Draft — not in force. This page still contains unfilled placeholders and has not been reviewed by counsel. It does not describe anyone's obligations yet.
Privacy Policy
Version 2026-08-18. This explains what [LEGAL ENTITY NAME] collects, what we do with it, how long we keep it, and what you can ask us to do. It covers both your own information and the property data you upload.
1. The short version
- We do not sell your data, share it for advertising, or use it to train machine-learning models.
- We do not pool one customer's data with another's. Ever.
- There are no analytics, no advertising trackers and no third-party scripts on this site. Fonts are served from our own server, not from Google. Loading a page here contacts nobody but us.
- The only cookie we set is the one that keeps you signed in.
- Your uploaded file is read once and deleted straight away. What we keep while you are still editing is only the columns the calculation uses — the sale price, the dates, the size, and the address so you can tell the sales apart — for 30 days.
- Everything is hosted in the United States.
2. What we collect
Account information — your name, email address, and a password that is stored only as a salted scrypt hash. We cannot read your password.
Billing information — handled by Stripe. We store your subscription status, plan and renewal date. We never receive or store your card number.
Data you upload — the sales export you provide, plus the subject property details you enter. See section 3, which is the part of this policy that is unusual and worth reading.
Analyses and exhibits — the results you generate, their inputs, and the PDF exhibits you finalise.
Technical records — IP address, browser user-agent, request timestamps and a per-request identifier, kept in server logs. We use your IP address to rate-limit sign-in, signup and password-reset attempts, which is a security measure rather than a tracking one.
We do not collect special categories of data, we do not do behavioural profiling, and we do not buy data about you from anyone.
3. Personal information about other people, inside what you upload
This is the part that generic privacy policies skip, and it deserves to be explicit.
A sales export describes real properties and real transactions. It can therefore contain information about people who are not our customers and have never heard of us — addresses, sale prices, dates, and sometimes names of parties or agents. You decide what to upload. We process it only to produce your analysis, and for nothing else.
Specifically, we do not sell it, do not disclose it to other customers, do not aggregate it into any shared dataset, do not use it to improve or train any model, and do not keep your uploaded file at all once it has been read. The columns the calculation uses are kept for 30 days so you can keep editing; after that the report is finalised automatically and they go too. What survives is the analysis you asked for and the exhibit you signed off, held for your account alone.
When we process that data we are acting on your instructions, as your service provider — you decide what to collect and why. You are responsible for having the right to give it to us, under your MLS agreement and any other rule that applies to you.
4. If you are subject to the FTC Safeguards Rule
Real estate appraisers are treated as "financial institutions" under the Gramm-Leach-Bliley Act's Safeguards Rule, regardless of firm size, and that rule requires you to select service providers capable of safeguarding customer information and to contract with them to do so.
We support that: we maintain the safeguards described in section 7, we process your data only to provide the service, and we will sign a written vendor or data-processing addendum on request — email [CONTACT EMAIL]. If your compliance programme requires evidence of vendor oversight, ask and we will provide it.
5. How we use information
To run the service and produce your analyses; to authenticate you and keep your account secure; to bill you; to send you transactional email you asked for (password resets, email confirmation, service notices); to answer your support requests; to detect and prevent abuse; to keep our own records; and to comply with law.
We do not send marketing email to your account address without your agreement, and any we did send would carry an unsubscribe link.
6. Who we share it with
We do not sell personal information, and we do not "share" it for cross-context behavioural advertising as those terms are used in California law. We disclose it only to:
- Stripe — payment processing.
- Our hosting provider — the servers and database that run the service, located in the United States.
- Our transactional email provider — delivery of the messages in section 5.
- An error-reporting service, if we have one enabled. It is deliberately configured not to receive request bodies or the contents of variables in memory, precisely so that your uploaded data cannot reach it. Error reports identify the failing page, not the account.
- Professional advisors, or authorities, where the law requires it or to establish or defend legal claims.
- A successor, if the business is merged or sold — in which case this policy continues to apply until you are told otherwise.
We will give you a current list of these providers on request.
7. Security
Traffic is encrypted in transit with TLS. Passwords are stored as salted scrypt hashes and are never recoverable. Session cookies are marked Secure and HttpOnly. Each account's rows are isolated in the database by row-level security, so a query that has not established your identity returns nothing rather than someone else's data. Sign-in, signup and password-reset attempts are rate-limited. Exhibits are stored on encrypted volumes. Access to production systems is limited to those who need it.
No system is perfectly secure. If a breach affects your personal information we will notify you without undue delay, and within any period the law requires.
8. How long we keep things
| What | How long |
|---|---|
| Your uploaded file, as uploaded | Deleted as soon as it has been read — within 6 hours at the very latest, if you upload it and never run the analysis |
| The columns the calculation uses, including addresses | 30 days, then the report is finalised and they are deleted |
| Analyses and finalised exhibits | While your account exists and we operate the service — see the Terms, section 4 |
| Account and billing records | While your account exists, then as long as tax and accounting law requires |
| Deleted accounts | Deactivated immediately; everything permanently erased 30 days later, or sooner if you ask |
| Terms-acceptance record | At least three years, or one year past account closure, whichever is longer |
| Session records | 30 days |
| Password-reset tokens | 60 minutes, and they are stored as digests, single-use |
| Rate-limiting records | A small number of hours |
| Server logs | A short operational period |
9. Your choices and rights
Take a copy at any time. The Account page has an export that gives you everything — your analyses, their inputs and your exhibit PDFs — in one archive, with no request and no waiting.
See or correct your information. Your account page shows what we hold about you; email [CONTACT EMAIL] to correct anything.
Delete your account and data. Your account page has a delete option. It shows you exactly how many exhibits you are about to destroy and how many are still inside the five-year USPAP window, offers you the export first, and asks you to type a confirmation. We deactivate the account the moment you confirm and permanently erase everything 30 days later. You can choose immediate erasure instead if you do not want the delay.
Why we wait 30 days. Your exhibits are workfile evidence you are required to keep for five years, and an appraiser who deletes in error cannot get that back once erasure finishes. Tell us at any point inside the window and we will stop and restore everything. We will also offer you the export first, so take your own copy before we erase ours.
Erasure removes the exhibits from storage and the account and its records from our database, and it cannot be undone once it completes. What survives is a single line recording that a deletion was requested and honoured, and when — never what was in the account.
Complain. Email [CONTACT EMAIL]. If you are in California you may also contact the California Privacy Protection Agency or the Attorney General.
We will not treat you differently for exercising any of these.
10. State privacy rights
Several states give residents rights over personal information — to know, access, correct, delete, obtain a portable copy, and opt out of sale, sharing or targeted advertising. Whether a given state's law formally applies to a business our size depends on thresholds most small businesses do not meet. We honour the rights in section 9 for everyone regardless, because the alternative is arguing about jurisdiction with a customer, which is a bad way to treat one.
We do not sell or share personal information, so there is nothing to opt out of, and we honour browser opt-out preference signals as a matter of course. You may use an authorised agent to make a request; we will ask for proof of their authority and for verification of your identity before acting.
11. Where we operate
We are based in the United States, our systems are in the United States, and the service is directed to U.S. appraisers. We do not claim compliance with the GDPR, the UK GDPR or any other non-U.S. privacy law, and we do not offer the transfer mechanisms those laws require. If you are subject to one of them, using this service may place obligations on you that we do not help you meet, and you should take your own advice before uploading anything.
12. Children
The service is for licensed professionals and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, email [CONTACT EMAIL] and we will delete it.
13. Changes to this policy
If we change this policy materially we will post the new version here and email you before it takes effect. The version number at the top tells you which one you are reading.
14. Contact
[LEGAL ENTITY NAME]
[MAILING ADDRESS]
[CONTACT EMAIL]