Privacy Policy

1. Information we collect

Account information: your email address and authentication details when you sign in.

Usage information: the property addresses and details you search, the reports you generate, and how you interact with the Service.

Documents you upload: seller disclosure packets and similar files you choose to analyze.

Payment information: processed by Stripe. We do not store your full card number; we receive limited billing details and a customer identifier from Stripe.

Technical information: standard log and device data, and aggregate analytics about page views and feature usage.

2. How we use your information

To provide and operate the Service (run valuations, pull public records, analyze disclosures, generate reports); to process payments and manage subscriptions; to secure the Service and prevent abuse; to communicate with you about your account; and to improve the Service.

3. Service providers (processors)

We share data with vendors that process it on our behalf, under agreements limiting their use: Supabase (database, authentication, file storage), Stripe (payments), OpenAI (disclosure-document analysis), RentCast and public-records/data providers (property data), Vercel (hosting), Sentry (error monitoring), and a privacy-friendly analytics provider (aggregate usage). These providers may process data in the United States.

4. How we share information

We do not sell your personal information. We share it only with the processors above, to comply with law or valid legal process, to protect our rights and users, or in connection with a business transfer (e.g., merger or acquisition), subject to this Policy.

5. Data retention

We retain account and report data while your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion as described below; some records may be retained where required by law.

6. Security

We use encryption in transit and at rest, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your privacy rights (including California)

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. California residents have rights under the CCPA/CPRA, including the right to know, delete, and to not be discriminated against for exercising these rights. We do not sell personal information.

To exercise any of these rights, contact us at kruthika@raoatelier.com. We will verify and respond as required by law.

8. Cookies and analytics

We use essential cookies for authentication and a privacy-friendly analytics tool to understand aggregate usage. We do not use cross-site advertising trackers.

9. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal information.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date and, where appropriate, additional notice.

11. Contact

Questions or privacy requests: kruthika@raoatelier.com.