Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how SIDAN Corp, a Delaware corporation operating in Austin, Texas ("SIDAN Corp," "we," "us," or "our"), collects, uses, discloses, and protects personal information through the Settl platform, including the Settl operations portal ("Portal") and the Settl customer-facing mobile application ("App") (collectively, the "Platform").

Settl is a business-to-business ("B2B") platform. We provide the Platform to moving companies ("Business Customers"), who in turn offer the App to their end customers ("End Users"). This Policy applies to all users of the Platform, including Business Customers, their authorized staff, and End Users.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, please do not use the Platform.

1. Information We Collect

1.1 Information You Provide Directly

• Account Registration: When you create an account, we collect your name, email address, phone number, company name (for Business Customers), and password credentials managed through our authentication provider.
• Business Profile Information: Business Customers may provide company details, staff information, service offerings, scheduling preferences, and operational data.
• Job and Service Data: Information related to move jobs, including addresses, dates, service details, customer notes, and crew assignments.
• Communications: Messages sent through the Platform's in-app communication features between Business Customers and End Users.
• Photos and Media: Photos or other media may be collected only in product areas where uploading that content is explicitly offered to the user.
• Feedback and Surveys: Responses to post-move surveys, ratings, and reviews submitted through the Platform.

1.2 Information Collected Automatically

• Location-Related Data: We may process location-related information tied to a move, crew progress, or service addresses in order to provide tracking and coordination features. The current customer mobile app does not collect the customer's device GPS location unless that behavior is explicitly presented in-app and the user grants permission.
• Device and Usage Information: We collect information about the device you use to access the Platform, including device type, operating system, browser type, IP address, and general usage patterns such as pages visited, links clicked, form submission events, scrolling, heatmap interactions, session replay data, and features used.
• Browser Storage and Similar Technologies: We use browser-based storage technologies, including local storage, session storage, and similar mechanisms, to keep users signed in, remember preferences, support security, attribute visits across the marketing website and Portal, and operate core Platform functionality. We do not currently use advertising cookies on the marketing website.

1.3 Information from Third Parties

We may receive limited information from our third-party service providers as necessary to operate the Platform, such as payment confirmation status from our payment processor.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Platform Operations: To provide, maintain, and operate the Settl Platform, including scheduling, job management, crew coordination, and real-time move tracking.
• Payment Processing: To facilitate payment transactions between Business Customers and End Users through our third-party payment processor.
• Communications: To send service-related notifications, job confirmations, status updates, and support communications via email or in-app messaging.
• Photos and Media Features: To process uploaded photos or media only for features where that functionality is explicitly made available.
• Platform Improvement and Measurement: To analyze usage patterns, understand which pages and calls to action are performing, review heatmaps and session recordings, diagnose technical issues, and improve functionality, including development of AI/ML models using de-identified or aggregated data.
• Safety and Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Data Sharing Between Business Customers and End Users

As a dual-sided platform, certain information is shared between Business Customers and their End Users to facilitate the moving services:

• Business Customers can access: End User name, email address, phone number, job details, move addresses, communications sent through the Platform, feedback and survey responses, and payment status.
• End Users can access: Business Customer company name, assigned crew information, scheduling details, real-time move status, and pricing information.

This data sharing is essential to the operation of the Platform and the delivery of moving services. By using the Platform, you consent to this exchange of information as described above.

4. Third-Party Service Providers

We engage a limited number of third-party service providers to help operate the Platform. These providers only receive the minimum information necessary to perform their specific function and are contractually obligated to protect your data and to use it solely to provide services to us. They fall into the following categories:

• Payment Processing: Payment card details are collected and handled directly by our payment providers and are never stored on our servers.
• Authentication: We use a dedicated authentication provider to manage sign-in and account credentials. Credentials are not stored on our application servers.
• Communications: We use communications providers to deliver service-related messages such as job confirmations and account notifications by email, SMS, and push notification.
• Cloud Infrastructure: The Platform is hosted with a major cloud infrastructure provider. All data is stored and processed within the United States.
• Product and Behavior Measurement: We use product analytics and behavior analytics providers on applicable web properties to understand visits, calls to action, heatmaps, and session recordings. We do not use these tools for advertising or retargeting.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

5. Data Retention

We retain your personal information for as long as your account is active and as necessary to fulfill the purposes described in this Policy:

• Account Data: Retained for the duration of your active account and for a compliance period of up to seven (7) years following account closure or deletion.
• Job and Transaction Records: Retained for up to seven (7) years after the transaction date for financial record-keeping and compliance purposes.
• Photos and Media: Uploaded photos or media, where offered, may be retained only as necessary to provide the applicable feature, support the service, satisfy legal obligations, or improve the Platform in de-identified or aggregated form where appropriate.
• Location-Related Data: Location-related data used for move tracking or coordination is retained only for as long as necessary to operate the service, satisfy legal obligations, or maintain de-identified or aggregated records where appropriate.

When personal information is no longer required, we will securely delete or de-identify it in accordance with our internal data management procedures.

6. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of data at rest within our cloud infrastructure.
• Delegated authentication through a dedicated authentication provider, ensuring credentials are never stored on our application servers.
• Role-based access controls limiting internal access to personal information on a need-to-know basis.
• Regular review of security practices and infrastructure.

While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Platform at your own risk.

7. Your Rights and Choices

7.1 All Users

Regardless of your location, you may:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to our legal retention obligations described in Section 5.
• Location Opt-Out: Disable location services for the App through your device settings at any time.
• Communication Preferences: Opt out of non-essential communications by following the unsubscribe instructions in our emails.

7.2 State Privacy Rights

The Platform is operated from Austin, Texas by SIDAN Corp, a Delaware corporation. Depending on your state of residence, you may have additional privacy rights under applicable state law, including the right to access, correct, and delete your personal information and to opt out of targeted advertising or the sale of personal information. We do not engage in targeted advertising and we do not sell personal information. We are committed to honoring applicable state privacy requirements; to exercise any state privacy right, contact us at privacy@settlmove.com.

7.3 California Residents: Your CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with the following additional rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Delete: Request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, so no opt-out is currently required. If this ever changes, we will provide a clear "Do Not Sell or Share My Personal Information" mechanism.
• Right to Limit Use of Sensitive Personal Information: To the extent we process sensitive personal information (such as precise geolocation tied to a move or crew progress), we use it only as necessary to provide the Platform's tracking and coordination features, and not to infer characteristics about you.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please submit a verifiable request to privacy@settlmove.com. We will verify your request by matching the information you provide against the information associated with your account, and we will respond to verified requests within forty-five (45) days. You may use an authorized agent to submit a request on your behalf with your written permission.

8. Children's Privacy

The Platform is intended for use by adults only. We do not knowingly collect personal information from individuals under the age of eighteen (18). If you believe a minor has provided us with personal information, please contact us at privacy@settlmove.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective Date" at the top of this Policy.
• Provide notice through the Platform or via email for significant changes.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: