Privacy Policy

Last updated October 13, 2026

This policy explains how [LEGAL ENTITY NAME] ("Shoulder", "we", "us") collects, uses and shares information when you visit joinshoulder.com (the "Website") or ask to join our pilot program. It applies to visitors to the Website only. If you later become a customer or a resident covered by a Shoulder program, a separate agreement and privacy notice will describe how we handle that information.

Questions or requests: hello@joinshoulder.com.

1. Information we collect

Information you give us. When you submit a form, we collect what you enter: your name, work email, phone number (optional), company, number of units you manage, and the property management software you use. If you email us, we keep the message and your contact details.

Information collected automatically. We record where your visit came from (the referring site and any campaign tags in the link) and a small set of anonymous events: page views, button clicks, how far you scroll, whether you start or submit a form, which FAQ entries you open, the page you are on, and your screen width. These events are tied to a random identifier that exists only in your browser tab and disappears when you close it. We do not use cookies or advertising trackers on the Website. We do not store your IP address in our own database, although our hosting and database providers may keep standard server logs.

Sensitive information. We do not ask for, and ask you not to send us, Social Security numbers, financial account numbers, health information or other sensitive personal information.

2. How we use information

• To respond to your request and decide whether Shoulder is a fit for your portfolio.
• To contact you about the pilot program and, if you agree, about Shoulder products and updates. You can opt out of marketing email at any time.
• To understand which parts of the Website work and improve them.
• To keep the Website secure, prevent spam and abuse, and comply with the law.
• To evaluate, negotiate or complete a business transaction such as a financing, merger or sale of assets.

3. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only as follows:

• Service providers that run the Website for us. Today these are Amazon Web Services (hosting) and Supabase (database, United States), plus an internal team messaging tool that notifies us of new requests. They may use the information only to provide services to us.
• Professional advisers such as lawyers, accountants and insurers, under confidentiality duties.
• Business transfers, if Shoulder is involved in a transaction described above.
• Legal and safety reasons, when we believe disclosure is required by law or needed to protect rights, safety or property.

We may use or share information that has been de-identified or aggregated so that it no longer identifies you.

4. How long we keep information

We keep early-access requests while we are in touch with you about the pilot and for up to 24 months afterwards, unless you ask us to delete them sooner or we need to keep them for legal reasons. Anonymous site events are kept for up to 24 months.

5. Your choices and rights

• Access, correction and deletion. Email us to see, correct or delete the information you submitted. We may need to verify your identity first, and you may use an authorized agent.
• Marketing email. Use the unsubscribe link in any message or email us.
• Do Not Track. If your browser sends a Do Not Track or similar signal, we do not record site events.

California and other U.S. state residents. Depending on where you live, you may have the right to know what personal information we have collected, to request correction or deletion, to receive a copy, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by California law, so there is nothing to opt out of. We will not treat you differently for exercising your rights. California residents may also ask once a year for details of any disclosures to third parties for their direct marketing purposes; we make none. Nevada residents may submit a request not to sell their information; we do not sell it. To make a request, email hello@joinshoulder.com. If we deny a request you may appeal by replying to our response.

6. Security

We use reasonable technical and organizational safeguards, including encrypted connections, restricted database permissions and rate limits. No system is completely secure. If a breach affects your personal information, we will notify you and regulators as the law requires.

7. International visitors

The Website is operated from the United States and is intended for U.S. businesses. If you use it from elsewhere, you understand your information will be processed in the United States.

8. Children

The Website is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has sent us information, email us and we will delete it.

9. Links to other sites

The Website may link to other sites. We do not control them and are not responsible for their privacy practices.

10. Changes

If we change this policy we will update the date above, and for material changes we will take reasonable steps to tell you.

11. Contact

[LEGAL ENTITY NAME]
[MAILING ADDRESS]
hello@joinshoulder.com