Privacy Policy

Privacy Policy Last updated: June 1, 2026

NestArrival (“NestArrival,” “we,” “us,” or “our”) operates a platform that connects verified tenants relocating from their home country with verified property owners abroad (the “Platform”, “Service”). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it. This Policy applies to all users of the Platform, including prospective tenants (“Tenants”), property owners and listing agents (“Owners”), and visitors to our website or app. By using the Service, you agree to the collection and use of information as described here. If you do not agree, please do not use the Platform.

1. Who We Are NestArrival is a cross-border tenant-owner matching platform. We help verified tenants relocating internationally find and connect with verified property owners abroad. We do not own, manage, or lease any property ourselves, and we do not process rental payments, deposits, or other financial transactions between Tenants and Owners — all such arrangements occur directly between the parties, off-platform.

- Legal entity: [NestArrival legal entity name], registered at [registered business address]. - Data protection / privacy contact: [privacy@nestarrival.com] - If we are required to designate a representative under the EU General Data Protection Regulation (GDPR) or UK GDPR, that representative's details will be listed here: [EU/UK representative, if applicable]

2. Information We Collect

2.1 Information you provide directly - Account information: name, email address, phone number, password, country of residence/destination, and account type (Tenant or Owner). - Verification information: government-issued identity documents (such as a passport, national ID, or driving licence), proof of address, and, where applicable, ownership documents, tenancy history, employment or income verification, or business registration documents. We collect this to confirm that Tenants and Owners are who they claim to be before allowing them to connect. - Profile and listing information: biographical details, preferences, photos, property details, rental terms, and any other information you choose to add to your profile or listing. - Communications: messages exchanged with NestArrival support, and, where our messaging feature is used, messages exchanged between Tenants and Owners through the Platform. - Customer support records: information you provide when contacting us for help, including the content of your inquiry.

2.2 Information collected automatically - Device and usage data: IP address, browser type, device identifiers, operating system, pages viewed, referring URLs, and timestamps. - Location data: approximate location derived from IP address, and, if you grant permission, more precise device location, used to show relevant listings and to support fraud and identity checks. - Cookies and similar technologies: used for authentication, preferences, analytics, and (where permitted) advertising. See Section 9 (Cookies).

2.3 Information from third parties - Identity verification providers: we use a combination of manual review by our internal verification team and automated/AI-assisted screening tools to perform a baseline review of submitted identity and ownership documents. These tools may return a verification status, risk score, or flagged discrepancies to our team; final verification decisions are made or confirmed by our human reviewers. - Login and social providers: if you register or log in via a third-party service (e.g. Google), we receive basic profile information from that provider as permitted by your settings with them. - Public and commercially available sources: used in limited cases to support verification or fraud prevention (e.g. confirming property ownership records where publicly accessible).

3. How We Use Your Information - Matching: to connect verified Tenants with verified Owners based on relocation needs, listing details, and preferences. - Verification and trust & safety: to confirm identity, ownership, or authorization to list a property, and to detect and prevent fraud, impersonation, and platform abuse. - Account and service operation: to create and maintain your account, provide customer support, and operate core Platform features. - Communication: to send service notifications, verification updates, security alerts, and (with your consent, where required) marketing communications. - Safety and legal compliance: to comply with legal obligations, respond to lawful requests from authorities, and enforce our Terms of Service. - Improvement and analytics: to understand how the Platform is used and to improve features, reliability, and user experience.

We do not sell your personal data. We do not use your identity verification documents for any purpose other than verification, fraud prevention, and legal compliance, and we do not use them to train public AI models.

4. Automated Verification and AI-Assisted Review As part of our verification process, we use AI-assisted tools to perform an initial, automated review of identity and ownership documents you submit (for example, checking document format, basic data consistency, or flagging potential anomalies). This automated step does not, by itself, approve or reject your verification — it produces an output that our human verification team reviews before any decision affecting your account (such as approval, rejection, or suspension) is made. You may contact us using the details in Section 13 to request more information about a verification decision or to ask that it be reviewed by a person.

5. How We Share Information We share personal data only as described below. We do not sell personal data to third parties. - Between Tenants and Owners: once a match or connection is initiated, limited profile and contact information (such as name, verification status badge, and relevant listing/relocation details) is shared between the connected Tenant and Owner so they can communicate and proceed off-platform. Full identity documents are not shared with the other party only confirmation that verification was completed. - Service providers: vendors who help us operate the Platform, including hosting providers, identity verification and AI screening providers, customer support tools, analytics providers, and communications providers. These providers are contractually restricted to using data only to provide services to us. - Legal and safety reasons: where required by law, regulation, legal process, or government request, or where we believe disclosure is necessary to protect the rights, property, or safety of NestArrival, our users, or the public, or to investigate fraud or violations of our Terms. - Business transfers: if NestArrival is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to standard confidentiality protections. - With your consent: in any other case where you direct us to share your information.

6. International Data Transfers NestArrival connects users across countries, and data flows are mutual rather than one-directional — a Tenant's data may travel to the Owner's country and the Owner's data may travel to the Tenant's country, in addition to data flowing to wherever our servers and service providers are located. This means personal data is regularly transferred between the country where you are located and other countries, including countries that may not have data protection laws equivalent to your own, and this applies equally to all users regardless of which side of a match they are on.

Where we transfer personal data out of the European Economic Area (EEA), the United Kingdom, or other jurisdictions with similar transfer restrictions, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other legally recognized transfer mechanisms, and we take steps to ensure your data continues to receive an appropriate level of protection wherever it is processed.

7. Data Retention We retain personal data for as long as your account is active and as needed to provide the Service. After account closure, we retain data for the period necessary to: - Comply with legal, tax, or regulatory record-keeping obligations; - Resolve disputes, support investigations, and enforce our agreements; and - Maintain fraud-prevention records, including verification records, for a limited period to prevent repeat abuse of the Platform under a different account.

Identity verification documents are retained only as long as necessary for these purposes and are then securely deleted or anonymized in accordance with our internal data retention schedule and applicable law.

8. Data Security We use administrative, technical, and physical safeguards designed to protect personal data, including encryption of data in transit, access controls limiting who within NestArrival can view verification documents, and regular review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.

9. Cookies and Tracking Technologies We use cookies and similar technologies to keep you logged in, remember preferences, understand how the Platform is used, and, where applicable and with consent, support advertising. You can control cookies through your browser settings; disabling certain cookies may affect Platform functionality. Where required by law, we will request your consent before setting non-essential cookies.

10. Your Privacy Rights Depending on where you live, you may have some or all of the following rights regarding your personal data: - Access: request a copy of the personal data we hold about you. - Correction: request that we correct inaccurate or incomplete data. - Deletion: request that we delete your personal data, subject to legal retention obligations described in Section 7. - Restriction or objection: request that we limit how we use your data, or object to certain processing, including direct marketing. - Portability: request a copy of certain data in a portable format. - Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing. - Lodge a complaint: with your local data protection authority, if you believe we have not handled your data properly.

To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before fulfilling a request. We will respond within the timeframe required by applicable law.

11. Children's Privacy The Platform is intended for users who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor without appropriate consent, we will take steps to delete it.

12. Region-Specific Disclosures 12.1 European Economic Area, UK, and Switzerland If you are located in the EEA, UK, or Switzerland, NestArrival acts as a data controller for the personal data described in this Policy. Our legal bases for processing include: performance of a contract with you, our legitimate interests (such as platform safety, fraud prevention, and service improvement), compliance with legal obligations, and, where applicable, your consent.

12.2 California and other U.S. state privacy laws If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights similar to those described in Section 10, including the right to know, delete, and correct personal data, and the right to opt out of the sale or sharing of personal data and certain targeted advertising. NestArrival does not sell personal data. To exercise these rights, contact us using the details in Section 13.

12.3 Other jurisdictions We aim to provide consistent privacy protections to all users regardless of location. Where local law grants additional or different rights, we will honor those rights to the extent required.

13. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, contact us at: - Email: [privacy@nestarrival.com] - Postal address: [registered business address]

14. Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated version on this page with a revised “Last updated” date, and where changes are material, we will provide additional notice (such as an email or in-app notification) before the changes take effect.