Privacy Policy

Last updated: September 9th 2026

1. Introduction and Scope

SymLiv, LLC (“SymLiv,” “We,” “Us,” “Our”) provides community access and management software to residential communities, homeowners associations, golf and resort properties, and similar venues. This Privacy Policy describes how We collect, use, disclose, and retain information about residents, community staff, guests, visitors, and other individuals.

Our role. For resident records, guest and visitor records, and access events, SymLiv acts as a controller (or “business,” under California law). We determine the purposes and means of processing this information, We set retention periods, and We respond directly to privacy rights requests. Requests may be submitted to Us directly; you do not need to go through your community.

Contact. Inquiries and requests may be sent to support@symliv.com.

2. Definitions

Services means the SymLiv platform in all its forms, including our web applications, mobile applications, resident and staff portals, guest and visitor management features, SMS and email communications We send, gate and access control integrations, and automated license plate recognition (“ALPR”) camera systems operated through the platform.

Company / We / Us / Our SymLiv, LLC, 69 N Paradise Parkway BLDG B STE 224, Garden City, UT 84028.

Community means a residential community, association, or venue that uses the Services.

Personal Information means information that identifies, relates to, describes, or could reasonably be linked with a particular individual or household.

Account means a unique account created to access the Services or parts of them.

Cookies are small files placed on your device by a website.

Usage Data means data collected automatically, generated by use of the Services or by the Services’ infrastructure.

Vendor means a third party that processes information on Our behalf and under Our instructions.

You means the individual accessing or using the Services, or an individual about whom We hold information, whether or not you hold an Account.

3. Information We Collect

3.1 Information You provide

Account information — name, email address, password, phone number, and Community affiliation.

Profile and contact information — mailing address, additional phone numbers, unit or lot number, country.

Vehicle information You register — plate number, make, model, and color of vehicles you register for gate access.

Guest and visitor information You submit — see §3.2.

Payment information — where a Service supports payments, name, billing address, card number, expiration date, and CVV. This is used solely to verify your financial qualifications and collect payment. We do not store your pay card information. We do however, use a third-party payment processors who may retain information under its own privacy policy and terms.

Communications — if you contact Us or participate in a survey, contest, or promotion, We collect what you submit, including your name, contact information, and message.

3.2 Information about guests, visitors, and other individuals

The Services allow residents, Account administrators, and Community staff to submit information about individuals who do not hold an Account with Us. This includes guest and visitor names, contact details, expected arrival times, vehicle descriptions and plate numbers, and, where a Community operates ALPR, images of vehicles and license plates.

When an individual provides Us with information about another individual, that individual represents that they have the authority to do so. We do not independently verify this. Where We are able to do so, We extend the protections described in this Policy to all individuals whose information We hold, whether or not they hold an Account.

If you become aware of an individual providing Us with information about another individual without authority to do so, please contact Us at support@symliv.com and We will act in accordance with this Policy.

Individuals who do not hold an Account have rights under §9.1.

3.3 Vehicle, gate, and access information

Communities using the Services operate access control at entry points. Through these systems We collect:

• License plate data, including the plate characters read, an image of the plate, and in some configurations an image of the vehicle
• Capture metadata — date and time, the gate or lane, and direction of travel
• Access events — entries and exits associated with a resident, guest pass, or vehicle, including whether access was granted or denied
• Guest pass records — the pass issued, who issued it, its validity window, and its use
• Community Reporting — Communities can the above data to produce internal reports through the use of the Service

This information is collected automatically when a vehicle passes an equipped entry point, including from individuals who have no Account and who have not submitted information to Us directly.

We use this information to operate access control on behalf of the Community, to maintain access records for the Community, to investigate security incidents, and to enforce Community rules.

Retention of vehicle and access data is described in §7.

3.4 Information collected automatically

Usage and device information — your interaction with the Services (content viewed or searched, applications installed or opened, logins, data imports, third-party integrations), IP address, browser type and version, language, operating system, mobile device and application identifiers, referring page, pages visited, time and duration of visits, and cookie information.

Location — where you have granted the relevant permission, location information from your device.

3.5 Information from third parties

If you connect your Account on the Services to an account on another service, We may receive information from that service — for example, from Facebook or Google, your name, profile picture, age range, language, email address, and contact list. You may also grant Us access to activity data from other services. You can stop this sharing by removing Our access from the other service.

4. Cookies and Tracking Technologies

We use cookies, web beacons, tags, and scripts to operate the Services, remember your preferences, and analyze usage.

Essential cookies (session) — authenticate users, prevent fraudulent account use, and deliver features you request. The Services cannot function without them.

Notice acceptance cookies (persistent) — record whether you have accepted Our use of cookies.

Functionality cookies (persistent) — remember choices such as login details and language preference.

Web beacons — small electronic files in our pages and emails that let Us count visitors and opens and verify system integrity.

You can set your browser to refuse cookies or to notify you when one is sent. If you refuse cookies, some parts of the Services may not work.

5. How We Use Information

To provide and maintain the Services — administer, operate, secure, and maintain the Services; manage your Account and registration; perform Our contract with you or your Community; process transactions and send related confirmations, invoices, alerts, and notifications; provide customer support; keep accounting, recordkeeping, and backup records.

To operate community access control — verify vehicles and guests at entry points, issue and validate guest passes, and maintain access records for the Community.

To communicate with you — respond to your questions and requests; send service notifications; send news, offers, and information about goods and services similar to those you have purchased or enquired about, unless you have opted out. You can control marketing communications and most service notifications through your notification preferences in account settings or the “Unsubscribe” link in an email.

To improve and develop the Services — troubleshoot errors, perform data analysis and testing, monitor usage trends, conduct research and surveys, and develop new features.

To promote safety and security — authenticate users, facilitate secure payments, investigate and protect against fraud and unauthorized access, respond to legal requests and claims, conduct audits, enforce Our terms, and demonstrate compliance with Our policies and applicable law.

For business transfers — to evaluate or conduct a merger, acquisition, restructuring, or sale of assets, including in bankruptcy or a similar proceeding.

6. How We Share Information

With vendors — companies that process information on Our behalf and under Our instructions, including hosting, payment processing, communications delivery, and analytics providers.

With your Community — resident, guest, and access information is available to the Community’s authorized administrators and staff for the purposes described above.

For business transfers — in connection with or during negotiation of a merger, sale of assets, financing, or acquisition.

With affiliates — Our parent company, subsidiaries, joint venture partners, and companies under common control, each required to honor this Policy.

For legal reasons — where required by law or in response to valid requests by public authorities; and where We believe in good faith that disclosure is necessary to comply with a legal obligation, protect Our rights or property, investigate possible wrongdoing, protect the personal safety of users or the public, or protect against legal liability.

With your consent — for any other purpose you consent to.

We do not sell your personal information, and We do not share it for cross-context behavioral advertising.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes.

7. Retention

Data is retained in accordance to the following schedule:

8. Security

8.1 How We protect information

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, use, modification, or disclosure. These include:

• Encryption of personal information in transit and at rest
• Role-based access controls, with access to personal information limited to personnel who require it to perform their duties
• Logging of access to systems containing personal information
• Authentication requirements for personnel accessing our systems, including multi-factor authentication
• Regular review of our security practices, and security training for personnel who handle personal information
• Vendor diligence and contractual security requirements for third parties that process personal information on our behalf

No method of transmission over the Internet or method of electronic storage is fully secure. While we work to protect personal information, we cannot guarantee absolute security.

8.2 Vehicle and license plate data

We apply additional safeguards to license plate reads, plate and vehicle images, and associated access records:

• Access is limited to personnel and Community staff with a specific operational need
• Access to this data is logged, and those logs are retained and reviewed
• This data is retained only for the period stated in §7 and is destroyed on that schedule
• We do not disclose this data to third parties except as described in §6, and we do not sell it

Our ALPR Usage and Privacy Policy [§3.3] describes these safeguards in further detail, including the personnel authorized to access this data and our destruction procedures

9. Your Privacy Rights

9.1 Rights for individuals without an Account

If information about you was provided to Us by a resident, Community operator, or other individual, or was collected at a Community entry point, you may request access to that information, correction of it, or its deletion — subject to applicable law and to records We are required to retain. You do not need an Account to make a request.

To protect against improper disclosure, We will ask you to provide enough information to locate your records and confirm your identity. We use what you provide for verification only and delete it when the request is closed.

9.2 California residents (CCPA/CPRA)

California residents may request to know what personal information We collect, use, disclose, and sell; to delete personal information; to correct inaccurate personal information; to limit the use and disclosure of sensitive personal information; to opt out of sale or sharing; and to non-discrimination for exercising these rights. You may designate an authorized agent to make a request on your behalf.

We do not sell personal information, and We do not sell the personal information of individuals under 16 years of age.

Categories of personal information collected in the preceding 12 months

These tables are the authoritative record of what We collect. Section 3 describes the same information in plain language.

Table 1 — Categories, sources, and retention

We do not collect Category C (protected classifications) or Category J (education information).

Table 2 — Purposes and recipients

9.4 How to submit a request

Requests can be sent to: support@symliv.com

10. De-identified and Aggregated Information

“De-identified” means information from which We have removed or altered identifiers — both direct identifiers such as name, address, and date of birth, and indirect identifiers that could reasonably be used to single out an individual — so that it can no longer reasonably be linked to you. “Aggregated” means information combined across individuals so that no individual record remains.

We may use and disclose de-identified and aggregated information to operate, secure, evaluate, and improve the Services, and to produce analyses and reports about how the Services are used.

Where We use de-identified information, We: (i) maintain reasonable technical and organizational measures to prevent re-identification; (ii) publicly commit to maintain and use the information only in de-identified form and not to attempt to re-identify it, except as necessary to test Our de-identification methods; and (iii) contractually obligate any recipient of the information to comply with the same commitments.

11. International Transfers

Your information is processed at Our operating offices and in other places where the parties involved in processing are located, which may be outside your state, province, or country, where data protection laws may differ. We take steps reasonably necessary to ensure your data is treated securely and in accordance with this Policy.

12. Links to Other Websites

The Services may contain links to websites or services not owned or controlled by Us, including those of Our sponsors and partners. This Policy applies only to information collected by the Services. We have no control over third-party websites, and your use of them is subject to their own privacy policies. We are not responsible for their privacy or business practices. We encourage you to read the privacy policy of any linked site you visit.

13. Changes to This Policy

We may update this Policy from time to time. We will post the new Policy on this page, notify you by email and/or a prominent notice on the Services prior to the change taking effect, and update the “Last updated” date above. Changes are effective when posted.

14. Contact Us

support@symliv.com

SymLiv, LLC
69 N Paradise Parkway BLDG B STE 224
Garden City, UT 84028