Privacy Policy

1. Who We Are

The Platform is operated by:

For purposes of this Privacy Policy, Happy To Deliver LLC is referred to as “HTD,” “we,” “us,” or “our.”

Privacy and Legal Contact: hello@happytodeliver.com

Website: www.happytodeliver.com

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through:

• The Happy To Deliver website;
• The Happy To Deliver mobile application;
• The resident portal;
• The package management and delivery platform;
• Email communications;
• SMS communications;
• Account authentication;
• Package tracking and delivery records; and
• Other services or features that expressly link to this Privacy Policy.

This Privacy Policy does not necessarily apply to information collected by third-party websites, applications, property management companies, carriers, or other services that operate independently from HTD.

Those third parties may have their own privacy policies.

3. Our Role in Processing Personal Information

The role HTD plays in processing personal information may vary depending on the service and the relationship involved.

In some circumstances, HTD determines the purposes and means of processing information and may therefore act as a controller.

In other circumstances, particularly where a property management company provides resident, lease, occupancy, unit, or related information to HTD for the purpose of providing contracted package and delivery services, HTD may process information on behalf of that property management company and may act as a processor or service provider, as applicable.

The applicable role may depend on the specific processing activity, contractual arrangements, applicable law, and the parties' respective responsibilities.

This distinction does not change HTD's commitment to maintaining appropriate security and privacy controls for the information it processes.

4. Information We Collect

The information collected by HTD depends on how an individual interacts with the Platform.

4.1 Resident Information

HTD may collect or receive:

• Full name;
• Email address;
• Mobile telephone number;
• Property or building;
• Apartment or unit number;
• Resident account information;
• Lease or occupancy information;
• Delivery-related information; and
• Other information necessary to provide the requested services.

4.2 Lease and Occupancy Information

Participating property management companies may provide information regarding:

• Residents;
• Units;
• Lease status;
• Occupancy;
• Move-in or move-out information; and
• Other information necessary to associate residents with the appropriate property and unit.

This information may be provided through authorized integrations with property management systems.

5. Package and Delivery Information

HTD may collect and maintain information relating to packages, including:

• Carrier;
• Tracking number;
• Tracking details;
• Package identification information;
• Date and time received;
• Date and time scanned;
• Date and time delivered;
• Delivery status;
• Property;
• Building;
• Unit;
• Delivery location;
• Package-related notes; and
• Other information necessary to receive, track, manage, and deliver packages.

This information allows HTD and participating properties to maintain accurate package records and provide residents with delivery notifications.

6. Proof-of-Delivery Photographs

HTD may collect and retain photographs or other records used to document delivery.

These photographs may depict:

• A package;
• A package label;
• A delivery location;
• An apartment entrance;
• A door;
• A hallway;
• A common area; or
• Other surroundings reasonably necessary to document a delivery.

Proof-of-delivery information may be associated with a resident, unit, package, property, or delivery event.

HTD does not intentionally use proof-of-delivery photographs for advertising, facial recognition, biometric identification, or unrelated profiling.

A photograph will not be processed for biometric identification merely because the photograph exists.

7. Account and Authentication Information

To provide secure access to the Platform, HTD may collect:

• Email address;
• Mobile telephone number, where applicable;
• One-time passcodes;
• Authentication timestamps;
• Login activity;
• Account status;
• Security events; and
• Other information reasonably necessary to authenticate users and protect accounts.

HTD may use one-time passcodes instead of traditional passwords for certain Platform functions.

Users should not disclose authentication codes to other individuals.

8. Communication Information

HTD may maintain records concerning communications sent through the Platform, including:

• Emails;
• SMS messages;
• Authentication messages;
• Package notifications;
• Delivery notifications;
• Opt-in records;
• Opt-out records;
• STOP requests;
• HELP requests; and
• Other service-related communications.

Communication records may be retained for operational, security, compliance, dispute-resolution, and recordkeeping purposes.

9. Platform Usage and Technical Information

When users interact with the Platform, HTD may collect certain technical and usage information, including:

• IP address;
• Device type;
• Browser type;
• Operating system;
• Application version;
• Dates and times of access;
• Features accessed;
• Pages or screens viewed;
• Error information;
• Diagnostic information;
• Session information;
• Authentication events; and
• Other information necessary to maintain and secure the Platform.

10. Analytics

HTD currently uses in-house analytics to understand Platform usage and performance.

HTD does not currently use third-party advertising analytics platforms to track residents across unrelated websites or applications.

HTD may use aggregated or de-identified information for legitimate business purposes, including:

• Understanding Platform performance;
• Identifying technical issues;
• Improving functionality;
• Measuring operational efficiency; and
• Developing new Platform features.

HTD will not attempt to re-identify information that has been properly de-identified except where permitted by applicable law.

11. How We Receive Information

HTD may receive personal information from several sources.

11.1 Property Management Companies

Participating property management companies may provide resident, unit, lease, occupancy, and property information.

These companies may authorize HTD to access information through their property management systems.

11.2 Entrata

HTD may receive information through authorized integrations with Entrata.

The applicable property management company must authorize the integration.

The information made available to HTD depends on the permissions, configuration, and services authorized by the applicable client.

11.3 Yardi

HTD plans to support a read-only integration with Yardi for certain resident, unit, and lease information.

The availability and scope of this integration will depend on the authorization and configuration established by the applicable property management company.

11.4 Operations Personnel

Authorized HTD personnel may enter or update:

• Package information;
• Scan information;
• Delivery status;
• Delivery notes;
• Proof-of-delivery information; and
• Other operational information.

11.5 Residents

Residents may provide information directly through the resident portal or other Platform functionality.

12. Purposes for Which We Use Personal Information

HTD may process personal information for the following purposes:

Service Delivery

To:

• Receive packages;
• Log packages;
• Track packages;
• Notify residents;
• Deliver packages;
• Record delivery events; and
• Provide related services.

Account Management

To:

• Create and maintain accounts;
• Authenticate users;
• Send one-time passcodes;
• Maintain account security; and
• Manage user permissions.

Communications

To send:

• Package notifications;
• Delivery notifications;
• Authentication messages;
• Security notices;
• Service-related communications; and
• Other communications requested or authorized by users or clients.

Security

To:

• Detect unauthorized access;
• Prevent fraud;
• Investigate suspicious activity;
• Protect Platform systems;
• Protect resident information;
• Protect property information; and
• Maintain Platform integrity.

Operations

To:

• Monitor delivery operations;
• Maintain records;
• Resolve package disputes;
• Investigate delivery issues;
• Provide customer support; and
• Improve operational efficiency.

Platform Improvement

To:

• Identify errors;
• Improve functionality;
• Develop new features;
• Analyze Platform performance; and
• Maintain reliability.

Legal and Compliance

To:

• Comply with applicable law;
• Respond to valid legal requests;
• Establish, exercise, or defend legal claims;
• Enforce agreements;
• Protect rights and property; and
• Maintain legally required records.

13. Data Minimization

HTD seeks to limit the collection and processing of personal information to information that is reasonably necessary and relevant to the purposes described in this Privacy Policy.

HTD does not intentionally collect personal information that is unrelated to the operation of the Platform or the services provided.

14. SMS Text Messages

HTD may use SMS messaging to provide transactional communications concerning:

• Package receipt;
• Package delivery;
• Delivery status;
• Account authentication;
• Security;
• Service-related alerts; and
• Other communications associated with the Platform.

14.1 Consent

Where consent is required, HTD will obtain appropriate consent before sending recurring SMS communications.

The Platform will maintain records of applicable SMS consent where reasonably necessary to demonstrate the source and status of consent.

14.2 Message Frequency

Message frequency varies depending on package activity, delivery events, account activity, and other service-related events.

14.3 Message and Data Rates

Message and data rates may apply.

Users should contact their mobile carrier regarding applicable charges.

14.4 Opt-Out

Users may opt out of recurring SMS communications by replying STOP.

After receiving an applicable opt-out request, HTD will stop recurring messages to that number, subject to messages permitted by applicable law and the technical operation of the messaging system.

14.5 Help

Users may reply HELP for assistance.

Users may also contact HTD through the contact information provided in this Privacy Policy.

14.6 Mobile Information

HTD does not sell or share mobile telephone numbers, SMS opt-in data, or SMS consent information with third parties or affiliates for their own marketing or promotional purposes.

SMS information may be provided to service providers, such as Twilio, solely as reasonably necessary to provide the requested messaging services.

14.7 Carriers

Mobile carriers are not responsible for delayed or undelivered messages.

15. Email Communications

HTD may use email for:

• Package notifications;
• Delivery notifications;
• Authentication;
• Security;
• Account administration;
• Customer support; and
• Other service-related communications.

HTD uses SendGrid to support certain email delivery and authentication functions.

16. Cookies and Similar Technologies

HTD uses essential cookies and similar technologies necessary for the operation and security of the Platform.

These technologies may be used to:

• Keep users signed in;
• Maintain authentication sessions;
• Maintain security;
• Remember essential session information;
• Prevent unauthorized access; and
• Support core Platform functionality.

HTD does not currently use third-party advertising cookies for the Platform.

17. Third-Party Service Providers

HTD may disclose personal information to service providers that assist in operating the Platform.

Current service providers include:

• SendGrid — used for email notifications and certain authentication communications.
• Twilio — used for SMS messaging and related communications.
• Railway — used for application hosting and infrastructure.
• Tigris — used for cloud storage of delivery photographs and files.
• Entrata — used for authorized property management data integrations.
• Yardi — HTD may use Yardi for an authorized read-only integration if and when that integration is implemented.

HTD may engage additional service providers when reasonably necessary to operate, secure, maintain, or improve the Platform.

Service providers receive access only to information reasonably necessary to perform their contracted services and are expected to maintain appropriate safeguards consistent with their contractual obligations and applicable law.

18. Disclosures to Property Management Companies

HTD may disclose resident and delivery information to the applicable property management company when necessary to provide the contracted services.

This may include:

• Resident name;
• Unit;
• Package information;
• Delivery status;
• Delivery dates and times;
• Proof-of-delivery information; and
• Other information reasonably necessary for package management.

The property management company may have its own privacy policy governing information it collects independently of HTD.

19. Legal and Safety Disclosures

HTD may disclose personal information where reasonably necessary to:

• Comply with applicable law;
• Respond to lawful subpoenas, court orders, or governmental requests;
• Protect the rights, property, or safety of HTD;
• Protect residents or other individuals;
• Investigate fraud;
• Investigate security incidents;
• Enforce agreements; or
• Establish, exercise, or defend legal claims.

HTD will seek to limit such disclosures to information reasonably necessary for the applicable purpose.

20. Business Transfers

If HTD is involved in a merger, acquisition, financing, restructuring, sale of assets, sale of the company, bankruptcy proceeding, or similar transaction, personal information may be transferred as part of the applicable transaction, subject to applicable law.

Where appropriate, HTD may require the acquiring or successor entity to maintain appropriate privacy and security protections.

21. We Do Not Sell Personal Information

HTD does not sell personal information to third parties.

HTD also does not sell or share mobile telephone numbers, SMS opt-in data, or SMS consent information for third-party marketing or promotional purposes.

HTD does not currently use resident personal information for targeted advertising.

HTD does not currently engage in profiling of residents for decisions that produce legal or similarly significant effects.

22. Sensitive Personal Information

HTD does not intentionally request or collect sensitive personal information unless it is reasonably necessary for a specific lawful purpose and permitted by applicable law.

HTD's Platform is not designed to collect:

• Social Security numbers;
• Financial account credentials;
• Credit or debit card information;
• Health information;
• Biometric identifiers;
• Genetic information;
• Religious information;
• Sexual orientation information; or
• Similar sensitive information.

If sensitive information is unexpectedly provided through the Platform, HTD may take reasonable steps to secure, restrict, delete, or otherwise handle such information in accordance with applicable law.

23. Precise Location Information

The Platform is not designed to collect precise geolocation information from residents for advertising purposes.

If location-related information is processed as part of an operational feature, such processing will be limited to what is reasonably necessary for the applicable service and subject to applicable law.

HTD will not use precise geolocation information for targeted advertising.

24. Data Security

HTD implements reasonable administrative, technical, and organizational safeguards designed to protect personal information.

Security measures may include:

• Role-based access controls;
• Location-based access restrictions;
• Authentication controls;
• One-time authentication codes;
• Restricted administrative access;
• Secure cloud infrastructure;
• Access controls for stored files;
• Security monitoring;
• Internal security procedures;
• Access limitation based on job responsibilities; and
• Procedures for responding to security incidents.

Access to Platform information may be restricted by:

• Role;
• Region;
• City;
• Property;
• Building; and
• Operational responsibility.

No electronic system can be guaranteed to be completely secure.

25. Data Security Incidents and Breaches

HTD maintains procedures designed to identify, investigate, contain, and respond to suspected security incidents.

If HTD determines that a security breach requires notification under applicable law, HTD will provide notice as required by law.

New Jersey law requires businesses that conduct business in New Jersey and maintain computerized records containing personal information to notify affected New Jersey residents of qualifying breaches following discovery or notification, subject to statutory requirements and exceptions. The law generally requires notice without unreasonable delay, consistent with law-enforcement needs and measures necessary to determine the scope of the breach and restore system integrity.

Where HTD processes information on behalf of a property management company, HTD may notify the applicable client in accordance with the parties' contractual arrangements and applicable law.

26. Data Retention

HTD retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• Providing services;
• Maintaining delivery records;
• Resolving disputes;
• Protecting security;
• Establishing or defending legal claims;
• Complying with contractual obligations;
• Complying with legal requirements; and
• Maintaining necessary business records.

HTD's retention periods are:

These periods may be extended when reasonably necessary because of:

• Litigation;
• A legal hold;
• Government investigation;
• Security investigation;
• Fraud investigation;
• Active dispute;
• Contractual obligation; or
• Applicable legal requirements.

Once information is no longer required, HTD may delete, anonymize, or securely dispose of it in accordance with applicable law and HTD's internal retention procedures.

27. New Jersey Privacy Rights

Where the New Jersey Data Privacy Act applies to an individual and HTD is acting as a covered controller, the individual may have rights including:

• The right to confirm whether HTD processes personal data;
• The right to access personal data;
• The right to correct inaccuracies;
• The right to delete personal data;
• The right to obtain a copy of personal data in certain circumstances;
• The right to opt out of targeted advertising;
• The right to opt out of the sale of personal data; and
• The right to opt out of certain profiling that produces legal or similarly significant effects.

28. How to Submit a Privacy Request

A resident or other eligible consumer may submit a privacy request by contacting:

Happy To Deliver LLC
Privacy Contact: hello@happytodeliver.com

The request should identify:

• The requester's name;
• Contact information;
• The nature of the request; and
• Sufficient information for HTD to identify the relevant account or information.

HTD may request additional information reasonably necessary to verify the identity of the requester and prevent unauthorized disclosure of personal information.

HTD will not require a requester to provide more information than reasonably necessary to authenticate the request.

29. Request Verification

Because HTD handles resident and delivery information, HTD may need to verify the identity or authority of a person requesting access, correction, deletion, or other action.

Verification measures may include confirmation through:

• The resident's registered email address;
• The resident's registered telephone number;
• Account authentication;
• Property or unit information; or
• Other commercially reasonable verification methods.

HTD may deny or limit a request where it cannot reasonably verify the identity or authority of the requester or where an applicable legal exception applies.

30. Authorized Agents

Where permitted by applicable law, a consumer may designate an authorized agent to submit a privacy request on the consumer's behalf.

HTD may require reasonable evidence that:

1. The consumer authorized the agent; and
2. The agent is authorized to act on the consumer's behalf.

HTD may communicate directly with the consumer to verify the request.

31. Appeal of a Privacy Request Decision

If HTD denies or limits a privacy request where applicable law provides an appeal right, the requester may appeal the decision by contacting:

Privacy Contact: hello@happytodeliver.com

The appeal should identify:

• The original request;
• The date of the request;
• The decision received from HTD; and
• The reason the requester believes the decision should be reconsidered.

HTD will review the appeal and respond within the period required by applicable law.

32. Children's Privacy

The Platform is not directed to children under thirteen (13) years of age.

HTD does not knowingly collect personal information directly from children under thirteen through the Platform.

If HTD becomes aware that it has collected personal information directly from a child under thirteen in circumstances requiring parental consent under applicable law, HTD will take reasonable steps to address the information in accordance with applicable law.

33. Third-Party Websites and Services

The Platform may contain links to or integrations with third-party websites, applications, platforms, or services.

Those third parties may have their own privacy policies.

HTD is not responsible for the privacy practices of third parties that operate independently from HTD.

Users should review the applicable third-party privacy policy before providing information directly to a third party.

34. Data Processed Through Property Management Systems

When a property management company authorizes HTD to access information through Entrata, Yardi, or another property management system, HTD will process the information made available through the authorized integration for purposes related to the services.

The scope of information accessible through an integration may depend on:

• The property management company's authorization;
• Technical configuration;
• Available integration functionality;
• Contractual arrangements; and
• Applicable law.

HTD does not independently obtain access to a property's information system without appropriate authorization.

35. International and Cross-Border Processing

HTD is a New Jersey limited liability company and may use service providers that process or store information in jurisdictions outside the state of New Jersey and, where applicable, outside the United States.

Where personal information is processed outside the jurisdiction where it was originally collected, HTD will take reasonable steps to maintain appropriate protections consistent with applicable law and contractual requirements.

36. Changes to This Privacy Policy

HTD may update this Privacy Policy from time to time to reflect changes in:

• The Platform;
• Services;
• Data practices;
• Technology;
• Third-party providers;
• Applicable law; or
• Security practices.

When material changes are made, HTD may provide notice through:

• The Platform;
• The website;
• Email;
• A banner or notification; or
• Another reasonable method.

The revised Privacy Policy will include a new Last Updated date.

Where required by law, HTD will provide additional notice or obtain consent.

37. Governing Law

This Privacy Policy will be interpreted in accordance with applicable federal and state privacy and data protection laws.

To the extent New Jersey law applies, the Privacy Policy will be administered consistently with applicable New Jersey law, including the New Jersey Data Privacy Act and applicable breach notification requirements.

Nothing in this Privacy Policy is intended to limit rights that cannot legally be waived.

38. Contact Us

For questions, privacy requests, security concerns, or other legal/privacy matters, please contact:

Privacy Contact: hello@happytodeliver.com

Website: www.happytodeliver.com

39. Effective Date

This Privacy Policy is effective as of September 22, 2026.

Last Updated: September 22, 2026