Privacy Policy

    Privacy Policy of SIX50

    Effective and last updated: October 12, 2026

    1. Who We Are

    650 First LLC ("SIX50 Miami", "we", "us") operates this website for SIX50 Miami, a residential building at 650 SW 1st Street, Miami, FL 33130. Through it we provide information about the building and its residences, answer inquiries and take tenant applications. We are part of Vera Group, a group of affiliated companies based in Florida.

    This policy explains what personal information we collect through six50miami.com (the "Site"), how we use it, who receives it, and the choices you have. It also covers the messages and tenant applications that start on the Site. It does not cover other websites we link to, including other Vera Group sites, which have their own policies.

    Use of the Site is also governed by our Terms & Conditions. Questions about this policy: info@six50miami.com.

    2. Information We Collect

    Information you give us

    We collect what you enter on the Site. Depending on what you do, this may include:

    • Contact form (on the home, Residences, Neighborhood, Gallery and Contact pages and in the site menu): your name, email address, phone number (required in the Apply Now window on the Residences page, optional elsewhere) and message. The form can be sent only after you tick the box agreeing to be contacted by 650 First LLC by call, email and text.
    • Tenant application:
      • About you: full name, date of birth, phone number, email address, driver's license number and issuing state, and the names and ages of other occupants.
      • Residence history: current and previous address, city, state and ZIP code, landlord's name and phone number, monthly rent, length of stay and reason for leaving.
      • Employment: current and previous employer, job title, start date, supervisor's name, employer's phone number, monthly income before taxes, and other income (source and amount).
      • Background: whether you have ever been evicted, whether you have ever been convicted of a felony, whether you have filed for bankruptcy in the last 7 years, whether you smoke, and whether you have pets (with a description).
      • Vehicle: make and model, year, color and license plate.
      • Your certification that the information is true and your authorization to verify it.
    • Sensitive personal information: your driver's license number. We use it only to process your application (see Notice at collection).
    • Application fee: you pay it on Stripe's checkout page. We give Stripe your email address and a reference to your application; you enter your card details and the billing details Stripe asks for on Stripe's page. They go to Stripe, and we never receive or store full card numbers.

    The contact form sends what you entered when you press Send Message, and the tenant application when you press Pay $100 & Submit.

    Information collected automatically

    • Request data our host receives each time your browser loads a page: IP address, browser and device type, operating system, language, the page requested, the referring page and the time.
    • Approximate location (country, region, city) derived from your IP address.
    • When you send the tenant application, our server functions at Supabase receive your IP address and use it to limit repeated submissions; it may also appear in their logs.
    • After you allow Functional: the map on the Contact page loads from Mapbox, which receives your IP address, browser data and the map area shown, and records map-load events.
    • After you allow Analytics: through Google Analytics and Yandex Metrica, the pages you view, time on page, links you click, screen size, how you reached the Site (including campaign tags in the link) and cookie identifiers.
    • After you allow Marketing: through WidgetBe's lead tracker, the pages you view, the pages and campaigns that brought you, browser identifiers and the forms you send (see Sale and Sharing of Personal Information).
    • Cookie and similar-technology data, including your consent choices (see Cookies and Similar Technologies).

    Information from others

    • Stripe, which tells us whether your application-fee payment succeeded or failed.
    • The landlords, employers and supervisors you list in your application, when we verify what you told us.
    • The tenant-screening service that runs the background, credit, employment and rental-history checks covered by the application fee, after you approve the request it sends you by email.
    • Listing sites where you send us an inquiry about SIX50 Miami, which pass that inquiry on to us.

    3. How We Use It

    • To answer your inquiry: contact you, send what you asked for, and arrange tours and consultations.
    • To process your tenant application: confirm your identity and age, and verify your employment, income and rental history, including through the background, credit and other checks the application fee covers.
    • To take the application fee and keep records of applications, payments and our communications.
    • To contact you by call, email and text about real estate services, as you agreed on the contact form.
    • To understand how the Site is used and improve it, only after you allow Analytics.
    • To attribute inquiries to the pages and campaigns that brought them and follow up on them, only after you allow Marketing.
    • To protect the Site and its users: block spam, bots and fraud, limit repeated submissions, keep the Site secure and fix errors.
    • To comply with the law, respond to lawful requests, and establish or defend legal claims.

    We do not use your personal information for a purpose that is unrelated to or incompatible with these purposes unless we first ask for and receive your consent.

    4. Who Receives Your Information

    These companies receive personal information through the Site or from us. Most process it only to provide their service to us. Google and Yandex (analytics) and WidgetBe (lead tracking) may also use it for their own purposes (see Sale and Sharing of Personal Information).

    ProviderWhat it doesDataWhere processedWhen it loads or receives data
    Vercel Inc.Hosts the Site and delivers its pagesRequest data (IP address, browser, page, referring page, time)United States; worldwide edge networkEvery page request
    Bitrix24 CRM at crm.veragrp.com, self-hosted by VERA GRP LLC on servers of JSC TimewebOur customer-relationship system: records inquiries and follow-upWhat you send through the contact form: name, email address, phone number and messageRussia (Saint Petersburg)When you press Send Message; the Site sends the form to our server (a Vercel function), which forwards it to the CRM
    Supabase, Inc.Database and server functions for the tenant application: store your application, limit repeated submissions, start the payment and send the notification emailEverything you enter in the application; your IP address and request dataDatabase: the Supabase region chosen for our project; server functions: Supabase's edge networkWhen you press Pay $100 & Submit on the tenant application
    JSC Timeweb (mail service)Sends the email that delivers your application from our mailbox (info@six50miami.com) to our leasing teamEverything you enter in the applicationRussiaWhen you press Pay $100 & Submit on the tenant application; sent by our server
    Google LLC (Gmail)Our leasing team's mailbox, which receives the application emailEverything you enter in the applicationUnited StatesWhen you press Pay $100 & Submit on the tenant application; sent by our server
    Stripe, Inc.Takes the application fee on its hosted checkout pageFrom our server: your email address and a reference to your application. On Stripe's page: card details, billing details, the amount, and device and IP data for fraud prevention (we never receive full card numbers)United States and other countries where Stripe operatesWhen you press Pay $100 & Submit on the tenant application: our server sets up the payment and your browser opens Stripe's checkout page
    Mapbox, Inc.Interactive map on the Contact pageIP address, browser and device data, the map area shown, map-load eventsUnited StatesOnly after you allow Functional
    Google Analytics 4 (Google LLC)Web analyticsPages viewed, events such as link clicks, device, browser, approximate location, cookie identifiersUnited StatesOnly after you allow Analytics, and not while your browser sends GPC
    Yandex Metrica (YANDEX LLC)Web analyticsPages viewed, referring page, time on page, link clicks, device, browser, screen size, IP address and approximate location, cookie identifiers. The Site's code turns off session recording (Webvisor) and click maps.RussiaOnly after you allow Analytics, and not while your browser sends GPC
    WidgetBe Widget Tracker (widgetbe.com)Lead tracking: counts page views, attributes inquiries to the pages and campaigns that brought them, and records the forms you send for our sales follow-upPage views, the pages and campaign links that brought you, IP address, browser and cookie identifiers, and the forms you send (name, email address, phone number, message)In locations WidgetBe choosesOnly after you allow Marketing, and not while your browser sends GPC. It is not started when you open the tenant application, payment, report or new-tenant welcome pages

    When we process your application, we also contact the landlords, employers and supervisors you list, and a tenant-screening service runs the background, credit, employment and rental-history checks covered by the application fee. The screening service sends you its own request by email and runs its checks after you approve it; it handles your information under its own terms and notices.

    Each provider handles data under its own terms and privacy policy, which can differ from ours. "After you allow" means the provider is not contacted until you switch that category on, in the banner or in Cookie Settings.

    We may also disclose personal information to authorities or others when the law requires it, or to establish or defend legal claims.

    5. Cookies and Similar Technologies; Your Choices

    Cookies are small files a site stores in your browser. Similar technologies include local storage and scripts that send data to a provider when a page loads. This section is our Cookie Policy: the table below lists the cookies and browser storage the Site uses, and the services that load regardless of your choices are listed before it.

    Your choices

    • On your first visit, a banner lets you accept all, reject all, or choose by category: Strictly necessary, Functional, Analytics and Marketing. Only Strictly necessary is on by default. Functional, Analytics and Marketing stay off until you switch them on.
    • You can change or withdraw your choice at any time with Cookie Settings at the bottom of the Site's main pages: the home, Residences, Neighborhood, Gallery and Contact pages, this policy and our Terms. The tenant application, payment, report and new-tenant welcome pages do not show the banner or Cookie Settings; the choice you made on the other pages applies there, and if you have not made one, the optional categories stay off.
    • When you switch Functional, Analytics or Marketing off, the Site reloads the page so those tools stop running (while your browser sends GPC, Analytics and Marketing tools are not started, so switching them off needs no reload). When you switch Analytics or Marketing off, it also deletes the cookies and browser storage it knows those tools set on our domain: the Google Analytics cookies (_ga…), the Yandex Metrica cookies and local storage (_ym…), and WidgetBe's cookies and local storage listed below. Other items they set, including Mapbox's map data and cookies on the providers' own domains, remain until they expire or you delete them in your browser.
    • Your choice is stored in a cookie named six50_privacy_consent for 365 days: the categories you chose, when you chose, the banner version and a random ID for that choice. When the cookie expires, or when we add a category that needs a new choice, we ask again.
    • Your choice applies to the browser and device you used.

    What loads regardless of your choices

    These are used without consent because the Site or a feature you use needs them:

    • Vercel (hosting), on every page.
    • Our CRM, when you press Send Message on the contact form.
    • Supabase and Stripe, when you press Pay $100 & Submit on the tenant application.

    The Site's fonts are served from our own host, so no font service is contacted. We do not use these providers for our analytics or advertising, but each receives your IP address and browser data when your browser contacts it and handles it under its own terms (see Who Receives Your Information).

    Global Privacy Control (GPC)

    If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale and sharing of your personal information and of targeted advertising. Each time you open or reload a page of the Site while the signal is on, our consent tool switches Analytics and Marketing off, including any consent you gave to them earlier, and Cookie Settings shows that the signal is being honored. You can still switch either category on, but while the signal is on, the Site does not start Google Analytics, Yandex Metrica or WidgetBe, and the next time you open or reload a page the consent tool switches both categories off again. The signal applies to the browser that sends it.

    Do Not Track

    We do not respond to Do Not Track (DNT) signals. We honor GPC as described above.

    Some providers listed above, such as Google, Yandex and WidgetBe, may be able to recognize your browser on other websites that use their services, and may collect information about your online activities over time and across those websites under their own policies.

    CategoryProviderCookie or storage namePurposeLifetime
    Strictly necessarySIX50 Miami (consent tool)six50_privacy_consentStores your cookie choices365 days
    Strictly necessaryStripeCookies on Stripe's checkout domain only; none on our SitePayment and fraud prevention on Stripe's checkout pageAs set by Stripe
    FunctionalMapboxmapbox.eventData… (local storage)Map-load events with a random identifierUntil you delete it in your browser
    FunctionalMapboxmapbox-tiles (Cache Storage)Stores map data so the map loads fasterAs managed by Mapbox, or until you delete it in your browser
    AnalyticsGoogle_gaDistinguishes browsers2 years
    AnalyticsGoogle_ga_WN52VFJ8DSKeeps session state2 years
    AnalyticsYandex_ym_uidRecognizes the browser across visits1 year
    AnalyticsYandex_ym_dDate of the first visit1 year
    AnalyticsYandex_ym_isadDetects ad blockers2 days
    AnalyticsYandexOther _ym… cookies and local storage keysTechnical data Metrica uses to send its measurementsAs set by Yandex; deleted when you switch Analytics off
    AnalyticsYandexCookies on Yandex domains (for example, yandexuid)Yandex's own identifiersAs set by Yandex
    MarketingWidgetBeWidgetTrackerCookie, WidgetTrackerDomainCheckCookieUsed by WidgetBe's lead trackerAs set by WidgetBe; deleted when you switch Marketing off
    MarketingWidgetBe_pxl_agent, cta_config, inflightRequests (local storage)Used by WidgetBe's lead trackerUntil removed; deleted when you switch Marketing off

    Third-party items on other domains are governed by those providers' policies. You can also block or delete cookies in your browser settings; blocking Strictly necessary items may break parts of the Site.

    6. Communications Through This Site

    Contact form

    When you press Send Message, the Site sends your name, email address, phone number and message to our server (a Vercel function), which forwards them to our CRM (Bitrix24 at crm.veragrp.com, stored in Russia; see Who Receives Your Information). Our leasing team reads it to answer you. If you allowed Marketing, WidgetBe's lead tracker also records the forms you send.

    Tenant application

    When you press Pay $100 & Submit, everything you entered in the application goes to our server functions at Supabase. They save it in our database, email it to our leasing team (sent through Timeweb's mail service from info@six50miami.com to the team's Gmail mailbox) and then set up the application-fee payment on Stripe's checkout page, which your browser opens. All of this happens before you pay: if you cancel or do not complete the payment, your application stays saved and has already been emailed to the team. To have it deleted, email info@six50miami.com.

    Session recording

    Yandex Metrica's session recording (Webvisor) and click maps are switched off in the Site's code.

    7. Sale and Sharing of Personal Information

    We do not exchange your personal information for money. If you allow Marketing, WidgetBe's lead tracker (Widget Tracker) runs on the Site, and WidgetBe receives your IP address, browser and cookie identifiers, the pages you view, the pages and campaigns that brought you, and the forms you send, including what you wrote in them (name, email address, phone number and message). WidgetBe may be able to use this information for its own purposes, so we treat it as "sharing" for cross-context behavioral advertising under California law; under other state laws it may be a "sale" or "targeted advertising".

    If you allow Analytics, Google (Google Analytics) and Yandex (Yandex Metrica) also receive information about your visits (online identifiers, IP address and the pages you view) and may use it for their own purposes. We treat this as a possible sale or sharing too, so the opt-out methods below also switch Analytics off.

    The categories we share, and have shared in the past 12 months, are identifiers (online identifiers, IP address, name, email address and phone number), commercial information (the inquiries you send through the contact form), internet or other electronic network activity, and approximate geolocation derived from your IP address. The recipients are a lead-tracking provider and, if you allow Analytics, analytics providers (Google and Yandex). Of these, name, email address, phone number and inquiries are shared only with the lead-tracking provider.

    You can opt out at any time with:

    • the Do Not Sell or Share My Personal Information link at the bottom of the Site's main pages, or the button below, which open Cookie Settings: switch Marketing and Analytics off and save your choice, or press Reject all;
    • Cookie Settings at the bottom of the Site's main pages, in the same way;
    • a Global Privacy Control signal from your browser (see Global Privacy Control);
    • an email to info@six50miami.com with "Do Not Sell or Share" in the subject.

    We act on an opt-out as soon as we can and within 15 business days, and we do not ask you to verify your identity. Opt-outs made in the browser apply to that browser and device.

    We do not knowingly sell or share the personal information of consumers under 16.

    8. Your U.S. State Privacy Rights

    Some state privacy laws give residents rights over their personal information, depending on where they live and whether the law applies to a business of our size and type. Where applicable law gives you these rights, you can use them as described below.

    Notice at collection (California)

    The table lists the categories of personal information we collect and have collected in the past 12 months.

    CategoryWhat we collectSourcesBusiness or commercial purposesDisclosed for a business purpose toSold or sharedKept for
    IdentifiersName, email address, phone number, postal address, driver's license number, vehicle license plate, IP address, cookie and device identifiersYou; your browser; listing sites where you send us an inquiry about SIX50 MiamiAnswer inquiries, process applications, take the application fee, security; analytics and lead tracking only after you allow themHosting (Vercel), our CRM (Bitrix24), Supabase, mail providers (Timeweb, Google), Stripe, the tenant-screening service and the landlords and employers you list, as needed for your application; Mapbox (IP address, after you allow Functional)Online identifiers, IP address, and the name, email address and phone number you send through the contact form are shared with WidgetBe, only after you allow Marketing; Google and Yandex receive online identifiers and IP address after you allow AnalyticsWhile we handle your inquiry or application; if you become a tenant, for the tenancy plus the legal, tax and record-keeping period that applies (see How Long We Keep Information); cookie identifiers as listed in the cookie table
    Customer records (Cal. Civ. Code §1798.80(e))Name, address, phone number, email address, driver's license number, employment, employment history, income, and credit and background information from screeningYou; the tenant-screening service; landlords and employers you listProcess your application, keep records, comply with lawSupabase, mail providers (Timeweb, Google), Stripe (email address), our CRM (contact details), the tenant-screening service as needed for its checksNo, except the name, email address and phone number you send through the contact form, which WidgetBe receives after you allow MarketingWhile we handle your inquiry or application; if you become a tenant, for the tenancy plus the legal, tax and record-keeping period that applies (see How Long We Keep Information)
    Characteristics of protected classificationsAge (your date of birth, and the ages of other occupants you list)YouConfirm you are at least 18 and process your applicationSupabase, mail providers (Timeweb, Google), the tenant-screening service as needed for its checksNoWhile we handle your inquiry or application; if you become a tenant, for the tenancy plus the legal, tax and record-keeping period that applies (see How Long We Keep Information)
    Commercial informationInquiries about residences; your tenant application and application-fee payment (amount, date, status)You; StripeAnswer inquiries, process your application, keep recordsOur CRM, Supabase, StripeInquiries you send through the contact form are shared with WidgetBe after you allow Marketing; application and payment details are notWhile we handle your inquiry or application; if you become a tenant, for the tenancy plus the legal, tax and record-keeping period that applies (see How Long We Keep Information)
    Professional or employment-related informationCurrent and previous employer, job title, start date, supervisor's name, employer's phone number, incomeYou; employers you listProcess your applicationSupabase, mail providers (Timeweb, Google), the tenant-screening service as needed for its checksNoWhile we handle your inquiry or application; if you become a tenant, for the tenancy plus the legal, tax and record-keeping period that applies (see How Long We Keep Information)
    Other application detailsResidence history and landlord contacts, answers to the background questions (eviction, felony conviction, bankruptcy, smoking, pets), vehicle details, names of other occupantsYouProcess your applicationSupabase, mail providers (Timeweb, Google)NoWhile we handle your inquiry or application; if you become a tenant, for the tenancy plus the legal, tax and record-keeping period that applies (see How Long We Keep Information)
    Internet or other electronic network activityPages viewed, referring page, links clicked, interactions with the Site and the mapYour browser (analytics, lead-tracking and map data only after you allow them)Security; analytics and lead tracking only after you allow themHosting (Vercel); Mapbox, after you allow FunctionalShared with WidgetBe after you allow Marketing, and with Google and Yandex after you allow AnalyticsHost logs and analytics data for the periods the providers' settings and terms set; cookie identifiers as listed in the cookie table
    Approximate geolocationCountry, region and city derived from your IP addressYour browserSecurity; analytics only after you allow itHosting (Vercel); Mapbox, after you allow FunctionalWidgetBe, Google and Yandex can derive it from your IP address after you allow Marketing or AnalyticsHost logs and analytics data for the periods the providers' settings and terms set; cookie identifiers as listed in the cookie table
    Sensitive personal informationDriver's license numberYouOnly to process your application, including identity verification and screeningSupabase, mail providers (Timeweb, Google), the tenant-screening service as needed for its checksNoOnly as long as needed to process your application, then for the record-keeping period the law requires (see How Long We Keep Information)

    To opt out of sharing, use Do Not Sell or Share My Personal Information at the bottom of the Site's main pages, or the other methods in Sale and Sharing of Personal Information.

    We use sensitive personal information only to provide the service you request and for other purposes the law permits, such as security and fraud prevention, and not to infer characteristics about you. The right to limit its use therefore does not apply, and we do not offer a "Limit the Use of My Sensitive Personal Information" link.

    Your rights

    • Know and access: the categories and specific pieces of personal information we hold about you, where it came from, why we use it, the categories we sold, shared or disclosed for a business purpose, and the categories of recipients.
    • Delete: we delete what we hold about you, except what the law lets or requires us to keep, such as transaction records.
    • Correct: we correct inaccurate information.
    • Portability: a copy of your information in a commonly used format.
    • Opt out of the sale or sharing of personal information and of targeted advertising (see Sale and Sharing of Personal Information).
    • Opt out of profiling used for decisions with legal or similarly significant effects, where state law provides it.
    • List of third parties: where state law provides it (for example, Oregon and Minnesota), a list of the specific third parties to which we disclosed your personal information.
    • Limit the use of sensitive personal information, where it applies (above).
    • Non-discrimination: we will not deny you services, charge you a different price or give you a different level of service because you used these rights.

    How to submit a request

    Email info@six50miami.com. Say which right you are using and the state you live in. To opt out of sale, sharing or targeted advertising, you can also use the methods in Sale and Sharing of Personal Information; we do not ask you to verify your identity for that.

    Verification

    We verify a request by matching what you give us with what we hold, for example by replying to the email address in our records. A request to delete, or for specific pieces of information, needs a closer match. We use what you give us for verification only for that purpose, and we will not ask for a Social Security number or account password. We confirm receipt within 10 business days and respond within 45 days. If we need more time, we tell you why and may take up to 45 more days.

    Authorized agents

    An agent can make a request for you with your signed permission. We may ask you to verify your identity directly or to confirm that you gave the agent permission, unless the agent holds a power of attorney under California Probate Code §§4000–4465.

    Appeals

    If we decline your request, you can appeal by replying to our decision, or by emailing info@six50miami.com with "Appeal" in the subject. We will tell you in writing what we did or did not do, and why, within 45 days of receiving your appeal. If we deny the appeal, we will tell you how to submit a complaint to your state attorney general.

    California "Shine the Light"

    California residents may ask once a year what personal information we disclosed to third parties for their own direct-marketing purposes (Cal. Civ. Code §1798.83). We do not disclose personal information to third parties for their own direct-marketing purposes without your consent. To ask, write to info@six50miami.com with "Shine the Light" in the subject.

    Nevada

    Nevada residents may ask us not to sell their covered information (Nev. Rev. Stat. Chapter 603A). We do not sell covered information as Nevada law defines it, but you can send a request to info@six50miami.com.

    9. Children

    The Site is meant for adults. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, write to info@six50miami.com and we will delete it.

    When you apply, you may give us the names and ages of other people who will live with you, including children. We use them only to process your application.

    10. How Long We Keep Information

    We keep personal information for as long as we need it for the purposes in How We Use It. How long depends on:

    • whether you became a tenant, and the kind of relationship;
    • how long we need the records to answer follow-up questions or provide the service;
    • legal, tax, accounting and record-keeping requirements;
    • disputes and legal claims;
    • security and fraud prevention.
    • A tenant application is not deleted automatically if you do not complete the payment; you can ask us to delete it.
    • Cookies and similar technologies last as listed in the cookie table.
    • Data held by providers under their own terms (for example, Stripe's payment records) is kept under their policies.

    11. Where Information Is Processed

    We are based in the United States. Your information is processed:

    • in the United States, by the providers marked United States in Who Receives Your Information;
    • in Russia, by our CRM (Bitrix24 at crm.veragrp.com, on servers of JSC Timeweb in Saint Petersburg), which receives what you send through the contact form; by Timeweb's mail service, which carries your tenant application to our leasing team; and by Yandex Metrica (YANDEX LLC), after you allow Analytics;
    • by Supabase, in the region chosen for our project and on its edge network, when you send the tenant application;
    • by WidgetBe, in locations it chooses, after you allow Marketing;
    • on the worldwide networks of Vercel and Stripe.

    The laws of these countries differ from U.S. law, including on when government authorities may access data.

    12. Security

    We use administrative, technical and physical measures suited to the information we hold, including:

    • HTTPS on every page;
    • access limited to staff who need it;
    • card details handled by Stripe, never by our servers.

    No method of transmission or storage is completely secure. If a breach affects your personal information, we will notify you as the law requires.

    13. Changes to This Policy

    We update this policy when our practices change and change the date at the top. When a change is material, we post a notice on the Site when it takes effect. Where the law requires your consent to a new use, we ask for it first.

    14. Contact Us

    For privacy rights requests, see Your U.S. State Privacy Rights.