Last updated: November 7, 2025

Introduction

We at FulHouse (referred to as "we," "our," or "the Company") respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. It also outlines your privacy rights and how you can exercise them. Our platform includes our website and any related services or communications (collectively, the "Services"). By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the platform.

We aim to collect only the information that is necessary for providing our service and to handle it with care and in line with applicable laws. We will never sell your personal data to third parties, and we only share it in ways described in this Policy (such as to provide the service or when legally required). Please read this Privacy Policy carefully to understand our practices regarding your information.

Note for Minors: Our platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not use or register on this site. If we learn we have collected or received personal data from a minor under 18, we will delete that information. If you are a parent or guardian and believe we might have any information from or about a minor, please contact us.

Information We Collect

We collect information that you voluntarily provide to us, information collected automatically through your use of our Services, and information from third parties (like payment processors) as needed.

How We Use Your Information

We use the collected information for various legitimate business purposes, including:

• To Operate the Competitions: This is the core purpose. We use your personal data to process your sweepstakes entries, administer the raffle draws, and determine and contact the winners. For example, your name and contact information are used to enter you into the drawing and to reach you if you win. If you win, we use your information to coordinate prize delivery and verify eligibility. We also use data to ensure one person one account (preventing duplicates).
• To Facilitate Transactions: We use the payment and contact information to process ticket purchases and send you confirmations or receipts. We keep records of transactions for auditing, accounting, and to handle any customer inquiries or disputes about purchases.
• To Communicate with You: We may use your email (and phone number, if provided) to send communications about your account or entries. This includes transactional emails (e.g., account verification, purchase confirmations, changes to Terms/Privacy, or technical notices about the site). We will also send notifications related to the Competitions, such as reminders of closing dates, announcements of winners, or updates if a Competition’s status changes (like extended deadlines). If you are a winner or alternate, we will use your contact information to inform you.
• For Customer Support: If you reach out with questions or issues, we will use your information (like your contact information and any information you provide about the issue) to respond and help resolve it. We might also use information about your usage or past interactions to troubleshoot.
• To Improve and Personalize the Service: We analyze usage data and feedback to improve our platform’s functionality, user interface, and offerings. For instance, we might track that users find a certain part of the sign-up confusing, so we change it. We may also use data to personalize content for you, such as recommending other active Competitions you might be interested in, or tailoring the order of listings you see (e.g., showing Colorado properties first if you live in Colorado). Personalization will be mostly limited given our service nature, but as we expand, it could include things like localized content or special offers.
• Marketing and Newsletters (with consent): If you subscribe to our newsletter or if you explicitly opt-in to receive promotional emails, we will use your email to send you updates on new property raffles, company news, or promotions. You can opt out of marketing emails at any time (every promotional email will have an unsubscribe link). We will not spam you; frequency will be reasonable. If you are in a jurisdiction that requires opt-in (like certain states or countries), we will ensure we have consent before sending marketing messages. Transactional and service emails are not considered marketing and you will receive those as part of using the service.
• Legal Compliance and Security: We may use your information to comply with legal obligations, such as maintaining records for tax purposes or responding to lawful requests by governmental authorities. We also use information to enforce our Terms and to protect the security and integrity of our platform. For example, we might use certain data to detect and prevent fraud, cheating, or other misuse (e.g., using IP address patterns to flag possible multiple accounts, or using payment information to detect suspicious transactions). If necessary, information might be used in legal proceedings or investigations (for instance, providing data to law enforcement if required by law).
• Cookies and Analytics: We use data collected via cookies and similar tech to understand and improve user experience (for example, seeing how many users drop off at a certain page in the entry process helps us fix issues). It also helps remember user preferences (like remaining logged in). Analytics data is used internally to make product decisions and monitor performance and usage trends.

If we plan to use your personal information for a purpose materially different from what is described in this Policy (or in a way that requires additional consent), we will seek your consent or provide notice as required by law.

How We Share Your Information

We value your privacy, so we share personal information only as needed and with appropriate safeguards. Here are the scenarios where sharing may occur:

• With Service Providers: We share necessary information with trusted third-party service providers that perform functions on our behalf. These include:
  • Payment Processors: As noted, your payment information goes directly to Stripe (subject to their privacy policy). We share with Stripe the necessary data to charge your card (which you input in the form). Stripe then tells us if the payment was successful, and provides certain details (name, email, last four of card, etc.). We also may share your email with Stripe to send you a receipt on our behalf.
  • Email and Communication Services: We may use an email service provider (like SendGrid, MailChimp, etc.) to send out emails. In doing so, we provide your email address and name (and email content) to that service solely for the purpose of sending communications to you.
  • Cloud Hosting and IT: Our website might be hosted on a cloud platform (like Google Cloud, AWS, Azure, etc.), meaning your data is stored on their servers. They technically process data to store and retrieve it as we ask. Similarly, we may use other cloud services for data analytics, backups, or customer support management. These providers are authorized to use your data only as necessary to provide their service to us.
• Draw Administration: If we use an independent third-party to conduct or verify the random drawing (for fairness), we might share a list of entries (which could include your name and ticket numbers, but not sensitive information) with that auditor or service. This is solely to ensure the draw is properly conducted. They will not use your information for any other purpose.
• Prizing and Logistics: For the winner, we will have to share certain information with parties involved in the property transfer. For example, we may share the winner’s name and contact with the property seller (and their real estate attorney or title company) so that they can prepare the deed and sale documents. Both the seller and the professionals handling the closing will receive only the information needed (like your name for the deed, address for communications, etc.). They may also require proof of identity which you provide to us; we will share that with them as needed to complete the transfer. Everyone involved will be expected to keep your information confidential and use it only for the purpose of prize fulfillment.
• Marketing and Advertising Partners: Currently, we do not heavily share data for marketing beyond possibly using a service to send emails as mentioned. We do not sell data to advertisers. If we ever use advertising networks or social media platforms to target ads (e.g., using a custom audience feature), it would be in a privacy-compliant way (hashing emails, etc.), and we'll update this policy if we start such practices.
• With Your Consent: If you explicitly consent or request that we share your information with a third party, we will do so. For example, if you win and you want us to coordinate with a financial advisor or family member, and you give permission, we can share relevant information with them. Or if there’s a feature where you can share content to social media or connect your profile to something, we would do that at your direction.
• Legal Requirements: We may disclose your information when required by law, or in response to a valid legal process (such as a subpoena, court order, or government demand). We will do so only to the extent necessary and will attempt to notify you if permitted (for instance, if law enforcement requests data, we might not be allowed to inform you). We may also share information if we believe in good faith that such disclosure is necessary to (a) investigate or protect against harmful or illegal activities, (b) enforce our Terms and other agreements, or (c) protect the rights, safety, and property of our users, the public, or the Company.
• Business Transfers: If the Company is involved in a merger, acquisition, asset sale, financing, or bankruptcy, your information may be transferred to a successor or affiliate as part of that transaction. If that happens, your information will remain subject to the protections of this Privacy Policy (unless you’re notified otherwise and consent to changes). We would inform users of any such change of ownership or control of personal data, as it might affect how your data is handled.
• Aggregated or De-Identified Data: We may share data that has been aggregated (combined with other data) or de-identified (stripped of personal identifiers) such that it cannot reasonably be used to identify you. For example, we might publish statistics like "100,000 users participated this year" or "average tickets per user is X". This information would not personally identify any individual and is used for industry analysis, marketing, or other business purposes.

Importantly, we do not sell your personal information to third parties for their own marketing or advertising purposes. In the context of certain privacy laws (like California's), "sell" can include sharing for benefit; we do not do that. Any sharing we do is as outlined above, primarily to service providers under contracts that protect your data.

Data Security

We take reasonable measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include technical, administrative, and physical safeguards appropriate to the sensitivity of the data. Some of the steps we take include:

• Encryption: Our website is served over HTTPS, which means data (like the information you input) is encrypted in transit between your device and our servers. Sensitive information such as passwords is stored in encrypted or hashed form. Payment information is handled by Stripe using their secure encryption.
• Access Controls: We restrict access to personal data to authorized personnel who need it to operate our service. Our staff is trained on the importance of privacy and security. We also ensure that our service providers have appropriate security measures (we vet their security and confidentiality commitments).
• Monitoring: We monitor our systems for possible vulnerabilities and attacks, and we implement protective measures (like firewalls, intrusion detection systems). We keep our software and infrastructure updated with security patches.
• Backup and Recovery: We routinely back up important data to prevent loss and have recovery plans in place for possible technical incidents. These backups are also protected.
• PCI Compliance: For handling payment info through Stripe, we adhere to applicable Payment Card Industry Data Security Standards (PCI DSS) requirements via our processor. We never store full credit card numbers on our own servers as noted.

Despite our precautions, no security measures are 100% infallible. The internet itself is not completely secure, and we cannot guarantee absolute security of your data. You should also play a role in protecting your information: keep your account password confidential and use a unique, strong password. If you suspect any unauthorized access to your account or any security breaches, please contact us immediately.

In the event of a data breach that affects your personal information, we will notify you and any applicable regulatory bodies as required by law. We will do so promptly and include information on what happened and any steps you may need to take.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. For example:

• We keep your account information while your account is active. If you delete your account (or we delete it due to inactivity or request), we will remove or anonymize personal data associated with your account, except for data we are required or permitted to keep by law (e.g., transaction records for financial reporting, or logs needed for security and fraud prevention).
• Information related to Competitions (like entry records, winners, etc.) may be retained as long as needed to administer the contest, handle any disputes, and comply with legal obligations (such as retaining winner information for a legally required period).
• Correspondence and support tickets may be retained to track our communications and improve our customer service.
• We might keep backups that contain your data for a period even after deletion, but we have processes to purge or destroy outdated personal data over time.
• If information is used for analytics, we might retain aggregated data (which doesn't personally identify you) indefinitely to help us understand long-term trends, but personal data will be deleted or anonymized per retention policies.

When we have no ongoing legitimate business need to process your personal information, we will either delete it or anonymize it. If deletion is not immediately feasible (for example, because your data is stored in backup archives), we will securely store the data and isolate it from further use until deletion is possible.

Your Choices and Rights

• Updating Your Information: You can access and update certain account information by logging into your account settings. Please keep your information up-to-date, especially your contact details, so we can reach you if needed (e.g., if you win). If any of your information changes, you can correct it in your profile or by contacting support. We may ask for verification to change critical information (like transferring account ownership).
• Marketing Communications: If you have subscribed to our promotional emails, you have the right to opt out at any time. To unsubscribe, you can click the "unsubscribe" link at the bottom of any marketing email, or adjust your email preferences in your account settings (if available), or contact us directly requesting to be removed. Please note that even if you opt out of marketing, we will still send you important transactional or service-related emails (such as confirmations, legal notices, password resets, etc.), as those are not promotional.
• Cookies and Tracking: Most web browsers are set to accept cookies by default, but you can often modify your settings to refuse cookies or alert you when cookies are being sent. Refer to your browser's help documentation to manage cookies. Keep in mind that disabling cookies may affect the functionality of our site (for instance, you might have to log in every time, and some features might not work). If we use Google Analytics, you can also use the Google Analytics Opt-out Browser Add-on to prevent data from being used by Google Analytics. For other tracking technologies like pixels, often the only way to fully opt out is to not use the service, but we ensure we don't use invasive tracking beyond standard analytics.
• Do Not Track (DNT): Our site does not currently respond to DNT signals from browsers because there is no consensus on how to interpret them. However, we treat all users' privacy consistently, and we do not collect personal data about your online activities across third-party websites in a way that would require honoring DNT. We focus on first-party data usage.
• Privacy Rights (California/Colorado and Others): Depending on your state or country of residence, you may have specific privacy rights. We aim to comply with all relevant laws:
  • California Residents: Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California users have rights including the right to know what personal information is collected, used, shared, or sold, the right to request deletion of personal information (with some exceptions), the right to opt-out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. We do not sell your personal information as defined by CCPA. California users can request a copy of their personal data we have collected (a "request to know") or ask us to delete their data (a "request to delete"), subject to certain exceptions (like if we need to keep data for legal reasons).
  • Colorado, Virginia, etc.: States like Colorado and Virginia have privacy laws giving similar rights: the right to access personal data, correct inaccuracies, delete personal data, obtain a portable copy, and opt out of certain processing (like targeted advertising or sale of data). We will honor such rights as applicable. For instance, Colorado’s Privacy Act gives you the right to opt out of processing of personal data for targeted advertising or sale – we don't do those, but the right is acknowledged. It also gives rights to access, correct, delete, and obtain a copy of personal data.
• How to Exercise Rights: If you want to exercise any applicable privacy rights, you can contact us at support@fulhouse.io with your request. Please provide sufficient information that we can verify you (we may need to confirm your email or ask questions to ensure identity, as we have to protect against unauthorized access to your data). We will respond within the timeframe required by law (for example, within 45 days for California requests, with possibility of extension). If we decline your request (due to an exemption, or inability to verify you, etc.), we will explain why, to the extent required. For certain requests, we might provide self-service options if available (like letting you download your data if we build that feature). There is typically no fee for these requests, unless they are excessive or unfounded, in which case allowed by law we might charge a reasonable fee or refuse.
• Shine the Light (California): Separate from CCPA, California’s "Shine the Light" law allows users to ask for a notice describing what categories of personal information we share with third parties for their direct marketing purposes. However, we do not share personal information with third parties for their own direct marketing, so no such list exists.
• Appeals: If you are in a state like Colorado or Virginia where if we decline a privacy rights request you have the right to appeal our decision, you may do so by contacting us (reply to our denial message, or email our privacy contact) and providing the reason you believe our decision was incorrect. We will review appeals and respond within the required time (e.g., 45 days in Colorado). If after appeal you are still unsatisfied, you may contact your state Attorney General’s office.
• Account Deletion: If you wish to delete your account entirely, you can contact us with a request to delete. We will then remove or anonymize your personal data as described in Data Retention (except for data we must keep). Keep in mind that deleting your account means you will lose access to any ongoing Competitions and entries, and we won't be able to reach you for any potential win. If you have open entries when you delete, consider waiting until those Competitions conclude (or note that deletion will void those entries if we cannot contact you). We can also deactivate your account as an alternative if you prefer (so you could restore it if needed).

We will not discriminate against you for exercising any of these rights. Our service access and pricing is the same whether or not you choose to exercise privacy rights.

Third-Party Links and Services

Our website may contain links to third-party websites or services (for example, a link to our social media pages, or to a partner or a charity's site if a Competition supports a charity). If you click on a third-party link, you will be directed to that third party’s site. This Privacy Policy does not apply to outside websites, and we have no control over their content, privacy practices, or procedures. We encourage you to review the privacy policies of any site you visit. For example, if you go to Stripe’s checkout or an embedded payment form, Stripe’s privacy policy will apply to the information you provide there; if you visit our Facebook/Instagram pages, those platforms' privacy policies apply to your interactions on those pages.

Children’s Privacy

As noted, our Services are not directed to children under 18. We do not knowingly collect personal information from minors. If you are under 18, do not use the platform or submit any information about yourself. In the event we learn we have collected personal data from a child under 18 without verification of parental consent (in case of a false age claim), we will take steps to delete that information promptly. If you believe we might have any information from a minor, please contact us so we can investigate and remove it. We take child privacy seriously and comply with laws like COPPA (Children’s Online Privacy Protection Act) in the US, even though our service is 18+ only.

International Users

Our platform is currently focused on the United States, and we store and process data in the U.S. If you are using the Services from outside the U.S., be aware that your information will be transferred to and stored in the U.S. where our servers are located. The data protection laws of the U.S. may differ from those of your country, but we will protect your data as described in this policy. By using the platform, you consent to your information being transferred to our facilities and to those third parties with whom we share it as described above, across borders and possibly to other countries, including the U.S. If you are in a region with data transfer protections (such as the European Economic Area, although we do not target or operate in Europe at this time), we will take steps to ensure appropriate safeguards for data transfer (like standard contractual clauses), though again, our service is not intended for those regions currently.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other reasons. We will post the revised Privacy Policy on our website with a new "Last Updated" date. If changes are significant, we may also notify you by email or via a notice on our site’s homepage. You are encouraged to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Services after any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should discontinue use of the platform and may request us to remove your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: support@fulhouse.io (Please use subject line "Privacy Inquiry")

Mail: FulHouse Inc., 800 N King Street Suite 304-1021 Wilmington, DE 19801, United States.

We will do our best to address your inquiry in a timely and professional manner. Your privacy is important to us, and we welcome your feedback or concerns.

Thank you for reading our Terms and Conditions and Privacy Policy. We hope you enjoy using our platform, and we are committed to providing a trustworthy and transparent service as you pursue the chance to win and make Real Estate fun again!