Privacy Policy

1. Scope

This Privacy Policy applies to information processed by us in connection with the Service. It does not apply to third-party websites or services that may be linked from the Service.

2. Information we collect

We collect information in the following categories (some of which may be personal information under applicable law):

Account data. Identifiers and account information such as name, email address, authentication details, subscription status, and support communications.

Financial and property data. Data you input related to properties, deal assumptions, rents, expenses, financing, returns, cash flow, DSCR, scenarios, and portfolio tracking.

Uploaded documents. Files and content you upload, including receipts, expense records, tax-related documents, and supporting materials. These documents may contain sensitive personal information depending on what you upload.

AI interaction data. Prompts, questions, instructions, attached context, and AI outputs generated through the AI assistant or AI-enabled features.

Usage and device data. Log and analytics data such as IP address, device and browser information, pages/screens viewed, feature usage, approximate location derived from IP, timestamps, and diagnostic events.

3. How we use information

We use information to:

• provide, maintain, and operate the Service (including running deal analyzers, portfolio tracking, document organization, and exports);
• process subscriptions and payments;
• provide customer support and communicate with you;
• monitor, prevent, and investigate fraud, abuse, security incidents, and prohibited activity;
• improve and develop the Service (including improving usability, performance, and reliability);
• comply with legal obligations and enforce our terms.

4. How we share information

We may share information as follows:

With service providers and processors.

We use third-party service providers to support the operation, infrastructure, and functionality of the Service, including but not limited to payment processing, cloud hosting and storage, communications, and artificial intelligence processing.

These service providers process information on our behalf and are contractually obligated to implement appropriate safeguards and to process information only for authorized purposes consistent with this Privacy Policy.

AI processing disclosure.

Certain features of the Service may transmit data to third-party artificial intelligence providers for processing and generation of outputs. By using these features, you acknowledge and agree that your inputs and associated data may be processed by such providers. We do not control and are not responsible for the data handling practices of third-party providers beyond our contractual arrangements with them. You understand that data transmitted to third-party systems may be processed, stored, or routed outside of your direct control.

We do not sell your personal information.

For legal, compliance, and security purposes.

We may disclose information where we believe in good faith that such disclosure is necessary to:

• comply with applicable laws, regulations, legal processes, or governmental requests;
• enforce our Terms of Service or other agreements;
• detect, prevent, or address fraud, abuse, security incidents, or technical issues;
• protect the rights, property, or safety of EquitySight, our users, or others.

Business transfers.

In the event of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction. We may also disclose information during due diligence in connection with such events, subject to appropriate confidentiality protections. Any successor or acquirer may continue to use your information in a manner consistent with this Privacy Policy as updated from time to time.

5. Cookies and similar technologies

We may use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Service is used. You can control cookies through browser settings. Some features may not function properly if cookies are disabled.

6. Data retention

We retain information for as long as reasonably necessary to (a) provide the Service, (b) comply with legal obligations, (c) resolve disputes, (d) enforce agreements, and (e) maintain business records. Retention periods may vary based on the type of data, contractual obligations, and operational needs. Data may persist in backups for a limited period after deletion.

7. Security

We maintain administrative, technical, and physical safeguards designed to protect information. However, no method of transmission, processing, or storage is completely secure, and we cannot guarantee absolute security. You acknowledge and agree that you provide, upload, store, and transmit information to the Service at your own risk.

8. Data breach and incident notification

If we confirm a security breach involving certain personal information, we will evaluate the scope and provide notices as required by applicable law. Michigan's Identity Theft Protection Act includes requirements to provide breach notifications without unreasonable delay, subject to certain allowances related to investigating scope and restoring system integrity.

9. Your privacy rights

United States state privacy rights. The U.S. does not have a single comprehensive federal consumer privacy law, but multiple states have enacted comprehensive privacy laws that provide residents with rights such as access, deletion, correction, portability, and opt-out of certain processing (for example, sale of personal information, targeted advertising, and certain profiling), depending on applicability thresholds and exemptions.

Examples of state rights resources. If you are a resident of certain states, you may have rights described by official state regulators, including California's CCPA program and Colorado's CPA program.

California notice (CCPA/CPRA). California residents have specific rights, including the right to know/access, delete, correct, and opt out of sale or sharing of personal information in certain circumstances.

Universal opt-out preference signals. Some states require honoring certain browser-based or universal opt-out mechanisms in applicable circumstances (for example, for opt-out of sale/targeted advertising). California and Connecticut regulators have publicly discussed opt-out mechanisms such as Global Privacy Control and opt-out preference signals.

10. How to exercise rights

You may request access, deletion, or correction (where applicable) by contacting us at:

• Email: legal@equitysight.io

We may need to verify your identity, authority, and request before responding, and we may deny or limit requests to the extent permitted by applicable law. If your request is denied, you may appeal (where required by applicable law) by contacting legal@equitysight.io.

11. Children's privacy

The Service is not directed to children under 13 and we do not knowingly collect personal information from children under 13.

12. International users

The Service is intended for U.S.-based users. If you access the Service from outside the United States, you understand that your information may be processed in the United States and other locations where our service providers operate.

13. Changes to this Privacy Policy

We may update this Privacy Policy periodically. If we make material changes, we will provide notice by reasonable means (for example, within the Service or via email). The "Effective Date" reflects the latest version.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms.

Contact. EquitySight LLC • legal@equitysight.io • support@equitysight.io