Privacy Policy

Account information. When you create an account we collect your email address, first and last name, role (e.g., investor, agent), and password (stored hashed).

Subscription and billing. When you subscribe to a paid plan, our payment processor (Stripe) collects payment details directly. We receive a customer identifier and subscription metadata; we do not see or store full card numbers.

Usage data. We log page views, clicks (e.g., star/save, search), and similar product-engagement events. We hash each visitor's IP address with a server-side secret so we can detect repeat visits without storing raw IPs.

Approximate location. We derive country, region, city, and approximate latitude/longitude from request headers (Vercel Edge) to power our visitor map. We do not use precise GPS.

Cookies and similar. See our Cookie Policy.

• Provide, operate, and improve the Service.
• Send transactional emails (verification, billing receipts, sale alerts you opted into).
• Detect abuse, fraud, and security incidents.
• Generate aggregate analytics about Service usage.
• Comply with legal obligations.

We do not sell or share personal information that identifies you to third parties for their own marketing or analytics. Aggregated and de-identified data is handled separately — see "Aggregated and De-identified Data" below.

We share limited data with the following processors to operate the Service:

• Vercel — hosting and request routing.
• Supabase — Postgres database, authentication, and storage.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• PostHog — product analytics (if enabled).

We may aggregate and de-identify usage data — search queries, click patterns, traffic, county-level engagement, and similar telemetry — so that the resulting data no longer identifies you or any individual. We may use, retain, license, sell, or otherwise share that aggregated and de-identified data for any business purpose, including industry reports, market research, and licensing to third parties. Once data has been aggregated and de-identified in this way, it is no longer considered personal information under the CCPA or comparable laws, and the rights described in this Policy do not apply to it.

We may use aggregated insights derived from your account's activity (e.g., what kinds of properties get the most attention) to improve the Service and to inform marketing materials, in each case without identifying you.

You may access or update your account information at /account. You can request export or deletion of your account data by emailing dennypatterson.re@outlook.com. We will respond within thirty (30) days, subject to legal retention requirements.

You can unsubscribe from product alert emails using the link in any alert email or via /account/alerts. You cannot opt out of transactional emails (verification, security notices, billing) while you maintain an active account.

We retain account information for as long as your account is active and for a reasonable period afterwards for legal and tax purposes. Aggregated, de-identified analytics may be retained indefinitely.

We use industry-standard safeguards including TLS in transit, HMAC-hashed identifiers, and least-privilege access to production data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact dennypatterson.re@outlook.com.

Residents of certain states (including California) may have additional rights to access, delete, or correct personal information held about them. To exercise these rights, contact dennypatterson.re@outlook.com.

The Service is operated from the United States and intended for U.S. residents. If you access it from outside the U.S., you consent to the transfer of your information to the United States.

We may update this Privacy Policy from time to time. Material changes will be announced via email or via a notice on the Service.