Privacy Policy

1. Introduction

Welcome to RE Flip Finder ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate investment analysis platform (the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

Important: RE Flip Finder is a software platform, not a licensed real estate broker. We provide analysis tools only—not professional appraisals, contractor services, investment advice, or licensed real estate services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Use our Service
• Contact us for support
• Subscribe to our newsletter or marketing communications
• Join our waitlist or early-access list
• Request free access to Market Explorer by submitting your email address

This information may include:

• Name and contact information (email address, phone number)
• Company name and business details
• Account credentials (username and password)
• Property information and investment data you input into the system
• Email and SMS configuration data (SMTP credentials, API keys - stored encrypted)

2.2 Automatically Collected Information

When you access the Service, we may automatically collect certain information, including:

• Log data (IP address, browser type, pages visited, time spent)
• Device information (operating system, device identifiers)
• Usage data (features used, interactions with the Service)
• Cookies (used after you log in for session management, and after you submit your email to access Market Explorer; see Section 8)

2.3 Categories of Personal Information Collected

For transparency, here are the categories of personal information we collect from you (our users):

• Identifiers: Name, email address, phone number, username, IP address
• Account credentials: Encrypted passwords
• Commercial information: Subscription plan, payment history (processed by PayPal — we do not store full payment card numbers)
• Professional/employment information: Company name, real estate license number (if provided)
• Internet/network activity: Pages visited, features used, browser type, device information
• Geolocation data: Approximate location inferred from IP address; target market locations you enter
• Electronic credentials (encrypted): SMTP settings, SMS API keys, OAuth tokens — stored encrypted and used only to send messages on your behalf
• User-generated content: Property notes, deal data, CRM records, workflows you create

2.4 CRM Lead Data (Third-Party Personal Information)

The Service includes a CRM (Customer Relationship Management) feature that allows you to store contact information about real estate leads — property owners, sellers, or other individuals you work with. This data is entered by you; we do not independently collect or source it.

Your responsibility: By entering third-party personal information (such as names, phone numbers, and email addresses) into our CRM, you represent and warrant that:

• You have obtained any required consent to contact those individuals through the channels you intend to use (phone, SMS, email)
• Your use of that data complies with all applicable laws, including TCPA, CAN-SPAM, and any applicable state privacy laws
• You will honor any opt-out or do-not-contact requests from those individuals

We store this data on your behalf as a data processor. We do not use your lead contacts' information for our own marketing, nor do we sell or share it with third parties except as required by law or to provide the Service (e.g., your configured SMS/email provider to send messages at your direction).

2.5 Third-Party Services

Our Service may integrate with third-party services, including:

• Google OAuth: For email integration and authentication
• Property Data Providers: For real estate market data, including:
  • On-market property listings (publicly available information)
  • Market comparables and recent sales data
  • Property characteristics and features
• Email Services: For sending notifications via your configured email provider
• SMS Services: For sending text messages via your configured SMS provider

Note: We collect and process property data from publicly available sources, public APIs (Realtor.com, Zillow), and licensed data providers. We do not have access to or use proprietary listing databases.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Improve, personalize, and expand the Service
• Understand and analyze how you use the Service
• Develop new features and functionality
• Communicate with you for customer service, updates, and marketing
• Send you emails and SMS messages through your configured providers
• Process your transactions and manage your account
• Find and prevent fraud and security issues
• Comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All sensitive data (passwords, API keys, OAuth tokens) is encrypted using AES-256-GCM encryption
• Secure Authentication: Passwords are hashed using bcrypt
• Access Controls: Role-based access control (RBAC) limits data access
• Regular Security Updates: We keep our systems updated with security patches
• Database Security: MySQL databases with secure configurations

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

4A. Data Breach Notification

In the event of a security incident that results in unauthorized access to, or disclosure of, your personal information, we will:

• Investigate promptly. Upon becoming aware of a potential breach, we will conduct an investigation to determine the scope and impact.
• Notify affected users. If we determine that a breach is likely to result in a risk to your rights and freedoms, we will notify affected users by email to their registered address within 72 hours of becoming aware of the breach (or as soon as reasonably practicable), unless the data was encrypted and the key was not compromised.
• Notify authorities. Where required by applicable law (e.g., California Civil Code § 1798.82, GDPR Article 33), we will notify relevant regulatory authorities within the legally required timeframe.
• Provide information. Breach notifications will describe the nature of the incident, the categories of data affected, what we are doing to address the breach, and recommended steps you can take to protect yourself.

To report a suspected security vulnerability or incident, contact us immediately at: support@reflipfinder.com with "Security Issue" in the subject line.

5. Data Sharing and Disclosure

5.1 We Do Not Sell or Share Your Data

We do not sell, trade, rent, or share your personal information with third parties for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

5.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Cloud hosting providers
• Email and SMS delivery services (using your configured credentials)
• Analytics providers
• Payment processors

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us using the information provided below. We will respond within 45 days of a verifiable request (with a possible 45-day extension if reasonably necessary).

6A. California Residents — Your CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights with respect to your personal information. This section supplements the rest of this Privacy Policy and applies solely to California residents.

6A.1 Rights Under CCPA/CPRA

California residents have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the business purpose for collection, and the categories of third parties with whom we share it.
• Delete: Request deletion of personal information we have collected from you, subject to certain exceptions (e.g., information needed to complete a transaction, detect fraud, or comply with a legal obligation).
• Correct: Request correction of inaccurate personal information.
• Opt-Out of Sale or Sharing: Opt out of the sale or sharing of your personal information. We do not sell or share personal information as defined under CCPA/CPRA. No opt-out action is required.
• Limit Use of Sensitive Personal Information: If we use "sensitive personal information" (as defined under CPRA) for purposes beyond those permitted by law, you may direct us to limit such use. We do not use sensitive personal information for any purpose other than providing the Service.
• Non-Discrimination: We will not discriminate against you for exercising any of these rights. We will not deny you services, charge different prices, or provide different quality of service because you exercised your CCPA rights.

6A.2 Categories of Personal Information — Last 12 Months

In the last 12 months, we have collected the following categories of personal information from users:

• Identifiers (name, email, IP address)
• Commercial information (subscription and transaction history)
• Internet or other electronic network activity (usage data, log data)
• Professional or employment-related information (company, license details if voluntarily provided)
• Inferences drawn from the above to understand user preferences

We do not collect or process sensitive personal information (such as social security numbers, financial account numbers, precise geolocation, racial or ethnic origin, biometric data, or health information) in the course of providing the Service.

6A.3 How to Exercise Your California Rights

To submit a verifiable consumer request, contact us at:

• Email: privacy@reflipfinder.com or support@reflipfinder.com
• Subject line: "California Privacy Rights Request"

We will need to verify your identity before processing your request (e.g., by confirming your email address and account details). We will respond within 45 days; if we need more time, we will notify you. You may designate an authorized agent to make a request on your behalf; the agent must provide written authorization signed by you.

6A.4 "Do Not Sell or Share My Personal Information"

We do not sell or share your personal information with third parties for cross-context behavioral advertising. Therefore, no opt-out mechanism is required. If our practices change, we will update this Privacy Policy and provide a mechanism to opt out at that time.

6A.5 Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will delete or de-identify your personal information within 90 days, except for records we are required by law to retain (e.g., billing records for tax purposes, which are retained for 7 years).

7. Email and SMS Configuration

Our Service allows you to configure your own email (SMTP or Gmail OAuth) and SMS providers (Twilio, Salesmsg, TextMagic, etc.) to send communications. Please note:

• Your email and SMS credentials are encrypted and stored securely
• We do not use these credentials for any purpose other than sending messages on your behalf
• You are responsible for complying with your email/SMS provider's terms of service
• You can update or delete your credentials at any time in your profile settings

8. Cookies and Tracking Technologies

Home page: Our public home page does not use cookies. We use only localStorage for session-related data (e.g., redirect detection). No cookies are set when you visit the home page before logging in.

After login: Once you log in, we use cookies to store your authentication token for session management. This is essential for the Service to function.

Market Explorer (free tool): When you submit your email address to access city and ZIP-level data in our free Market Explorer tool, we set a cookie named market_explorer_access on your browser. This cookie is valid for 30 days and allows you to continue viewing the data without re-entering your email on return visits. This cookie contains only the value "granted" — it does not store your email address or any personally identifiable information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may need to re-enter your email each time you visit Market Explorer.

8A. Market Explorer — Email Collection & Opt-Out

Our free Market Explorer tool collects your email address to unlock city and ZIP-level real estate market data. By submitting your email, you agree to receive a one-time welcome email confirming your access, along with occasional product-related messages from RE Flip Finder.

What we collect: Your email address and the market locations you were viewing at the time of submission (e.g., "Hillsborough County, FL"). We do not collect your name, phone number, payment information, or any other personal details through this form.

How we use it: We use your email to send you a welcome message confirming access, and to occasionally inform you about relevant features or updates to RE Flip Finder. We do not sell or share your email address with third parties.

Unsubscribe / opt-out: Every email we send includes a one-click unsubscribe link at the bottom. You can also request removal by emailing support@reflipfinder.com with "Unsubscribe" in the subject line. We will process opt-out requests within 10 business days as required by the CAN-SPAM Act.

Data retention: If you unsubscribe, we retain your email address solely to honor your opt-out preference and prevent future marketing messages from being sent to you. We do not use it for any other purpose after unsubscription.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Important Disclaimers

RE Flip Finder is not a licensed real estate broker. We provide software tools only. All real estate transactions must be conducted through independent licensed real estate professionals.

Property estimates are not guarantees. ARV estimates, rehab costs, profit projections, and ROI calculations are software-generated estimates that may vary significantly from actual results. Always obtain written bids from licensed contractors and consult with licensed real estate appraisers before making purchase decisions.

13. Contact Us