Privacy Policy

This Privacy Policy explains what information SubKey Social (“SubKey”, “we”, “us”) collects, how we use it, and who we share it with. It applies to your use of the SubKey website and services.

1. Information we collect

• Account & profile: name, university email, and the profile details you choose to add (year, major, bio, Greek organization, Instagram handle, photos, intro video).
• Roommate preferences: the lifestyle and compatibility preferences you enter, used to compute roommate-compatibility scores.
• Listings & messages: listing content you post and messages you send to other users.
• Payment data: handled by Stripe. We store only Stripe identifiers and status flags — never full card numbers.
• Technical data: standard request logs (e.g. IP address) used for security, rate limiting, and abuse prevention.

2. How we use your information

We use your information to operate the platform: authenticate you, display and match listings, compute roommate scores, enable messaging and payments, send transactional notifications, and keep the service secure.

3. Sub-processors and sharing

We do not sell your personal information. We share data only with the third-party service providers (“sub-processors”) needed to run SubKey:

• Clerk — authentication and account management.
• Stripe — payment processing and payouts.
• Resend — transactional email delivery.
• Cloudflare R2 — storage of uploaded photos and videos.
• Neon — managed PostgreSQL database hosting (United States).
• Vercel — web application hosting.
• DocuSeal — e-signature for payment-terms documents.
• Anthropic — AI assistant used in the onboarding chat experience.

4. AI features and processing

SubKey uses artificial intelligence in two places: an AI assistant in the onboarding chat and automated roommate-compatibility scoring. When you use the onboarding chat, the messages you send are transmitted to Anthropic to generate a response. Roommate scores are computed by SubKey from the preferences you provide. We do not use your content to train third-party AI models, and our AI sub-processor does not use your inputs to train its models under our agreement. AI output may be inaccurate and is provided for convenience only.

5. Data residency

Your data is stored and processed in the United States. Our database is hosted on Neon (US). Several of our sub-processors operate globally; data may be processed by them in accordance with their own terms.

6. Data retention and encryption

We retain your information for as long as your account is active. Data is encrypted in transit (HTTPS/TLS) and at rest at the infrastructure level by our hosting and storage providers (Neon, Cloudflare R2, Clerk, Stripe).

7. Your rights

Depending on where you live (e.g. the EU/EEA under GDPR or California under CCPA), you may have the right to access, correct, export, or delete your personal information. You can delete your account from your account settings, or contact us to exercise these rights.

8. Cookies

SubKey uses only first-party, functional cookies required for authentication (via Clerk). We do not use third-party advertising or analytics trackers.

9. Changes

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

10. Contact

Privacy questions or requests? Email subkeysocial@gmail.com.