Effective Date: September 5, 2026 Racct, Inc. (Racct, we, us) provides a marketplace for Stuff, Services, and Stays, together with messaging, pickup and delivery coordination, profiles, media, Spaces, and related features. This Policy explains personal information handled through our websites, apps, and services. Collection depends on the features you use, information you provide, permissions you grant, and the transaction. Driver-specific services may also have a separate privacy notice. This Policy describes data handling; it does not replace a consent or notice required for a particular use. 1. Information you provide Account and profile information includes your name, contact details, authentication and verification information, profile photo, biography, preferences, and account settings. Where you act for a business or share a listing, we also handle the business and co-owner information you supply. Listing and transaction information includes descriptions, prices, condition, service scope, accommodation details and amenities, availability calendars, duration discounts, selected arrival and departure dates, offers, orders, booking and completion records, payment status, refunds, and support or damage reports. Delivery and booking information can include addresses, access instructions, appointment times, and details about participants you choose to provide. Communications and content include messages, questions, reviews, public activity, support requests, photos, video, and files you upload or send. Spatial features can include room scans, layouts, geometry, textures, measurements, linked listings, and generated or stylized previews. Images, video, and scans may reveal people, possessions, location clues, and private areas. Include other people’s information only with appropriate authority, and avoid uploading identity documents, financial credentials, access codes, or intimate or unnecessary sensitive information into listing media or chat. 2. Payment information Payment and payout providers, including Stripe for supported features, process information needed to authorize charges, verify payment or payout accounts, prevent fraud, and meet their legal obligations. Racct handles associated customer and account references, payment-method labels or limited details returned by the provider, billing or payout contact information, amounts, fees, tax information when required, and transaction and dispute status. The exact information depends on the payment method and workflow. Review the provider’s notice in the payment flow; its independent data handling is governed by that notice. Do not send full card details, bank login credentials, or verification codes to other users or an agent. 3. Information collected through use and other sources We handle technical and usage information such as IP addresses, browser or app and device characteristics, session identifiers, referral information, timestamps, errors, and interactions with listings, profiles, searches, feeds, offers, and orders. Cookies, browser storage, app storage, and similar technologies support sign-in, security, remembered settings, and measurement. Clearing storage or restricting it can affect these features. Location information can come from an address or map location you enter, location embedded in content, or device location you permit the app or browser to access. Location supports nearby results and transaction coordination. Device permissions can be changed in system settings. Disabling device location does not erase addresses already supplied or information needed for an existing order. Other sources include transaction participants and co-owners, payment and authentication providers, support reports, and links or external listing information you ask us to import. Publicly available information may be used to display or enrich a listing or profile where the feature uses it. An external service’s information may be incomplete or stale; you can contact support to request a correction. 4. Why we use information We use relevant information to operate accounts and permissions; create and display listings; search and organize offers; coordinate pickup, delivery, service work, and stays; calculate and process charges and payouts; manage availability and booking dates; deliver messages and notifications; handle refunds and disputes; and provide support. Account preferences can include the listing type selected for future posts. We also use information to secure the Services, investigate misuse, moderate content, enforce transaction terms, maintain financial and action records, comply with law, diagnose failures, and measure and improve the product. Activity can inform recommendations and personalization subject to the applicable feature settings and required consent. Operational records, such as payment or fraud records, are distinct from optional personalization. Racct’s private behavior analytics collects bounded interaction events such as listing views, clicks, category interactions, and order activity. Its separate personalization setting defaults off. That event stream is designed to exclude chat content, raw search text, precise location, payment credentials, and identity documents. This restriction describes that event stream; it does not mean the underlying chat, search, location, or transaction feature does not process information necessary to provide its service. Where consent is legally required for a use, we must obtain it through the applicable notice or control. Where a law requires a legal basis, processing depends on the circumstances, such as performing the service requested, complying with a legal obligation, consent, or a legitimate operational interest balanced against your rights. 5. AI, generated media, and agents Features that analyze listing images, suggest descriptions or prices, process spatial captures, or provide automated assistance may send the relevant content and instructions to AI or processing providers. For example, listing-image enrichment uses external AI processing. Outputs and related job records may be stored with the listing or feature to deliver the result, diagnose errors, and support review. This Policy does not promise that an output is accurate or that every provider has the same retention practices. When you use an agent feature, we handle the request, relevant action context, generated preview, confirmation, and action result needed for that workflow. Records may identify the acting account, agent, affected listing or order, time, and authorization. A permission to assist with a draft is not permission to publish, send a message, or spend money. The confirmation required for the action is separate from privacy consent. 6. Visibility to other people Public listings, profile fields, reviews, published media, and activity made visible through the feature can be seen by other users and may appear in search results, shared links, or previews. Listing and profile activity can expose identity or activity to others according to the applicable visibility setting. Review the audience and privacy controls before publishing or sharing. Public information can be copied or indexed by people and services outside Racct. Buyers, sellers, providers, hosts, guests, co-owners, and delivery participants receive information relevant to their role, such as a profile, order details, selected dates, coordination messages, or contact and location information needed for fulfillment. A shared conversation exposes content to its participants. A listing’s availability calendar can show unavailable days without explaining why they are unavailable. Do not place a guest’s name, private itinerary, or access code in a public calendar or listing. Spaces use the visibility and sharing options available for the Space. A public stylized view can reveal layout and geometry even when photographic assets have more restricted access. Linking a Space to a listing creates a way to find that Space subject to its access controls. Review both settings and inspect the resulting view. Removing a link or changing visibility cannot retrieve copies a recipient already obtained. 7. Other disclosures We disclose relevant information to providers that help with hosting and storage, authentication, search and mapping, media and AI processing, payments, notifications, analytics, security, and support. These providers receive information for the functions they perform; a provider acting independently, such as a payment service, may also have its own legal obligations and privacy terms. Information may be disclosed to professional advisers, insurers, payment-dispute participants, authorities, or other appropriate recipients when reasonably necessary to establish or defend legal claims, investigate fraud or safety incidents, respond to valid legal process, or meet tax and regulatory duties. Lodging rules may require host, property, registration, and transaction records to be provided to authorities. A request from another person does not automatically entitle them to your private records. Information may be involved in a merger, acquisition, financing, reorganization, or transfer of the relevant business, subject to applicable confidentiality requirements, law, and any required notice. We may also disclose information at your direction or with an applicable consent. External links, embeds, and imported-service integrations have their own data practices; use of Racct does not make us the operator of those services. 8. Retention, account closure, and deletion Retention depends on the record’s purpose, whether an account, listing, booking, or dispute is active, legal or tax requirements, fraud prevention, and backup or recovery needs. Transaction and authorization records may need to remain after an order ends or an account closes. Copies shared with other participants and records they must legally retain may also remain. The account-deletion control resets the account’s active profile and signs the user out. It does not by itself erase all historical records or the underlying authentication relationship: current account flows retain information associated with account history and the verified phone credential. For a request to erase retained personal information, contact support@racct.com and identify the account. We will assess the request and applicable exceptions; account closure is not a substitute for that assessment. Where deletion or de-identification is required, it must also be addressed in relevant service-provider systems as applicable. Backup copies may remain until their ordinary rotation or required preservation ends. We cannot promise a single deletion period for every record or removal of copies independently retained by other users, search engines, or external services. 9. Your controls and privacy requests You can use available account controls to update profile information and preferences, change audience settings, manage supported notifications, and request account closure. Device and browser settings control camera, microphone, location, notifications, and local storage permissions. A marketing unsubscribe does not stop necessary account, security, or transaction communications. If a control is unavailable or you need help, contact support@racct.com. Depending on your location and the applicable law, you may have rights to access or receive a portable copy of personal information, correct it, request deletion, object to or restrict processing, withdraw consent, and appeal a denied request or complain to a privacy regulator. California residents have applicable rights to know categories and specific information, sources, purposes and recipients; correct and delete information; opt out of sale or sharing, including qualifying cross-context advertising; limit specified uses of sensitive information; and exercise rights without unlawful discrimination. Some rights depend on whether the relevant law applies to Racct and the processing. Send privacy requests, including an opt-out or a request concerning sensitive information, to support@racct.com. State the account and request, without including a password, full payment credentials, or unnecessary identity documents. We may need proportionate verification for access, correction, or deletion and may require an authorized agent to establish authority. An applicable opt-out must not be made conditional on creating an account or unnecessary identity verification. We will explain a denial or limitation and any applicable appeal route within the time required by law. Sale and sharing have specific legal meanings that can extend beyond an exchange of money. Requests concerning these uses apply where the relevant practice and law apply; they do not prevent disclosures necessary for a requested transaction or other legally permitted purposes. Any legally required browser opt-out signal, including Global Privacy Control where applicable, must be respected for the processing it covers. This Policy does not treat ordinary browser settings as consent to an optional use. 10. Security, sensitive information, and children We use technical and organizational safeguards appropriate to the Services, including authentication and access controls, but no system or transmission is completely secure. Keep credentials private and report suspected account misuse promptly. Information such as precise location, private messages, financial identifiers, and the contents of spatial captures may be sensitive; provide only what the feature needs and consider the audience before sharing. The marketplace is intended for adults aged 18 or older. We do not invite children to create accounts or knowingly seek personal information from children under 13. Adults arranging an eligible stay involving children should provide only necessary information and must have authority to do so. Contact support if you believe a child has supplied personal information contrary to this Policy so we can investigate and take appropriate action. 11. Processing locations and policy updates Racct and its service providers may process information in the United States and other locations where they operate. Privacy laws differ by location. Where applicable law restricts international transfers, the required transfer basis and safeguards must apply. This statement is not a waiver of local rights or blanket consent to every international transfer. We may revise this Policy as features, practices, or legal requirements change. The date below identifies the latest revision. Material changes will receive the notice, and any consent, required by law before the changed processing applies. 12. Contact For privacy questions, rights requests, complaints, or concerns about another user’s handling of your information, contact Racct, Inc. through in-app support or support@racct.com.
Last Modified: September 5, 2026