disposing of the report in accordance with the FCRA.

Your rights as the subject of this report include the following:

• We obtain your written authorization before requesting the report
• If we are considering adverse action based in whole or in part on the report, we first provide a pre-adverse action notice. That notice includes a copy of the consumer report and a copy of "A Summary of Your Rights Under the Fair Credit Reporting Act."
• We allow a minimum of seven business days before taking final adverse action, so that you have an opportunity to review the report and respond
• If we proceed with adverse action, we provide an adverse action notice. The notice identifies the consumer reporting agency, states that the agency did not make the decision and cannot explain the reasons for it, and describes your right to obtain a free copy of the report and to dispute its accuracy with the agency
• You may dispute the accuracy or completeness of information in your report directly with the designated Owner CRA, which is responsible for investigating and correcting inaccurate information under the FCRA

If you dispute information in your report, the screening decision process for your account pauses until the dispute is resolved by the consumer reporting agency.

6. Data Retention

We keep personal information for as long as needed for the purposes described in this Policy and as required by law.

• Owner screening authorizations. We retain owner background check authorizations for a minimum of five years, consistent with FCRA recordkeeping requirements.
• Adverse action audit records. We maintain immutable audit records of screening decisions and notices for a minimum of five years, consistent with the FCRA recordkeeping requirements applicable to consumer report users.
• Owner consumer report data. We retain owner consumer report data only as long as needed for the permissible purpose for which it was obtained and to meet our legal obligations, after which it is securely disposed of as described in Section 7.
• Traveler screening status and report link. PTSRs are valid for 30 days from issuance. We retain the screening status and authenticated report link for the duration of the report's validity period. Upon expiry, the link is purged from active systems. Expired status records are retained for three years for audit and dispute purposes.
• Account and profile data. We retain account information while your account is active and for three years following account closure, after which it is securely deleted, subject to any legal hold requirements.
• Messaging content. We retain on-platform message content for three years from the date the message was sent, to cover the statute of limitations for contract and fair housing disputes.
• Payment records. We retain transaction records for seven years from the date of the transaction, consistent with standard tax and accounting requirements.
• Usage and device data. We retain server logs and usage data for 90 days, after which they are automatically purged.

7. Secure Disposal of Consumer Report Data

When consumer report data is no longer needed for a permissible purpose, or is no longer required to be retained, we dispose of it securely. Our disposal practices are designed to meet the FCRA Disposal Rule, which requires reasonable measures to protect against unauthorized access to or use of consumer report information in connection with its disposal. Electronic records are deleted or rendered unreadable, and any physical records are destroyed.

8. Your Privacy Rights: Access, Correction, and Deletion

You may request to access the personal information we hold about you, correct inaccurate personal information, or request deletion of your personal information. To make a request, contact us at admin@securedstays.com. We will respond within 30 days of receiving your request.

Some information is subject to legal retention requirements and cannot be deleted on request. For example, owner screening authorizations and adverse action audit records are retained for the periods described in Section 6. To dispute the accuracy of a consumer report, please contact the relevant consumer reporting agency, as described in Section 5.

Regardless of your state of residence, SecuredStays recognizes the following rights for all Members:

• Right to Access — you may request a copy of the personal information we hold about you
• Right to Correction — you may request that we correct inaccurate personal information
• Right to Deletion — you may request that we delete your personal information, subject to legal retention requirements described in Section 6
• Right to Portability — you may request that we provide your personal information in a portable, machine-readable format where technically feasible

Residents of states with enacted consumer privacy legislation (including but not limited to California, Texas, Virginia, Colorado, and Connecticut) may have additional rights under those laws, including the right to opt out of certain data sharing practices and the right to appeal a denied privacy request. To exercise any of the rights described above, contact us at admin@securedstays.com.

9. Cookies and Tracking

We use cookies and similar technologies to operate the Platform, keep you signed in, remember your preferences, secure the service, and understand how the Platform is used. You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.

10. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. These measures include encryption of data in transit, access controls, tokenization of payment data, and segregation of consumer report data. No system is completely secure, and we do not represent that the Platform is free from all risk.

11. Children's Privacy

The Platform is intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age. If we learn that we have collected personal information from a person under 18, we will delete it. If you believe a minor has provided us with information, contact us at admin@securedstays.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and provide notice through the Platform or by email. Your continued use of the Platform after the effective date of an updated Policy indicates your acceptance of the changes.

13. Contact Us

If you have questions about this Privacy Policy or about how we handle your information, contact us:

This Privacy Policy is governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of law principles, consistent with the SecuredStays Terms of Service.