This Privacy Policy describes how EquityLogix ("we," "us," or "our") collects, uses, stores, and protects your information when you use our platform ("Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information
- Name, email address, and password (hashed) provided during registration.
- Google account information if you sign in with Google OAuth.
Property and Financial Data
- Property details (address, type, square footage, purchase price, etc.).
- Financial records (expenses, income, mortgages, insurance policies).
- Tenant and lease information.
- Documents and receipts you upload.
Usage Data
- Pages visited, features used, and actions taken within the Service.
- Device type, browser type, and IP address.
- Timestamps of access and activity.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To process transactions and manage your subscription.
- To generate analytics, reports, and insights for your portfolio.
- To communicate with you about your account, including service-related announcements.
- To detect and prevent fraud or unauthorized access.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
3. How Data Is Stored
Your data is stored on infrastructure provided by Google Cloud Platform (GCP), based in the United States. Specifically:
- Database: Google Cloud SQL (PostgreSQL) with encryption at rest and in transit.
- File Storage: Google Cloud Storage (GCS) for uploaded documents, receipts, and images.
- Application Hosting: Google Cloud Run with TLS encryption for all connections.
We implement industry-standard security measures including encrypted connections, hashed passwords (bcrypt), and access controls to protect your data.
4. Third-Party Services
The Service integrates with the following third-party services, each governed by their own privacy policies:
- ATTOM Data Solutions: Property data enrichment (address details, valuations, tax records). Property addresses are sent to ATTOM for data retrieval.
- Google Gemini (Vertex AI):AI-powered property classification and valuation estimates. Property descriptions and characteristics are processed by Google's AI models.
- Stripe: Payment processing for subscriptions. We do not store credit card numbers; Stripe handles all payment information directly.
- Google OAuth: Authentication for users who choose to sign in with Google. We receive your name, email, and profile identifier.
5. Cookies
The Service uses httpOnly session cookies for authentication. These cookies are essential for the Service to function and cannot be opted out of while using the Service. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.
6. Data Retention
- Active Accounts: Your data is retained for as long as your account is active.
- Account Deletion: Upon account termination, you have 30 days to export your data. After 30 days, your data will be permanently deleted from our systems, including backups, within 90 days.
- Backups: Encrypted database backups are retained for disaster recovery and are subject to the same deletion timeline.
7. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Export:Download your data in standard formats (CSV, PDF) through the Service's built-in export features.
- Deletion: Request deletion of your account and associated data.
- Correction: Update or correct inaccurate personal information through your account settings.
To exercise these rights, contact us at support@equityledger.ai. Self-service data management tools are planned for a future release.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request details about the categories and specific pieces of personal information we collect.
- Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- No Sale of Personal Information: We do not sell your personal information to third parties.
To exercise your CCPA rights, contact us at support@equityledger.ai.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice within the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.