Privacy Policy

1. Introduction

Purpose of this Privacy Policy

This Privacy Policy describes how AIRE LLC ("Propspect," "we," "us," or "our") collects, uses, discloses, and protects personal data in connection with propspect.casa and the related applications and application programming interfaces (collectively, the "Service" or "Platform"). It is intended to give you clear, transparent information about our data practices so you can make informed decisions about your use of the Service.

About Propspect

Propspect is an invite-only, business-to-business software-as-a-service platform for commercial real-estate prospecting. It is operated by AIRE LLC, a Florida limited liability company, in partnership with Gridline Properties, a commercial brokerage that helps shape the product's features and direction. Gridline Properties is a product partner, not an operator of the Platform, and does not independently control the processing of personal data described in this Privacy Policy.

Propspect is not a brokerage and does not provide brokerage, agency, legal, tax, investment, or appraisal services. It is a software and data-intelligence tool that aggregates public-record and licensed real-estate data, derives analytics and signals from that data, and provides a customer relationship management workspace for real-estate professionals, all as described in more detail elsewhere in this Privacy Policy.

Two groups whose data this policy covers

This Privacy Policy addresses two distinct groups of personal data, and it is important to understand which parts apply to you.

• Users: individuals who hold an account on the Platform, whether as an organization administrator or as an organization user of an Organization. For Users, this Privacy Policy describes account, authentication, usage, and communications data we collect directly from you and through your use of the Service, as further described in the Categories of Personal Data We Collect, How We Collect Personal Data, and How We Use Personal Data sections.
• Individuals appearing in public-records data: property owners, corporate officers, and other individuals who appear in the public-record and licensed Property Data that Propspect aggregates and makes available to Users for real-estate research purposes. Propspect does not collect this data from these individuals directly and, in most cases, has no direct relationship with them. Their data is addressed separately in the Individuals Appearing in Public-Records Data section.

Scope

This Privacy Policy applies to personal data we process when you visit or use the Platform, when your Organization's Authorized Users interact with the Platform, and in connection with related communications and support interactions with us. It does not extend to third-party websites, applications, or services that you may access through links on the Platform, which are governed by their own privacy notices.

Document version, effective date, and acceptance

This Privacy Policy is version 2026-10-11 and is effective as of October 11, 2026. By creating an account, accessing, or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of personal data as described in it. If you do not agree, you must not use the Service. We may update this Privacy Policy from time to time as described in the Changes to This Privacy Policy section, and we may request that you re-accept an updated version before you continue using the Service.

2. Data Controller and Contact Information

Identity of the Data Controller

Propspect is operated by AIRE LLC, a Florida limited liability company. AIRE LLC is the entity responsible for determining how and why personal data is processed in connection with the Service, and is the data controller (or equivalent responsible party under applicable law) for personal data collected from Users, from Organizations, and from individuals appearing in Property Data as described elsewhere in this Privacy Policy. References in this Privacy Policy to "Propspect," "we," "us," and "our" mean AIRE LLC acting in that capacity.

Where an Organization directs how its own User Content is used internally (for example, configuring shared versus private workspaces or assignment rules, as described in the Organizations and Multi-Tenant Data Handling section), the Organization may act as an independent controller of that internal configuration, while AIRE LLC remains the controller of the Service as a whole and of the underlying Property Data.

Gridline Properties Is Not a Data Controller or Processor

Propspect is developed in partnership with Gridline Properties, a commercial real estate brokerage that helps shape the product's features and direction. Gridline Properties is a product partner only. It does not operate the Service, does not determine the purposes or means of processing personal data through the Service, and is not a data controller or data processor with respect to any personal data collected or generated through Propspect. Gridline Properties does not receive User account data, User Content, or Property Data by virtue of its role as a product partner, and this Privacy Policy does not extend any data-handling role to Gridline Properties.

How to Contact Us About Privacy

If you have questions about this Privacy Policy, our data practices, or your privacy rights, you can contact us at [email protected]. This is the designated contact for all privacy-related inquiries, including requests from Users, from Organizations, and from individuals appearing in Property Data as described in the Individuals Appearing in Public-Records Data section.

We do not currently list a postal address or telephone number for privacy inquiries; email is the sanctioned channel. If our contact information changes, we will update this section accordingly.

3. Categories of Personal Data We Collect

Propspect processes personal data about two distinct groups of people, and we describe each separately below. The first group is Users: the individuals who hold accounts and use the Platform, including account and profile data they provide and technical and usage data we collect automatically as they use the Service. The second group is individuals who appear in Property Data because they are named in public records, such as property owners and corporate officers, and who are not themselves Users. We also note a third source of personal data below: information that Users choose to enter into User Content.

Account and Profile Information We Collect About Users

When you register for and use an account, we collect the following categories of personal data about you:

• Your name.
• Your business email address.
• Your password, which we store only in hashed form, or, if you sign in with Google, your Google account identifiers.
• Your Organization and your role or permission level within that Organization.
• Acceptance records for our Terms of Service and this Privacy Policy, including the timestamp of acceptance, the document version accepted, and the IP address from which acceptance was recorded.

Technical and Usage Data

In addition to the information you provide directly, we automatically collect technical and usage data as you use the Service. This category includes:

• Your IP address.
• Your browser type and device type.
• Your operating system.
• Session and authentication identifiers, such as those used to keep you signed in and to secure your session.
• Usage and log data, such as the features and pages you access, actions you take within the Platform, and timestamps of that activity.

We collect this category automatically, through your use of the Service, as described further in the How We Collect Personal Data section. We use it for the purposes described in the How We Use Personal Data section, including maintaining security and preventing fraud, and it is also the basis for the cookies and similar technologies described in the Cookies, Tracking, and Analytics section.

Personal Data Contained in Property Data

Property Data aggregates public records and licensed real-estate data sources, and this data contains personal data about individuals who are not Propspect Users. These individuals are property owners, corporate officers, registered agents, and other parties named in county recorder and clerk official records, property appraiser rolls, state corporate registries, and related public sources. Personal data within Property Data includes:

• Owner names, as they appear on deeds, property appraiser rolls, and other recorded instruments.
• Corporate-officer, member, and registered-agent names associated with entities that own or have owned property.
• Entity affiliations, such as the relationship between an individual and a corporation or limited liability company shown in a state registry.
• Recorded transaction details, including sale dates, recorded prices, and the parties to a conveyance.
• Recorded liens, mortgages, and related instruments, including the parties, dates, and terms reflected in the public record.

This category of personal data is addressed further, including its source, our purpose for processing it, and how an affected individual can contact us, in the Individuals Appearing in Public-Records Data section and the Property Data, Public Records, and Third-Party Sources section.

Personal Data Within User Content

User Content, such as notes, tasks, deals, and contacts that Users create within the Platform, is provided by Users at their own discretion and may itself contain personal data. For example, a User may enter the name, contact information, or other details of a property owner, tenant, business contact, or colleague as part of a note, task, or contact record. Propspect does not control the substance of User Content and is not the party who determines what personal data it contains. Users are responsible for ensuring their entry of such information into User Content is appropriate and lawful. Handling of User Content within an Organization is described further in the Organizations and Multi-Tenant Data Handling section.

4. How We Collect Personal Data

We collect personal data in three ways: directly from you when you sign up for and use the Service, indirectly from public-record and licensed third-party sources as part of the Property Data we aggregate, and, if you choose to connect it, from your Google Workspace account. The categories of data collected through each method are described in the Categories of Personal Data We Collect section.

Directly From You

We collect personal data that you provide directly at the following points in your relationship with Propspect:

• Invitation and waitlist signup. Because Propspect is invite-only, we collect information you submit to join the waitlist or to accept an invitation from an Organization administrator, such as your name, work email address, business or Organization name, and role.
• Account creation and sign-in. When you create an account, you provide an email address and password, or you authenticate using Google sign-in (OAuth), in which case Google shares certain profile information with us as described below and in the Google Workspace Integration and Limited Use Disclosure section. We record your acceptance of the Terms of Service and this Privacy Policy, including the timestamp, document version, and IP address associated with that acceptance.
• Ongoing use of the CRM. As you use the Platform, you and other Authorized Users in your Organization generate personal data by entering User Content into the CRM, including notes, tasks, deal records, contact records, saved searches, and territory targets. Some of this User Content may itself contain personal data about property owners, corporate officers, tenants, or other individuals that you or your colleagues choose to record.

Indirectly, From Public Records and Licensed Data Sources

Propspect aggregates Property Data from public-record and licensed sources covering the markets it serves. These sources may include personal data about property owners, corporate officers, and other individuals named in the underlying records, even though we do not collect this data from those individuals directly. Sources include:

• County clerk and recorder official records, including recorded deeds, mortgages, liens, satisfactions, and other instruments and the parties named on them.
• Property appraiser rolls, including assessed ownership, mailing addresses, and property characteristics maintained by the applicable county property appraiser.
• Geographic information system (GIS) parcel data describing parcel boundaries and related attributes maintained by county or municipal sources.
• Florida Sunbiz, the Florida Division of Corporations' business entity registry, which we use to identify officers, registered agents, and managers of entities that appear as property owners in the Property Data.

How we process this data, including OCR and AI-assisted extraction, and how individuals named in it are treated, are described in the Property Data, Public Records, and Third-Party Sources section and the Individuals Appearing in Public-Records Data section.

From Your Connected Google Workspace Account (Optional)

If you choose to connect your Google account to the Platform, we collect additional personal data from the Google services you enable. This integration is off by default, each feature is individually toggleable, and you may disconnect it at any time in Settings or through your Google account settings. Connected features may include:

• Gmail, to log emails against related CRM records.
• Google Calendar, to log meetings and scheduling information against related CRM records.
• Google Tasks, to sync task items with the CRM.
• Google Contacts, to sync contact information with the CRM.
• Google Drive, to attach files to CRM records.

Our collection and use of data obtained through these connections is subject to the Google API Services Limited Use requirements, described in full in the Google Workspace Integration and Limited Use Disclosure section.

5. How We Use Personal Data

We use personal data we collect to operate the Service, support your Organization's prospecting and CRM work, and maintain a secure and reliable Platform. In particular, we use personal data for the purposes described below.

To Operate the Service and CRM

We use account, Organization, and User Content data to provide the core functionality of the Service: maintaining Organization and user accounts and roles, operating the CRM (notes, tasks, deals, contacts, saved searches, and territory targets), supporting assignment and visibility rules your Organization configures, and matching on and off-market inventory across Users through the deal network.

To Authenticate Accounts

We use account credentials, email verification status, and OAuth tokens to authenticate Users, maintain login sessions, verify email addresses for email and password accounts, and process Google sign-in. Where you connect Google Workspace features, we use the resulting authentication and authorization tokens to enable those features, as described in the Google Workspace Integration and Limited Use Disclosure section.

To Derive Analytics and Signals from Property Data

We use Property Data, including recorded documents processed through OCR and AI models, to derive analytics and signals such as ownership history, recorded mortgages and liens, loan maturity estimates, and pre-foreclosure indicators. These derived figures are estimates generated from available public records and modeling techniques. They are not guarantees of accuracy, completeness, or timeliness, and they are not a substitute for independent verification, title work, or professional advice. Additional detail on sourcing and accuracy limitations appears in the Property Data, Public Records, and Third-Party Sources section and the AI, OCR, and Automated Processing section.

To Send Service and Marketing Communications

We use your contact information to send transactional and service email, including account verification messages, Organization invitations, alerts about targets or records relevant to your Organization, and periodic digests. If you opted in to marketing email at signup, we also send marketing email about product updates and related communications. You may opt out of marketing email at any time by following the unsubscribe instructions in those messages or adjusting your communication preferences in Settings; transactional and service email cannot be turned off while your account remains active, since it relates to core account and security functions.

To Provide Security and Prevent Fraud

We use account activity, authentication events, device and log data, and similar technical information to detect and prevent fraud, unauthorized access, and misuse of the Service; to enforce our Terms of Service; and to protect the integrity of the Platform and the Organizations that rely on it.

To Improve the Service

We use aggregated or de-identified usage data, along with feedback from Users, to monitor performance, diagnose and fix issues, and evaluate and improve existing features and workflows, including features made available through the Beta Program and Experimental Features described elsewhere in this Policy.

6. Legal Bases for Processing

Some Users or Authorized Users may be located in jurisdictions that require us to identify a legal basis for processing personal data. Where that is the case, we rely on one or more of the bases described below. We describe these bases in conservative, general terms rather than adopting the framework of any specific non-U.S. law, and nothing in this section expands the rights described in the Your Rights and Choices section beyond what applicable law requires for a given User. This Privacy Policy itself is governed by the laws of the State of Florida, consistent with the governing law and venue provisions in the Terms of Service.

Contract Performance

We process personal data where necessary to deliver the Service under the Terms and the applicable Order between AIRE LLC and an Organization. This includes creating and administering User accounts, authenticating sign-in, provisioning access within an Organization, operating the CRM features Users rely on for User Content such as notes, tasks, deals, contacts, and saved searches, delivering Property Data and related analytics, and providing optional features a User has affirmatively enabled, such as Google Workspace integration, for the purpose of performing the features described to the User.

Legitimate Interests

We process personal data where necessary for our legitimate business interests, or those of an Organization or a service provider, and where those interests are not overridden by an individual's rights. This includes the following.

• Operating, maintaining, and improving the Platform, including analytics on how the Service is used across Organizations to prioritize features.
• Matching on- and off-market inventory and targets across Users, including the deal network functionality described in the How We Use Personal Data section.
• Securing the Platform, including detecting and preventing fraud, abuse, unauthorized access, and misuse of accounts.
• Aggregating, structuring, and deriving analytics from public-record and licensed property data, as described in the Property Data, Public Records, and Third-Party Sources section, for the purpose of real-estate professional research.
• Responding to support requests, sending non-marketing service communications, and maintaining records of Terms and Privacy Policy acceptance.

Consent

In some circumstances we rely on a User's consent. This includes optional marketing email a User opts into at signup and may opt out of at any time, as described in the How We Use Personal Data section, and the specific Google account scopes a User elects to connect for Gmail, Google Calendar, Google Tasks, Google Contacts, or Google Drive features, as described in the Google Workspace Integration and Limited Use Disclosure section. Each Google feature is individually toggleable, and a User may revoke a Google connection at any time in Settings or through their Google account settings. Where we rely on consent, a User may withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out before the withdrawal, and may limit or disable the corresponding feature going forward.

Legal Obligation

We process personal data where necessary to comply with applicable law, including recordkeeping obligations, tax and accounting requirements, and lawful requests from courts, regulators, or other governmental authorities. This also includes retaining records of Terms and Privacy Policy acceptance, such as timestamp, document version, and IP address, for as long as needed to demonstrate compliance.

Where a User's data protection law recognizes additional or different legal bases than those described above, we will identify and rely on the applicable basis for that User's processing consistent with that law, without altering how we process data for other Users.

7. AI, OCR, and Automated Processing

Propspect uses optical character recognition (OCR) and machine-learning and artificial intelligence models to process recorded documents obtained from public records and licensed data sources, such as mortgages, deeds, and related instruments filed with the county recorder or clerk of court. This processing extracts structured information from otherwise unstructured document images and text so that it can be organized, searched, and presented to Authorized Users as part of the Property Data available on the Service.

How OCR and AI Are Used to Process Recorded Documents

When a recorded document relevant to a property is identified, we use OCR to convert scanned document images into machine-readable text, and we use machine-learning and AI models to interpret that text and extract specific terms. Examples of terms our systems attempt to extract include loan amounts, recording and execution dates, maturity or due dates, parties named on the instrument, and similar recorded-document details. These extracted terms feed the ownership history, mortgage and lien information, loan maturity estimates, and other analytics described in the Property Data, Public Records, and Third-Party Sources section.

Third-Party AI Service Providers

Some OCR and AI processing is performed using third-party AI and machine-learning service providers rather than solely by systems we operate ourselves. Where we use such providers, they process document images and extracted text on our behalf and under contractual restrictions consistent with this Privacy Policy; we do not authorize them to use the data for their own independent purposes. Documents and data processed through these providers remain subject to the data security and retention practices described elsewhere in this Privacy Policy.

AI Outputs Are Estimates and Decision-Support Signals

Because OCR and AI extraction operate on scanned, sometimes low-quality, or inconsistently formatted source documents, extracted terms and any figures or indicators derived from them (including loan amounts, dates, loan maturity estimates, and pre-foreclosure or other prospecting indicators) are estimates. They are provided as decision-support signals intended to help real-estate professionals prioritize research and outreach, not as verified facts. Propspect does not guarantee the accuracy, completeness, or currency of any AI-derived or OCR-derived output, and Authorized Users should independently verify any extracted term against the underlying recorded document, the property appraiser record, or another authoritative source before relying on it.

No Fully Automated Decisions With Legal or Similarly Significant Effects

Propspect does not use AI, OCR, or other automated processing to make decisions that produce legal effects or similarly significant effects concerning individuals without human involvement. Automated extraction and scoring are used to organize and surface information for review by Authorized Users, who are real-estate professionals responsible for how that information is used. Propspect does not use these processes to determine an individual's eligibility for credit, housing, employment, insurance, or any other benefit or service, and does not use them to take any adverse action against an individual. For more on how individuals identified in public-records data are treated, see the Individuals Appearing in Public-Records Data section. For the broader limits on how Property Data and AI outputs may be used, see the Disclaimers: No Brokerage, Legal, Tax, or Investment Advice section.

8. Property Data, Public Records, and Third-Party Sources

In addition to the account and usage information described in the Categories of Personal Data We Collect section, the Service is built on Property Data: public-record and licensed real-estate data that we aggregate from government and commercial sources, together with the analytics we derive from it. This section explains where Property Data comes from, what it may contain, and how it differs from the User Content you and your Organization create in the Platform.

Sources of Property Data

We obtain Property Data from official public records and licensed third-party data providers, including county clerk and recorder official records (such as recorded deeds, mortgages, liens, and other instruments), county property appraiser assessment rolls, geographic information system (GIS) parcel data, and state corporate registries, such as Florida Sunbiz, which we use to identify the registered officers, managers, and agents of corporate property owners. We currently source Property Data for covered markets, presently Miami-Dade and Broward Counties, Florida, and expect the set of covered markets to expand over time.

Personal Data Within Property Data

Because Property Data reflects official records about real property and the entities that own it, it may include personal data about individuals who are not Users of the Service, most notably property owners and the officers, managers, or registered agents of corporate property owners identified in Florida Sunbiz or similar registries. We process this personal data as part of the underlying dataset, not because those individuals have a direct relationship with us. The Individuals Appearing in Public-Records Data section describes this category of data subject in more detail, including how such individuals can contact us.

Property Data is fundamentally different from User Content in how it is made available within the Platform. User Content that your Organization creates, such as notes, tasks, deals, contacts, and saved searches, is scoped to your Organization and is not visible to other Organizations, as described in the Organizations and Multi-Tenant Data Handling section. Property Data is not Organization-specific: because it is drawn from public records and licensed sources rather than created by any one Organization, it is available platform-wide to Authorized Users across Organizations, subject to the access controls of the Service.

Accuracy, Licensing, and Estimates

Property Data, including data obtained under license from third-party providers, may be incomplete, delayed, or contain errors introduced by the original recording office, the data provider, or our own ingestion and normalization processes. Analytics and figures we derive from Property Data, including through the OCR and AI-assisted processing described in the AI, OCR, and Automated Processing section, are estimates and signals intended to support research and prioritization, not verified facts. We do not guarantee the accuracy, completeness, or currency of Property Data or any analytics derived from it, and Property Data should not be relied upon as a substitute for title work, a survey, or advice from a licensed professional, as further described in the Disclaimers section.

Licensed Data Providers

Where we obtain Property Data under license from a third-party data provider rather than directly from a government source, our use and redistribution of that data within the Platform is subject to the terms of our license with that provider. We do not sell Property Data as a standalone product, and Authorized Users may not extract, scrape, or redistribute Property Data outside the Platform except as permitted by the applicable Order or Terms of Service.

9. Individuals Appearing in Public-Records Data

Property Data, as described in the Property Data, Public Records, and Third-Party Sources section, includes information about property owners, corporate officers, registered agents, and other individuals named in the underlying public records and licensed data sources. Many of these individuals have no account with Propspect, have never visited the Service, and are not Users or Authorized Users of the Platform. This section explains, for their benefit as well as our Users' benefit, how and why their information appears in Property Data.

Why individuals appear in Property Data without interacting with us

Propspect aggregates information from county recorder and clerk official records, property appraiser rolls, geographic information system parcel data, and state corporate registries such as the Florida Division of Corporations (Sunbiz), for the markets Propspect covers. These sources routinely identify natural persons in the ordinary course of recording real property transactions and maintaining corporate filings: a deed names its grantor and grantee, a recorded mortgage names its borrower, and a corporate filing names the officers, managers, or registered agent of a limited liability company or corporation that owns real property. Because these records are created and maintained by government offices or licensed data providers independently of Propspect, an individual can appear in Property Data as a named party, officer, or registered agent solely because their name appears in a public record or licensed dataset, regardless of whether they have ever heard of Propspect, created an account, or otherwise interacted with the Service.

Source and legal basis

The information we hold about such individuals is limited to what is contained in the public record or licensed data source itself, together with any analytics Propspect derives from it (for example, ownership tenure, entity affiliations, or estimated loan terms extracted through the OCR and AI processing described in the AI, OCR, and Automated Processing section). We do not solicit this information directly from these individuals, and we do not supplement it with data purchased or scraped from unrelated consumer profiling sources. Our processing of this category of data relies on the public availability of the underlying records and on our legitimate interest, and that of our Users, in supporting lawful commercial real-estate research, consistent with the Legal Bases for Processing section.

Purpose: professional research, not marketing to these individuals

Property Data exists to support real-estate professionals -- our Users -- in researching ownership, transaction history, and financing signals for commercial real estate. It is a research and analytics tool, not a marketing list. We do not use the information of individuals appearing in public-records data to send them advertising, and Propspect does not sell this information to data brokers. Users of the Platform are independently responsible for how they use Property Data in their own outreach or business activities, and for complying with applicable law in doing so.

Accuracy and limitations

Because Property Data is compiled from public records, licensed sources, and automated extraction, it may be incomplete, outdated, or contain errors introduced by the source itself, by data licensing partners, or by our OCR and AI processing. Names, ownership positions, and derived figures should be treated as estimates and signals, not verified facts, and should not be relied upon without independent confirmation.

Questions from individuals named in Property Data

An individual who appears in Property Data and has questions about the information we hold, its source, or how it is used may contact us at [email protected]. We will make reasonable efforts to explain the source of the record in question and, where a record has been mischaracterized or a data source itself has been corrected, to reflect that correction in Property Data. Because much of this information originates in official government records maintained by third parties, we cannot alter or remove the underlying public record itself; corrections to an official record must generally be pursued with the recording office or agency that created it.

10. Organizations and Multi-Tenant Data Handling

The Service is a multi-tenant platform. Every User belongs to an Organization, and access to the Service is granted as an Authorized User of that Organization under an Order. This section explains how data is separated between Organizations, who within an Organization can see what, and where the boundaries of that separation do not apply.

User Content is scoped to your Organization

User Content, including notes, tasks, deals, contacts, saved searches, and similar records that Users create or upload, is associated with the Organization to which the creating User belongs. As a general rule, User Content is visible only to Authorized Users within that same Organization and is not visible to, searchable by, or shared with other Organizations on the platform. We do not disclose one Organization's User Content to another Organization.

Internal visibility is configurable

Within a single Organization, visibility of User Content among that Organization's own members is not fixed by us. An Organization may configure internal workspace settings that control whether a given item of User Content is shared across the Organization or kept private to the User who created it, and may configure assignment rules that determine which members are associated with a particular property, deal, or contact record. Where an Organization configures private or restricted workspace settings, that configuration governs which of the Organization's own members can view particular User Content, subject to the administrative access described below. We rely on the Organization to configure these settings consistent with its own internal policies; we are not responsible for an Organization's choice of visibility or assignment configuration.

Property Data is platform-wide

Property Data is not Organization-specific. Because Property Data is derived from public records and licensed third-party sources rather than submitted by any particular User or Organization, it is available across the platform to Authorized Users generally, as described in the Property Data, Public Records, and Third-Party Sources section. An Organization's configuration of internal visibility settings applies to its own User Content and does not limit or expand any other Organization's access to Property Data.

Organization administrator access

Organization administrators are members of an Organization designated with elevated administrative permissions. Organization administrators can view and manage account information for the members of their own Organization, including inviting and removing Authorized Users, and can access User Content created within their Organization consistent with the Organization's assignment and visibility configuration. Organization administrators do not have access to another Organization's Users, accounts, or User Content. If you are an Authorized User, your Organization administrators may be able to view activity and content you create within the Service as part of managing your Organization's account.

Platform staff access

AIRE LLC personnel and authorized platform staff may access Personal Data and User Content across Organizations as reasonably necessary to operate the Service, including to provide customer support, investigate and resolve technical issues, maintain security and prevent abuse, enforce our Terms of Service, and comply with legal obligations. Such access is limited to what is reasonably needed for these purposes and is not used to disclose one Organization's data to another Organization.

Organization responsibility

An Organization is responsible for the accuracy of the information it provides about its own Authorized Users, for configuring its internal visibility and assignment settings appropriately, and for promptly removing access for members who should no longer have it. If your access to the Service depends on your relationship with an Organization, that Organization's administrators may modify or terminate your access consistent with the Organization's Order and our Terms of Service.

11. Google Workspace Integration and Limited Use Disclosure

The Service offers an optional integration with Google Workspace that lets a User connect their Google account to the Platform. This integration is off by default. It is never enabled automatically, and connecting your Google account is entirely your choice.

What the integration does

If you choose to connect your Google account, Propspect can sync information from the following Google services in order to surface that information alongside the properties, owners, and Organization records you work with in the Service:

• Gmail — logging relevant emails against CRM records such as contacts, deals, or saved searches.
• Google Calendar — logging or displaying meetings and appointments related to CRM records.
• Google Tasks — creating, syncing, or displaying tasks associated with CRM records.
• Google Contacts — matching or importing contact details to enrich CRM contact records.
• Google Drive — attaching or referencing files stored in Drive from within CRM records.

Each of these five features is independently toggleable. Connecting your Google account does not turn all of them on at once, and you may enable only the features you want. You can review, change, or turn off any individual feature at any time in Settings within the Service.

Revoking the connection

You may disconnect your Google account from the Service at any time, either from Settings within the Service or directly from your Google account's third-party app permissions. Revoking access stops Propspect from syncing further data from the disconnected Google service. Content already logged into the Service before revocation (for example, a note created from a synced email) remains part of your Organization's User Content unless separately deleted, subject to the Data Retention section.

Google API Services User Data Policy and Limited Use

Propspect's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Information obtained through the Gmail, Google Calendar, Google Tasks, Google Contacts, and Google Drive integrations is used only to provide and improve the user-facing features described above within the Service.
• Propspect does not use information obtained through these Google integrations to serve advertisements, and does not use it for any advertising purpose.
• Propspect does not sell information obtained through these Google integrations.
• Propspect does not allow human review of this information except: (a) with your affirmative consent for a specific purpose (such as diagnosing a support issue you report), (b) as necessary for security purposes, such as investigating abuse, or (c) to comply with applicable law.
• Propspect does not transfer information obtained through these Google integrations to any other party except as necessary to provide or improve the user-facing features described above, to maintain the security of the Service, or to comply with applicable law, and, where a transfer occurs for those purposes, only to service providers under obligations consistent with this Privacy Policy.

Data received through the Google integration is stored and secured as described in the Data Security section and shared only as described in the Sharing and Disclosure of Personal Data section of this Privacy Policy. Your use of Google services remains subject to Google's own terms and privacy policy, independent of this Privacy Policy.

12. Sharing and Disclosure of Personal Data

We share personal data only as needed to operate the Service, deliver the features described in this Privacy Policy, and meet our legal obligations. We do not sell personal data, and we do not share personal data with third parties for their own independent marketing purposes.

Within Your Organization

Because Propspect is multi-tenant, certain personal data associated with your account and activity is visible to your own Organization. Organization administrators can see the membership of their Organization (names, email addresses, roles, and invitation or waitlist status) and can access User Content created by Authorized Users within that Organization, consistent with the Organization's configured visibility settings, as described in the Organizations and Multi-Tenant Data Handling section. This sharing is limited to your own Organization; it is not shared with other Organizations on the Platform.

Service Providers

We engage third-party service providers to help us operate the Service. These providers process personal data only as necessary to perform their functions for us and are bound by contractual obligations to protect it. Categories of service providers include:

• Cloud hosting, storage, and content delivery providers, which host the Platform, its databases, and stored files.
• Managed database providers, which operate the database infrastructure underlying the Platform.
• Transactional email providers, which deliver account verification, invitation, alert, and digest emails.
• AI/ML processing providers, which perform the OCR and machine-learning processing described in the AI, OCR, and Automated Processing section.
• Property-data and public-records sources, which supply or license the underlying county recorder, property appraiser, GIS, and corporate-registry data described in the Property Data, Public Records, and Third-Party Sources section.
• Analytics providers, which help us understand how the Service is used so we can maintain and improve it.

Personal data processed by these providers is hosted in the United States.

Google Workspace Integration

If you connect your Google account, Propspect shares data with Google, and receives data from Google, only as necessary to provide the Gmail, Google Calendar, Google Tasks, Google Contacts, and Google Drive features you enable, as described in the Google Workspace Integration and Limited Use Disclosure section. Google is named specifically here because Propspect's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Legal Compliance and Safety

We may disclose personal data when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, subpoena, court order, or other legal process; to enforce our Terms of Service or other agreements; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of AIRE LLC, our Users, or others.

Business Transfers

If AIRE LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its business or assets, personal data may be transferred as part of that transaction. Where such a transfer would materially change how your personal data is handled, we will provide notice as required by law.

No Sale of Personal Data

We do not sell personal data to third parties. Where we disclose personal data to the service providers listed above, we do so under contractual terms that limit their use of the data to providing services to us, not for their own independent purposes.

13. Cookies, Tracking Technologies, and Analytics

Propspect is an invite-only, business-to-business platform, not a consumer website, and we do not use cookies or similar technologies to build advertising profiles, serve targeted ads, or track you across other companies' websites or apps. The cookies and related technologies described in this section exist to make the Service work, keep your account secure, and help us understand how Authorized Users use the Service so we can maintain and improve it.

Session and Authentication Cookies

When you sign in to the Service, whether with an email and password or with Google sign-in, we set cookies and comparable browser storage technologies that are necessary for the Service to function. These include session cookies that keep you signed in as you navigate between pages of the Platform, authentication tokens that verify your identity and your Organization membership on each request, and security-related cookies used to protect against unauthorized access, session hijacking, and similar abuse. These technologies are essential to the Service: without them you could not log in, remain authenticated, or access data scoped to your Organization, so they are not subject to a cookie-preference toggle within the Platform. You can still block or delete them through your browser settings, as described below, but doing so will prevent you from using the Service.

We may also use similar local storage mechanisms in your browser to remember short-lived interface state, such as which view or filter you last used on a screen, so the Service feels consistent across a session. This is functional in nature and is not used to track you outside the Service.

Analytics

We use analytics tools to understand how the Service is used in aggregate, for example which features and pages Authorized Users visit, how frequently, and whether a page or workflow is functioning correctly. This usage data helps us prioritize fixes and improvements to the Platform. Analytics processing is handled by service providers acting on our behalf, consistent with the Sharing and Disclosure of Personal Data section, and is not used to serve advertising, build cross-site profiles, or sell information about you. We do not currently use third-party advertising or marketing pixels on the Service.

Where you have connected Google Workspace features such as Gmail, Calendar, Tasks, Contacts, or Drive, that integration operates under the terms described in the Google Workspace Integration and Limited Use Disclosure section rather than through cookies or tracking technologies covered here.

Managing Cookies Through Your Browser

Most browsers let you view, block, delete, or restrict cookies through their settings, and many will alert you when a cookie is being set. Because the Service relies on cookies for authentication and session management, disabling or blocking them will likely prevent you from signing in or will interrupt normal use of the Platform. If you have questions about how cookies or analytics are used in connection with the Service, you can contact us using the details in the How to Contact Us and Complain section.

14. Data Retention

We retain personal data only for as long as reasonably necessary to operate the Service, support the Organization relationship under which you are an Authorized User, comply with our legal and contractual obligations, and resolve disputes. How long a given category of data is kept depends on the nature of the data and the purpose it serves, as described below.

Account and CRM Data

Account information (such as your name, email address, and login credentials) and User Content you or your colleagues create in the Service (notes, tasks, deals, contacts, saved searches, and similar CRM records) are retained for as long as your account remains open and, where your access is provided under an Organization's Order, for as long as that Order or subscription remains active. If your Organization's Order ends or your account is closed, this data is handled as described under Deletion and Anonymization below. Records of internal visibility and assignment configurations follow the same retention treatment as the Organization data they govern.

Property Data

Property Data is maintained on an ongoing basis as a licensed dataset that supports historical analytics across covered markets, independent of any single account or Organization. Because Property Data reflects public records and licensed third-party sources rather than an individual User's account, it is not deleted when a particular User's account or Organization's Order ends; it continues to be maintained, updated, and made available platform-wide as described in the Property Data, Public Records, and Third-Party Sources section and the Individuals Appearing in Public-Records Data section.

Acceptance Records

Records evidencing your acceptance of the Terms of Service and this Privacy Policy, including the document version accepted, the date and time of acceptance, and the associated IP address, are retained for compliance and evidentiary purposes for as long as necessary to demonstrate that acceptance, including after your account is closed, and are not deleted upon account or Organization termination.

How We Determine Retention Periods

• The term of the applicable Order or subscription and whether the Organization's access remains active.
• Whether the data is Property Data maintained as an ongoing licensed dataset rather than data tied to a specific User or Organization.
• Legal, tax, accounting, and recordkeeping obligations applicable to AIRE LLC.
• The need to establish, exercise, or defend legal claims, and applicable statutes of limitation.
• Backup, archival, and technical constraints, and the need to protect the Service against fraud, abuse, and security incidents.

Deletion and Anonymization

When your account is closed or your Organization's Order or subscription ends, we delete or anonymize the account and CRM data associated with that account or Organization within a reasonable period, unless we are required by law or have a legitimate compliance reason to retain it longer, as described above. Anonymization may involve removing direct identifiers while retaining aggregated or de-identified information for analytics and service improvement. Copies of data may persist for a limited time in backup or archival systems until overwritten or destroyed in the ordinary course of business. Property Data and acceptance records are retained as described in this section regardless of the status of any individual account. You may request deletion of certain personal data, subject to the legal and contractual limitations described in the Your Rights and Choices section.

15. Data Security

We use a combination of technical, organizational, and administrative safeguards designed to protect the personal data and Property Data processed through the Service. These measures are proportionate to the nature of the data we handle and the risks associated with a data-intensive, multi-tenant platform, but no security program can eliminate all risk.

Safeguard Categories

Depending on the system involved, our safeguards may include the following categories of measures.

• Encryption in transit for data moving between your browser or device and our servers, and encryption at rest where appropriate for stored data.
• Role-based access controls that limit which platform staff and systems can access personal data and Property Data, consistent with the Organization, administrator, and Authorized User roles described in the Organizations and Multi-Tenant Data Handling section.
• Secured cloud hosting, storage, and content-delivery infrastructure, with logical separation between Organizations' User Content so that one Organization's notes, tasks, deals, contacts, and saved searches are not accessible to another Organization.
• Managed database infrastructure with access restricted to authorized personnel and systems.
• Logging, monitoring, and periodic review of our systems and the service providers described in this Privacy Policy, including cloud hosting, database, email delivery, AI/ML processing, property-data, and analytics providers.

All data we host is hosted in the United States, as described elsewhere in this Privacy Policy.

Document OCR and AI Processing Providers

As described in the AI, OCR, and Automated Processing section, recorded documents and related data are processed using OCR and AI/ML models, including third-party AI service providers, to extract information such as loan amounts and dates. These providers are engaged under agreements that require them to keep the data they process confidential and to use it only to provide the processing services to us, not for their own independent purposes.

Account and Organization Responsibilities

Security also depends on the steps you and your Organization take. You are responsible for maintaining the confidentiality of your account credentials, choosing a strong password, and limiting access to the devices you use to access the Service. Organization administrators are responsible for managing which individuals are invited as Authorized Users and for promptly removing access for individuals who should no longer have it. If you download or export data or files from the Service, you are responsible for storing and disposing of them securely.

You should notify us promptly at [email protected] if you suspect unauthorized access to your account or believe your credentials have been compromised.

No Absolute Guarantee

No method of transmission over the internet, and no method of electronic storage, is completely secure. While we work to protect personal data and Property Data using the measures described above, we cannot guarantee its absolute security, and you provide information to the Service at your own risk.

16. International Data Transfers (If Applicable)

Property Data and the infrastructure that hosts the Service are located in the United States. Propspect currently covers Miami-Dade and Broward Counties, Florida, and the Users and Organizations we serve are, in the ordinary course, based in the United States. As a result, we do not expect international data transfers to arise in the normal operation of the Service, and this section is included for completeness in the event that changes.

Where Personal Data Is Processed and Stored

Personal data collected through the Service, including account and usage data for Users and the Property Data we aggregate and derive analytics from, is processed and stored on servers located in the United States, as described in the Data Security section. Our service providers, including cloud hosting, storage and content delivery, managed database, transactional email, and AI/ML processing providers described in the Sharing and Disclosure of Personal Data section, likewise operate from the United States in connection with the Service.

Accessing the Service From Outside the United States

The Service is designed for real estate professionals working with Property Data covered by Propspect, currently limited to Miami-Dade and Broward Counties, Florida. If a User or an Organization nonetheless accesses or uses the Service from a location outside the United States, personal data submitted through that access will still be transferred to, processed in, and stored in the United States as described above. By accessing the Service from outside the United States, you acknowledge and agree to this transfer and processing of your personal data in the United States, which may have data protection laws that differ from those of the jurisdiction from which you are accessing the Service.

You are responsible for ensuring that your access to and use of the Service from your location complies with any laws applicable to you, including any laws governing the export or transfer of personal data out of your jurisdiction. We do not represent that the Service or the manner in which we process personal data satisfies the requirements of every jurisdiction, and we make no commitment to implement any particular international data transfer mechanism unless and until we determine one is required.

Changes if Our Operations Expand

If Propspect expands to cover additional markets outside the United States, engages service providers located outside the United States, or otherwise begins processing personal data in a manner that involves a cross-border transfer subject to specific legal requirements, we will update this Privacy Policy as described in the Changes to This Privacy Policy section to describe the transfer and any applicable safeguards before it occurs in the ordinary course.

If you have questions about where your personal data is processed or stored, you can contact us using the details in the How to Contact Us and Complain section.

17. Your Rights and Choices

This section describes the choices available to you as a User regarding your account data, your communication preferences, and any optional integrations you have connected to the Service. Because Propspect is a business-to-business platform accessed through an Organization, some of these choices are exercised together with your Organization administrator rather than by contacting us directly.

Access, Correction, and Deletion of Account Data

You may request access to the account and profile data we hold about you, ask us to correct inaccurate or incomplete account data, or request deletion of your account. Where the Service provides in-product tools to review or update your profile information, you may use those tools directly. For requests we cannot fulfill through in-product tools, you may route your request through your Organization administrator, who can manage account settings for members of your Organization, or contact us directly at [email protected]. We may need to verify your identity, or your relationship to the Organization, before completing a request. Deletion of an account does not delete Property Data, which is independently sourced from public records and licensed third-party sources rather than submitted by you, and does not necessarily delete User Content that remains associated with your Organization, as described below and in the Data Retention section.

Marketing Email and Transactional Email

If you opted in to marketing email at signup, you can opt out at any time by following the unsubscribe instructions included in those messages or by updating your communication preferences within the Service. Opting out of marketing email does not affect transactional or service email, such as account verification, Organization invitations, alerts, digests, and other messages related to your account or the operation of the Service, which you will continue to receive because they are necessary to provide the Service to you.

Managing or Revoking the Google Workspace Connection

If you have connected your Google account to the Service, you can review, adjust, or turn off any individual Gmail, Google Calendar, Google Tasks, Google Contacts, or Google Drive feature at any time in Settings within the Service, and you can revoke the connection entirely from Settings or from your Google account's own third-party app permissions, as described in the Google Workspace Integration and Limited Use Disclosure section. Revoking the connection stops further syncing of data from the disconnected Google service but does not automatically delete information already logged into the Service before revocation.

Organization-Owned Content

User Content, such as notes, tasks, deals, contacts, and saved searches, is created within the context of your Organization and is treated as belonging to that Organization, as described in the Organizations and Multi-Tenant Data Handling section. Requests to access, correct, export, or delete User Content, including User Content associated with a departing team member, may need to be directed to your Organization administrator, and may be subject to the Organization's own data-ownership terms under its Order with us. Where an Organization's instructions and a User's individual request conflict, we may follow the Organization's instructions with respect to Organization-owned content, consistent with our Terms of Service.

How to Exercise These Choices

To exercise any of the choices described in this section, start with your Organization administrator if your request concerns Organization-owned User Content or your access as a member of an Organization, or contact us directly at [email protected] for account-level requests or questions we cannot resolve through your Organization. We will respond within a reasonable time and may ask for information to verify your identity and locate your records.

18. Business Use Only and Children's Privacy

Propspect is a business-to-business software and data-intelligence tool for real-estate professionals. It is not a consumer product, and this section describes the intended audience of the Service and how we treat information relating to children.

Business Use Only

The Service is invite-only and is intended solely for use by real-estate professionals and other individuals acting on behalf of a business, in connection with commercial real-estate prospecting, research, and related CRM activity carried out through an Organization. The Service is not directed to consumers and is not intended for personal, household, or non-business use.

To register for or use the Service as a User, you must be at least 18 years old (or the age of majority in your jurisdiction, if higher) and must be using the Service on behalf of, and with authorization from, a business or Organization. By creating an account, you represent that you meet these requirements.

Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal data from children through the Service. If we become aware that we have collected personal data from an individual known to be a child without appropriate authorization, we will take reasonable steps to delete that data. If you believe a child has provided us with personal data, please contact us using the information in the How to Contact Us and Complain section.

Individuals Who Are Not Users

The age and business-use restrictions described in this section apply to Users, meaning individuals who hold an account with the Service. They do not apply to, and are not intended to address, individuals who appear incidentally within Property Data because they are named in public records or licensed data sources, such as property owners or corporate officers. Those individuals are not Users of the Service, have not created an account or agreed to this Privacy Policy, and may include individuals of any age. Our handling of information about such individuals, including how they may contact us with questions, is described in the Individuals Appearing in Public-Records Data section.

19. Beta Program and Experimental Features

From time to time, we may make beta, pilot, preview, or other experimental features or access available on the Platform, whether to all Users, to a specific Organization, or to a limited group of participants. Beta or pilot access may be offered at no charge, including to Organizations that do not otherwise have a paid Order in place, and does not itself create any ongoing entitlement to continued access or to any particular feature.

Additional Data Collected for Beta Features

Beta and pilot features are, by nature, still being evaluated and refined. To support that evaluation, a beta feature may involve collecting additional usage information, diagnostic data, error logs, feedback, or other data beyond what a comparable finished feature would collect, or may process personal data differently than described elsewhere in this Privacy Policy in order to test, debug, and improve the feature. Where a beta feature relies on AI, OCR, or other automated processing, the practices described in the AI, OCR, and Automated Processing section apply, and additional model evaluation or performance monitoring may occur specifically because the feature is in beta.

We use data collected through beta features to identify and fix errors, assess performance and reliability, and decide whether and how a feature should be refined, expanded, or brought out of beta. We apply the same categories of security safeguards described in the Data Security section to beta features, and we retain beta-related data consistent with the Data Retention section, taking into account that experimental data models may be superseded as a feature matures.

This Policy Governs Beta Features

This Privacy Policy governs our handling of personal data in connection with beta and pilot features to the same extent it governs the rest of the Service, unless we provide separate terms specific to a particular beta program at the time you are invited to participate. Participating in a beta or pilot does not reduce the protections described in this Privacy Policy.

Changes to or Discontinuation of Beta Features

Because beta and pilot features are experimental, we may modify, limit, suspend, or discontinue a beta feature, or end a beta program entirely, at any time and without the notice we might otherwise provide for a generally available feature. If we discontinue a beta feature, associated data may be archived, migrated, or deleted as part of winding down the feature. If a change to a beta program requires a material change to how we handle personal data more generally, we will address it through the Changes to This Privacy Policy section.

20. Disclaimers: No Brokerage, Legal, Tax, or Investment Advice

This section applies alongside, and does not limit, the disclaimers set out in the Terms of Service. It addresses how you should understand and use the personal data, analytics, and signals that Propspect makes available.

Propspect Is Not a Brokerage

Propspect is a software and data-intelligence platform for commercial real-estate professionals. It is not a brokerage, and neither AIRE LLC nor Gridline Properties acts as your broker, agent, or fiduciary through the Service. Propspect does not list properties, does not represent buyers or sellers in any transaction, and does not negotiate, prepare, or execute contracts, offers, or closings on behalf of any User or Organization. Your use of the Service does not create a brokerage, agency, or fiduciary relationship between you and Propspect, AIRE LLC, or Gridline Properties.

No Legal, Tax, Investment, or Appraisal Advice

Nothing made available through the Service constitutes legal, tax, investment, financial, or appraisal advice. Property Data, CRM content, and any other information presented in the Service are provided for general informational purposes to support your own independent research and professional judgment. They are not a substitute for advice from a licensed attorney, tax advisor, financial advisor, appraiser, or other qualified professional who can evaluate your specific circumstances. You are solely responsible for any business, investment, legal, or tax decisions you make in connection with your use of the Service, and we encourage you to consult appropriate licensed professionals before acting on any information obtained through the Platform.

Analytics, Signals, and Estimates Are Informational Only

As described in the AI, OCR, and Automated Processing section and the Property Data, Public Records, and Third-Party Sources section, Propspect derives analytics and signals from public-record and licensed data, including ownership history, recorded mortgages and liens, loan maturity estimates, and pre-foreclosure indicators. These outputs, along with any figures extracted from recorded documents through optical character recognition or machine-learning and artificial-intelligence processing, are estimates and probabilistic signals, not verified facts. They may be incomplete, delayed, or inaccurate because of errors or gaps in the underlying source records, limitations of automated extraction, or changes that have not yet been reflected in the source data. You should independently verify any analytic, signal, or estimate against the underlying public record or an appropriate licensed professional before relying on it for a business, legal, or financial decision.

Third-Party Sources and Links

The Service references or links to data-source sites and other third-party resources, such as county recorder or clerk portals, property appraiser websites, GIS systems, and state corporate registries. These sites are operated independently of Propspect and are outside our control. We do not review, endorse, or take responsibility for the content, accuracy, availability, or practices of any third-party site, and your use of them is subject to their own terms and privacy practices, not this Privacy Policy.

No Change to Your Independent Obligations

This section does not limit or expand any obligations you or your Organization may separately owe under real estate, brokerage, licensing, consumer protection, or other applicable law. If you hold a professional license or owe duties to clients under a separate brokerage or agency relationship, those duties exist independently of, and are not satisfied or altered by, your use of the Service. You remain responsible for understanding and complying with the legal and regulatory obligations that apply to your own business.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, the Property Data sources and analytics we offer, our data practices, or applicable law. This section explains how those updates are versioned, how we will notify you, and what continued use of the Service means once an update takes effect.

Versioning and Effective Dates

This Privacy Policy is versioned by date. The version you are reading is version 2026-10-11, effective October 11, 2026. When we make changes, we will assign the revised Privacy Policy a new version date and state the new effective date at the top of the document. Unless we state otherwise, a revised version takes effect, and governs our processing of your personal data, as of its stated effective date.

How We Post Updates

We will post the revised Privacy Policy through the Service and update the version date accordingly. Where changes are significant, we may also provide additional notice, such as an email to the address on your account or an in-app notice at your next login. We are not obligated to notify you individually of every change, but we will always make the current version available through the Service and will not apply material changes retroactively without appropriate notice.

Re-Acceptance

Acceptance of our Terms of Service and this Privacy Policy is recorded per User, as described in the Data Controller and Contact Information section and elsewhere in this Privacy Policy. When we issue a new version of either document, we may require you to re-accept both together, whether covering only the updated document or both documents as a pair, at signup for new Users or at next login for existing Users. If we request re-acceptance, continued access to the Service may be conditioned on that acceptance.

Continued Use

If we do not require an affirmative re-acceptance for a given update, your continued use of the Service after a revised Privacy Policy's effective date constitutes your acceptance of the revised terms, to the extent permitted by applicable law. If you do not agree to a revised Privacy Policy, you should stop using the Service and may close your account as described in the Your Rights and Choices section.

• Each version of this Privacy Policy carries its own version date and effective date.
• Updates are posted through the Service with the revised effective date stated at the top of the document.
• Re-acceptance covering the Terms of Service and this Privacy Policy may be requested at signup or at your next login when either document changes.
• Continued use of the Service after an update's effective date constitutes acceptance of that update.

22. How to Contact Us and Complain

This section explains how to reach us with questions about this Privacy Policy, how to exercise the rights described in the Your Rights and Choices section, and how to submit a complaint about our handling of personal data. It applies both to Users of the Service and to individuals appearing in Property Data whose information we process as described in the Individuals Appearing in Public-Records Data section.

Single Point of Contact

We designate one channel for all privacy-related communications: [email protected]. Whether you are a User with a question about your account data, an Authorized User exercising a right on behalf of your Organization, or an individual who appears in Property Data and has a question about how your information came to be included, this is the address to use. We do not maintain a separate mailing address or phone line for privacy matters, and we ask that you use this email channel rather than general support tools for anything involving personal data.

When you write to us, please include enough detail for us to locate and understand your request or concern, such as the email address associated with your account, the Organization involved, the property or record at issue, or a description of the specific pages or features your question relates to. This helps us respond accurately without unnecessary back-and-forth.

Rights Requests

Requests to access, correct, or delete personal data, to object to a particular use, or to ask questions about the legal bases for our processing should be sent to [email protected]. We will acknowledge your request, may ask you to verify your identity or your connection to the data at issue before acting on it, and will respond within a reasonable time in light of the nature of the request and any applicable legal requirements. Some requests may be limited or declined where the personal data derives from public records or licensed third-party sources, where retention is required to meet a legal or contractual obligation, or where the request conflicts with another User's or Organization's rights, as further described in the Your Rights and Choices section.

Complaints and Internal Review

If you believe we have processed personal data inconsistently with this Privacy Policy, you may submit a complaint to [email protected]. We treat every complaint as a matter to be reviewed internally: it is logged, assigned to a person responsible for privacy matters within our organization, and investigated against the practices described in this Privacy Policy and the underlying facts of your situation. We will communicate the outcome of that review to you directly.

• We will confirm receipt of your complaint and, where needed, ask you to verify your identity or clarify the scope of your concern.
• We will review the relevant account, Organization, or record activity to determine whether our practices were followed correctly.
• We will respond with either a resolution, an explanation of our practices as applied to your situation, or a timeline for further investigation if the matter requires more time.
• If you are not satisfied with our response, you may reply to reopen the matter for further internal review.

This internal review process is our standard mechanism for addressing privacy complaints. Depending on your location, you may also have other avenues available to you under applicable law; nothing in this section is intended to limit any right you may otherwise have.