Privacy Policy

1. Who we are

The Service is operated by the operators of RE.ROI. For privacy requests, contact privacy@re-roi.com. For general support, contact support@re-roi.com.

2. Information we collect

Account and identity. Username, email address, password (stored in hashed form), and optional profile fields such as first and last name. Invite flows may collect invitee email addresses and role information.

Usage and product data. Investment profiles, strategy preferences, templates, portfolio and saved analyses, compare selections, shared deal links/tokens, map search parameters (such as map viewport), and similar content you create or save in the Service.

Billing. Subscription status and Stripe customer/subscription identifiers. Payment card details are collected and processed by Stripe; we do not store full card numbers on our servers.

Technical data. IP address, browser type, device information, approximate location derived from IP, timestamps, and diagnostic logs needed to operate and secure the Service. Authentication uses a cookie named auth-token (JWT).

Property and market data. Listing, sold-comparable, and related real estate attributes sourced from third-party data providers (including ATTOM/MLS-derived data where available), plus model outputs such as estimated ROI, cash-on-cash, ARV, comps scores, and map pin classifications. These are not personal information about you unless linked to your account activity.

Communications. Messages you send us, and transactional emails we send (invites, password reset, billing-related notices).

3. How we use information

• Provide, maintain, and improve the Service
• Authenticate users and protect accounts
• Run analytical models and display estimates, comps, and map insights
• Process subscriptions and billing through Stripe
• Send transactional and service-related communications
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with law and enforce our Terms of Use
• Develop new features; if we introduce product analytics or marketing tools that materially change collection, we will update this Policy

4. Automated analysis

The Service uses automated calculations and scoring (including map pin colors and estimated returns) based on models, defaults, and third-party property data. These outputs are estimates for informational and analytical purposes only. They are not credit decisions, investment recommendations, appraisals, or financial advice. See our Terms of Use for important disclaimers.

5. Cookies and similar technologies

We use essential cookies and similar technologies to keep you signed in and operate the Service (including the auth-token cookie). Map tile providers may set their own cookies or local storage as described in their policies. We do not currently use third-party advertising cookies. If that changes, we will update this Policy.

6. How we share information

We may share personal information with:

• Service providers who help us operate the Service, such as hosting and databases (e.g., MongoDB), caching (e.g., Redis where enabled), payment processing (Stripe), map/tile providers, and transactional email providers
• Professional advisors (legal, accounting) under confidentiality obligations when needed
• Legal and safety recipients when required by law, legal process, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections
• Others with your direction, such as when you create a share link for a deal analysis

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws.

7. Data retention

We retain account and product data for as long as your account remains active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. Logs and backups are retained for a limited period consistent with security and operational needs. You may request deletion as described below, subject to legal retention obligations.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information (including hashed passwords and access controls). No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. International transfers

We and our providers may process information in the United States and other countries. Those locations may have different data-protection laws than your home jurisdiction. Where required, we use appropriate safeguards for cross-border transfers.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or export certain personal information; to restrict or object to certain processing; and to appeal a denied request. California and similar U.S. state laws may also provide rights to know, delete, correct, and opt out of “sale” or “sharing” (we do not sell or share for cross-context behavioral advertising). EEA/UK users may have GDPR rights, including lodging a complaint with a supervisory authority.

To exercise rights, email privacy@re-roi.com. We may verify your identity before fulfilling a request. Authorized agents may submit requests where permitted by law.

11. Children’s privacy

The Service is intended for adults (18+) engaged in real estate investment analysis. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

12. Third-party links and services

The Service may link to or integrate third-party sites and services (including Stripe and map providers). Their privacy practices are governed by their own policies. We are not responsible for those practices.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated through the Service or by email. Continued use after the effective date constitutes acceptance of the updated Policy.

14. Contact

Privacy questions and requests: privacy@re-roi.com