Legal

Privacy Policy

Effective: June 15, 2026

This Privacy Policy explains how Traversa LLC (“Traversa,” “we,” “us”) collects, uses, and shares information when you use the Traversa website, web application, and browser extension (collectively, the “Service”). The Service is currently offered to residents of Illinois only.

1. Information We Collect

Information you provide

Account information: name, email address, password, and (optionally) phone number.
Move details: origin and destination addresses, ZIP codes, ward, target move and closing dates, unit number, and the partner building you are moving into (if applicable).
Insurance binder uploads: when your building requires proof of insurance, you can upload your insurance binder PDF. The PDF is transmitted from your browser to Traversa, then to our AI provider (Anthropic) to extract the policy details, and — when the binder verifies or when you opt to dispute the AI verdict and submit for manual review — to Resend, which delivers the PDF as an email attachment to your property manager (at condominium buildings, also to the building’s management office email address). Traversa does not persist the PDF itself in our database or in cloud storage. We retain only a SHA-256 hash of the PDF (used to detect re-uploads of the same file) and the structured extraction described next.
Insurance verification: from the binder PDF you upload, our AI provider extracts and we store the carrier name, policy number, liability limits, effective and expiration dates, additional-insured listings, and certificate-holder name and address; for condominium owner (HO-6) policies, also the policy form and the dwelling and loss-assessment limits. If you rent a condominium unit, we also store the name of your unit owner (your landlord), which you enter so we can check that it appears on your certificate. We also store the AI’s verdict on whether the policy meets your building’s requirements, the remediation steps for you (if any), the descriptive findings for your property manager (if any), the AI model used for extraction, and the SHA-256 hash of the source PDF.
Move-in fee receipts: when your condominium association requires a move-in fee or deposit, you can upload a payment receipt (PDF or image) or a photo of the check you wrote. The file is transmitted from your browser to Traversa, then to our AI provider (Anthropic) to check the payee, amount, date, and, for checks, that the check is signed. A check photo also shows your bank routing and account numbers; they reach Anthropic as part of the image, but we instruct the AI not to extract them and we never store them. Traversa does not persist the file itself. We store the document type, payee name, amount, payment date, check or confirmation number, the AI’s verdict and any remediation steps for you, the findings for your building, the AI model used, and a SHA-256 hash of the file.
Other documents: Traversa does not host a general document vault. Apart from the insurance binders and move-in fee receipts described above, government IDs, leases, utility bills, HOA approvals, and similar documents stay on your device.
Communications: messages, requests, and feedback you send us, including property-manager review requests and elevator reservation requests.

Information collected automatically

Usage and device data: log information such as IP address, browser type, pages viewed, and timestamps, used to operate and secure the Service.
Cookies and similar technologies: we use first-party cookies to keep you signed in (Supabase authentication session) and to remember preferences. We do not use third-party advertising cookies.
Error and performance data: when the Service encounters an error, our error monitoring provider (Sentry) may receive a stack trace, the URL, and limited diagnostic context so we can fix the issue.

Information from third parties

Single sign-on: if you sign in with Google or Apple, we receive your name, email address, and a stable account identifier from that provider, governed by your settings with that provider.
Property managers: if your property manager has invited you or has linked your unit to their building in Traversa, we may receive your unit number, building requirements, and related move details from them.

Information from the Maestro browser extension

Maestro is the optional Traversa browser extension that autofills your move details into third-party utility-transfer and change-of-address forms (such as ComEd, Peoples Gas, and USPS) so you do not have to retype them. We want to be specific about how Maestro handles your information:

What Maestro fills: Maestro autofills fields in third-party forms using move details you have already given to Traversa — your name, email address, phone number, target street address, apartment or unit, and target ZIP code. Maestro never autofills Social Security numbers, passwords, or payment fields.
What Maestro reads back: Maestro reports to Traversa only which tasks you have completed (e.g., “ComEd transfer submitted”). Maestro does not read or transmit the contents of your third-party accounts — balances, account numbers, statements, login credentials, or other data in those sites — back to Traversa.
When static autofill gets stuck: if Maestro’s built-in autofill cannot complete a step (the third-party site changed, an unfamiliar field appeared, etc.), Maestro sends Traversa a sanitized snippet of the page (with input values stripped before transmission) along with the move-detail values it was attempting to fill. Traversa forwards that information to our AI provider (Anthropic) to compute an updated autofill plan, then logs the request and resulting plan so we can debug and improve future autofill.
Anthropic and training: the inputs Traversa sends to Anthropic for autofill recovery are not used to train Anthropic’s models.
Credentials: you log in to third-party sites yourself. Maestro does not capture, store, or transmit your third-party credentials.

Information we do not collect

Biometric identifiers or biometric information as defined by the Illinois Biometric Information Privacy Act (740 ILCS 14/). Traversa does not collect, capture, purchase, or otherwise obtain biometric identifiers (e.g., fingerprints, face geometry, voiceprints) from any user.
Payment card numbers. If we add paid features in the future, payments will be handled by a PCI-compliant processor and we will update this policy.

2. How We Use Information

To provide, operate, and improve the Service, including coordinating your move with your property manager.
To authenticate you and keep your account secure.
To send transactional messages (email confirmations, reminders, status updates) related to your move.
To debug, monitor, and protect the Service from abuse.
To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your personal information for third-party advertising.

3. How We Share Information

Property managers and partner buildings

If you are moving into a building managed by a Traversa partner property manager, we share with that property manager the move details and verifications they need to approve your move-in: your name, contact information, unit number, target move-in date, the structured insurance extraction (carrier, policy number, liability limits, effective and expiration dates, additional-insured listings, and certificate-holder name and address), elevator reservation requests, and the completion status of building-required tasks. When your insurance binder verifies, or when you first opt to dispute a failed AI verdict and submit for manual review, we also email the property manager a copy of the binder PDF as an attachment.

At condominium buildings, the same information goes to the association’s management office email address on file, along with the name of your unit owner if you rent. When your move-in fee receipts cover the full amount, we email the building the payee, amounts, payment dates, and check or confirmation numbers we extracted — not the receipt or check image itself.

Service providers

We share information with vendors who process it on our behalf under written contracts:

Supabase — database, authentication, and document storage.
Vercel — web hosting and content delivery.
Sentry — error monitoring and performance diagnostics.
Resend — transactional email delivery. Resend also delivers the email that attaches your insurance binder PDF to your property manager when verification succeeds (or when you submit for manual review after disputing a failed AI verdict), and the move-in fee confirmation sent to condominium buildings.
Anthropic — AI processing for three flows. First, Maestro autofill recovery: when Maestro’s static autofill gets stuck, Traversa sends Anthropic the sanitized DOM snippet (input values stripped) plus the move-detail values Maestro was attempting to fill (e.g., your name, email, target address) so Anthropic can compute an updated autofill plan. Second, insurance binder extraction: when you upload an insurance binder, Traversa sends Anthropic the full PDF so it can extract the policy details and check them against your building’s requirements. Third, move-in fee receipt checks: when you upload a receipt or check photo, Traversa sends Anthropic the full file, including any bank details visible on a check, so it can check the payment against your association’s requirements. Inputs are not used to train Anthropic’s models.
Google & Apple — only if you use their single sign-on to access Traversa.

Legal and safety

We may disclose information if required by law, subpoena, or court order, or where we believe in good faith that disclosure is necessary to protect rights, safety, or property, or to investigate fraud or violations of our Terms.

Business transfers

If Traversa is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

4. Data Retention

We retain account information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account at any time by emailing privacy@legatochicago.xyz. Some records (e.g., transaction or audit logs required for fraud prevention or compliance) may be retained after deletion as permitted by law.

5. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS), encryption at rest for stored documents, row-level security in our database, and least-privilege access controls. No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you as required by the Illinois Personal Information Protection Act (815 ILCS 530/) and other applicable law.

6. Your Choices and Rights

Access and update: you can view and update your profile and move information from your account settings at any time.
Delete: email privacy@legatochicago.xyz to request deletion of your account and personal information.
Email preferences: transactional emails (account, security, move status) are necessary to operate the Service. Any non-essential emails will include an unsubscribe link.
Cookies: you can clear or block cookies in your browser, but doing so may sign you out and prevent core features from working.
Do Not Track: our Service does not respond to Do Not Track browser signals because there is no industry-standard interpretation; we do not track you across third-party sites.

7. Illinois-Specific Notices

Traversa is offered to Illinois residents and operates under Illinois law.

BIPA (740 ILCS 14/): as noted above, Traversa does not collect biometric identifiers or biometric information.
PIPA (815 ILCS 530/): in the event of a breach of unencrypted personal information, we will notify affected Illinois residents in the most expedient time possible and without unreasonable delay, consistent with the statute.
Illinois SHIELD & Right to Know proposals: if Illinois adopts additional consumer-rights legislation, we will update this policy and our practices to comply.

8. Children

The Service is not intended for, and we do not knowingly collect personal information from, anyone under 18. If you believe a minor has provided us personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The “Effective” date at the top of this policy indicates when the current version took effect.

10. Contact

Questions, requests, or concerns about this Privacy Policy or our handling of your personal information:

Traversa LLC
privacy@legatochicago.xyz