Privacy Policy
Effective September 24, 2026
SLM Platform (“the Platform”) is operated by The CAM Collective (“we”, “us”). It is software that community-association management companies (“management companies”) use to handle move, lease, and sale/purchase requests for the communities they manage. This policy explains what information the Platform handles, why, and the choices you have.
Our role
When you submit a request about a community, you are dealing with that community’s management company. The management company decides how that information is used for its community; we operate the Platform on its behalf and use the information only to provide the service to it. Questions about a specific request are best directed to your management company, and we will help them respond.
Information we collect
- Residents, owners, tenants, and movers who submit requests: name, email address, phone number, association and unit, the details of the request (for example move dates and time window, mover company and phone, lease dates, and tenant names, email addresses, and phone numbers), and documents you upload, such as a certificate of insurance or a signed lease.
- Management company staff: name, email address, role, and company. Passwords are never stored in readable form — only a salted cryptographic hash.
- Sign in with Google: if a staff member chooses to sign in with Google, Google shares their name, email address, whether the email is verified, and profile picture. We use this only to confirm the person already has staff access. See “Google user data” below.
- Board members: email address and the decisions they record on requests sent to them.
- Information from the management company’s accounting system (for example Buildium), when the management company connects it: units, owner names and email addresses, and current tenant names, contact details, and lease dates.
- Technical information: cookies that keep staff signed in and remember which company an administrator is viewing, and standard server logs (such as IP address, browser type, and time of request) kept by our hosting provider for security and troubleshooting. We do not use advertising or analytics cookies.
How we use information
We use information only to provide and secure the Platform: to route requests to the right management company staff and board members, send status emails, let requesters track their requests, and — when a management company turns this on — record fees, deposits, and tenant details in that company’s accounting system. We do not sell personal information and do not use it for advertising.
Google user data
The Platform uses Google Sign-In only to verify a staff member’s identity. It requests only basic profile information (name, email address, and profile picture), does not access Gmail, Drive, Calendar, or any other Google data, and does not store Google access or refresh tokens. Information received from Google is used only to sign that person in and is not shared, sold, or used for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How information is shared
- With the management company for your community, and the people it involves in your request (such as the community manager, coordinators, and board members).
- With service providers that run the Platform on our behalf: Google Cloud (hosting, database, and document storage) and Postmark (email delivery).
- With the management company’s accounting system (such as Buildium), when the management company connects it and directs us to.
- When required by law, or to protect the security of the Platform and its users.
We do not share information between different management companies.
Retention
We keep request records and documents for as long as the management company uses the Platform or needs them for its records, and delete them at the management company’s request or when its account ends, unless the law requires us to keep them longer. Staff access can be deactivated at any time by the company’s administrator.
Security
Information is encrypted in transit, and uploaded documents are never publicly accessible. Staff access is by invitation only and each company can see only its own data. Accounting-system credentials are stored encrypted. No system is perfectly secure, but we work to protect the information entrusted to us.
Your choices
You can ask to access, correct, or delete information about you by contacting your management company or us at brawley@camcollective.com. A staff member can revoke the Platform’s Google sign-in access at any time from their Google Account settings.
Children
The Platform is not directed to children under 16, and we do not knowingly collect their information.
Changes
If we change this policy, we will post the new version here and update the effective date.
Contact
The CAM Collective · brawley@camcollective.com