Privacy Policy

Inlet (“Inlet,” “we,” “us”) is a sublease listing platform based in Illinois and operated as a sole proprietorship. This policy explains what we collect, why, who we share it with, and your choices. It covers inlet.house and related services (the “Service”).

• You can browse without an account. We collect minimal analytics either way.
• To act (contact a lister or post), you create an account with an email link or Google.
• We collect what you give us (account, profile, listings, photos, messages) and basic technical/usage data.
• We do not sell your personal information.
• We do not collect biometric information (no face/fingerprint data; the Illinois Biometric Information Privacy Act does not apply to us).
• We do not currently process payments or store payment-card or bank data.

You give us:

• Account info: your email address; if you use Google sign-in, the name and email Google shares with us.
• Profile info: any display name or details you add.
• Listings & photos: building, address/approximate location, dates, rent, descriptions, and images you upload.
• Demand / search info: budget, target term, saved searches, and preferences you enter as a seeker.
• Messages: the content of messages you send to other users through the Service.
• Reports & support: anything you send us when you report a listing or contact us.
• Intake forms: information submitted through our sign-up / waitlist forms (currently hosted via Tally).

Collected automatically:

• Usage & device data: pages viewed, actions taken, approximate location from IP, browser/device type, and similar analytics (via PostHog).
• Error & performance data: diagnostic logs when something breaks (via Sentry).
• Security data: signals from our bot-protection challenge (Cloudflare Turnstile) and standard server logs.
• Cookies & similar technologies: used for sign-in sessions, security, and analytics. You can control cookies through your browser; some are necessary for the Service to function.

• Operate the Service: sign-in, posting, browsing, messaging, the verified badge, ranking, and Deal Score.
• Apply the verified badge and rank verified accounts higher (see the Terms for what verification does and does not mean).
• Prevent fraud, spam, scams, and abuse, and enforce our Terms.
• Communicate with you: account, transactional, and — if you opted in via a form — launch and product messages. You can opt out of non-essential email anytime (see §8).
• Understand and improve the Service.
• Comply with law and respond to lawful requests.

• With other users. Listings are public to anyone browsing. Your contact details are revealed to another user only when you take an action that shares them (e.g., contacting or being contacted about a listing). Messages are shared with the user you message.
• With service providers (processors) who run our infrastructure under their own privacy and security obligations:
  • Supabase — database, authentication, and file storage
  • Vercel — application hosting
  • Cloudflare — DNS, email routing, and bot protection (Turnstile)
  • Google — sign-in (OAuth) and maps
  • PostHog — product analytics
  • Sentry — error monitoring
  • Tally — intake / sign-up forms
• For legal reasons. To comply with law, enforce our Terms, or protect the rights, safety, or property of users, the public, or Inlet.
• In a business transfer.If Inlet is ever acquired or its assets transferred, information may transfer as part of that transaction; you’ll be notified of any material change in how your information is handled.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We use PostHog to understand product usage. Because there is no industry-standard “Do Not Track” signal, we do not currently respond to one. You can limit analytics by controlling cookies in your browser and by not creating an account.

We keep personal information for as long as your account is active or as needed to provide the Service, then for a reasonable period to comply with law, resolve disputes, prevent fraud, and enforce agreements. You can request deletion (see §9). Some residual data may persist in backups for a limited time and in anonymized/aggregated form.

Account and transactional messages (e.g., sign-in links, listing-related notices) are part of the Service. For non-essential email (launch announcements, product updates), you can opt out using the unsubscribe link or by emailing us. Per the CAN-SPAM Act, our commercial emails include a valid postal address and an opt-out mechanism.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. California residentshave rights under the CCPA/CPRA, including the right to know, delete, correct, and to opt out of “sale”/“sharing” (note: we do not sell or share for cross-context advertising). We will not discriminate against you for exercising these rights.

To exercise any right, email hello@inlet.house. We may need to verify your identity (e.g., that you control the account email) before acting.

The Service is for users 18 and older. It is not directed to children, and we do not knowingly collect information from anyone under 18 (or under 13). If you believe a minor has provided us information, contact us and we will delete it.

We use reasonable administrative and technical measures to protect personal information, including the security features of our service providers. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Use a secure sign-in method and protect your account.

Inlet operates in the United States, and our service providers may process and store information in the U.S. and other countries. By using the Service, you understand your information may be processed in the U.S.

We may update this policy. Material changes will be reflected by updating the “Last updated” date and, where appropriate, by notice on the Service.

Inlet
Email: hello@inlet.house