Privacy Policy

Effective date: October 1, 2025

​

Annum Housing, Inc. (“Annum,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what we collect, why we collect it, how we use and share it, and the choices you have. It applies to our websites (including Annum.com), mobile experiences, SMS flows, and the employer-, member-, and partner-facing products and services we operate (collectively, the “Services”). It also covers information we process on behalf of employers and marketplace partners (e.g., property managers, vendors, and financial institutions) to deliver housing- and finance-related benefits. 

 

We drafted this with reference to SOREDI’s public privacy policy and adapted it for Annum’s products and data practices. For context on that reference’s structure (PII definition, CalOPPA, Do Not Track, COPPA, and CAN-SPAM), see the sections on that page. 

 

 

1) Information we collect

 

 

a) Identifiers and contact details

 

Name, email, mobile number (SMS-enabled), work email, postal address, and account credentials. We verify key contact points (e.g., mobile and personal email) to activate a member account. 

 

 

b) Professional and employer context

 

Employer name, role/department, location, and other workforce data provided by you or your employer (e.g., import files to configure benefits). 

 

 

c) Financial information (member-directed)

 

With your permission, we collect or derive information to power affordability tools, eligibility checks, reimbursements, and savings programs, such as: income and payroll data (e.g., HRIS/payroll integrations), bank and transaction data via secure data aggregators (e.g., tokenized connections through providers like Plaid/Finicity/Yodlee), credit scores/reports (with your explicit consent), program payments, reimbursement submissions, and related documents (e.g., pay stubs, leases, invoices). We also collect data for credit-building and spending insights features you choose to use.   

 

We do not store your bank login credentials; where used, we receive access via tokenized connections from third-party providers.

 

 

d) Housing and program activity

 

Saved programs, eligibility status, waitlists, reimbursements, service requests, case tracking, and anonymized usage analytics visible to employers. 

 

 

e) Marketplace interactions

 

Applications, bookings, messages, and reviews involving property managers, vendors, and financial institutions participating in Annum’s ecosystem. 

 

 

f) Household profile and preferences

 

Goals (e.g., homeownership, relocation), spending insights, SDOH-related indicators you choose to provide, and saved preferences to personalize your experience. 

 

 

g) Communications

 

SMS, email, and in-product messages (including support cases), and your marketing preferences. 

 

 

h) Device/usage data

 

Log data, device/browser information, approximate location, and cookies/SDKs necessary for authentication, security, analytics, and service performance. (Unlike the reference policy, Annum uses cookies/analytics; we do not sell your personal information or share it for cross-context behavioral advertising.)

 

 

i) Sensitive information (limited and permission-based)

 

Government IDs (where legally necessary to verify identity or process payments), date of birth, and—in limited cases—health-adjacent SDOH indicators you choose to provide to improve program matching. Annum is not a healthcare provider or covered entity under HIPAA; any health-related data we process is treated as sensitive personal information and used only for the purposes described in this Policy. 

 

 

2) Sources of information

 

• You (forms, uploads, SMS opt-ins, surveys).

• Your employer (enrollment files, eligibility and program configuration). 

• Marketplace partners (property managers, vendors, and financial institutions) when you engage them through Annum. 

• Data connectivity providers (e.g., payroll/HRIS and financial account aggregators) when you connect accounts. 

• Credit bureaus (with your consent) to enable credit-building features and eligibility checks. 

• Automatically via cookies/SDKs and similar technologies.

 

 

3) How we use information

 

We use your information to:

 

• Provide, secure, and improve the Services, including eligibility matching, affordability tools, reimbursements, and concierge support. 

• Verify your identity, contact you, and operate SMS sequences you opt into (reply STOP to opt out; HELP for help).

• Facilitate applications and transactions with marketplace partners you choose (e.g., property managers, vendors, financial partners). 

• Provide aggregated, anonymized reporting and insights to employers (we do not disclose individual member financial details to employers unless you ask us to or we are legally required). 

• Conduct analytics, benchmarking, and program optimization. 

• Comply with law, prevent fraud, and enforce our terms. For general U.S. privacy concepts referenced by the SOREDI policy (CalOPPA, Do Not Track, COPPA, CAN-SPAM), see that framework. 

 

If we obtain or use a consumer report (e.g., a credit report) for eligibility or other permitted purposes, we do so with your authorization and in accordance with the Fair Credit Reporting Act (FCRA), including any required adverse-action notices.

 

 

4) SMS, email, and marketing

 

By providing your mobile number, you consent to receive SMS messages related to enrollment, support, and programs. You can opt out at any time by replying STOP. We may send service and marketing emails; unsubscribe links are included in each message, consistent with CAN-SPAM. 

 

 

5) Cookies and “Do Not Track”

 

We use cookies and similar technologies for essential functions (auth/security), analytics, and to improve the Services. Modern browsers offer Do Not Track settings; we will respect applicable signals where technically feasible, consistent with the reference framework. 

 

 

6) How we share information

 

We do not sell your personal information and do not share it for cross-context behavioral advertising. We may disclose information to:

 

• Service providers/Processors under contract (hosting, fraud prevention, analytics, communications, identity verification, payment/reimbursement processing).

• Marketplace partners (property managers, vendors, financial institutions) at your direction to fulfill a request or transaction. 

• Employers in aggregated and anonymized form (e.g., utilization and savings metrics). 

• Legal and safety (to comply with law, protect rights, or respond to lawful requests).

 

The reference policy’s general approach to third-party disclosure informed these categories. 

 

 

7) Data retention

 

We retain personal information for as long as needed to provide Services, comply with legal obligations (e.g., financial and tax rules), resolve disputes, and enforce agreements, then delete or de-identify it.

 

You may request deletion at any time (see Section 10). Where deletion is requested, we will also make commercially reasonable efforts to direct our processors and relevant partners to delete your information, subject to legal retention requirements.

 

 

8) Security

 

We use administrative, technical, and physical safeguards appropriate to the nature of the data we process (e.g., encryption in transit and at rest, access controls, audits). No system is 100% secure, but we strive to protect your information consistent with industry practices. The reference framework emphasizes secure transmission and restricted access. 

 

 

9) Children’s privacy

 

Our Services are not directed to children under 13, and we do not knowingly collect personal information from them. 

 

 

10) Your privacy rights & choices

 

Depending on where you live, you may have rights to access, correct, delete, port, or limit certain processing of your personal information.

 

• U.S. (including California): We do not sell your personal information. You may request access or deletion via the contact methods below.

• EU/UK/EEA: Where GDPR applies, our legal bases include performance of a contract, legitimate interests, consent, and compliance with law. You may have additional rights to object or restrict processing and to lodge a complaint with a supervisory authority.

• All users: You can opt out of marketing emails at any time and stop SMS by replying STOP.

 

We will verify requests and respond as required by applicable law. The SOREDI reference notes CalOPPA, Do Not Track, and CAN-SPAM frameworks that also underpin our approach to notice and choice. 

 

To request deletion of your Annum account and associated personal and financial information, email us at privacy@annum.com. We will confirm, verify, and process your request and instruct our processors to do the same, subject to legal retention requirements.

 

 

11) International transfers

 

If you access the Services from outside the United States, your information may be processed in the U.S. and other countries with different data protection laws. We take steps to ensure appropriate protections where required.

 

 

12) Changes to this Policy

 

We may update this Policy to reflect changes to our practices or the law. We will post updates on this page and revise the “Effective date.” The SOREDI reference contemplates change notices on the privacy page. 

 

 

13) Contact us

 

Annum Housing, Inc.

Website: Annum.com

Email: privacy@annum.com (data rights & deletion requests)

 

If you have questions about this Policy or our data practices, contact us at the email above. The reference page provides an example of contact details placement on a privacy page.