2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you access the Platform, we automatically collect device and browser information (IP address, browser type and version, operating system, device type and identifiers), usage information (pages and features accessed, time spent on the Platform, click patterns and navigation paths, actions taken), location information (general location based on IP address), and cookies and tracking technologies.

2.3 Information from Third Parties

We may receive information about you from credit bureaus and consumer reporting agencies (Experian, Equifax, TransUnion), identity verification services, background check providers, business information providers (Dun & Bradstreet, LexisNexis), public records and databases, property data providers, other users who refer or invite you, and government agencies and registries.

3.1 Providing and Improving Services

Create and manage your account, process loan applications and facilitate transactions, match borrowers with appropriate lenders based on criteria, enable communication between platform users, process payments and manage subscriptions, verify identity and prevent fraud, provide customer support, improve and optimize the Platform, develop new features and services.

3.2 Identity Verification and Compliance

Verify your identity using SSN, TIN, EIN, and government-issued identification, comply with Know Your Customer (KYC) requirements, comply with Anti-Money Laundering (AML) regulations, conduct background checks as permitted by law, verify professional licenses and credentials, report suspicious activities as required by law.

3.3 Credit and Financial Assessment

Obtain credit reports with your authorization, assess creditworthiness for loan matching purposes, verify income, employment, and asset information, analyze financial statements and tax returns, evaluate property and collateral information.

3.4 Security and Fraud Prevention

Monitor for unauthorized access or activity, detect and prevent fraudulent transactions, enforce our Terms of Service, comply with legal obligations, respond to legal requests and prevent harm, maintain audit trails and access logs.

4.1 With Other Platform Users

Borrowers: Your loan application information, including financial data, tax returns, property information, and supporting documents, may be shared with brokers you engage to represent you, lenders to whom your application is submitted, and third-party service providers involved in the transaction.

Brokers: Your business information may be shared with borrowers you represent, lenders you submit deals to, and other brokers in co-brokerage arrangements (with consent).

Lenders: Your program information, including pricing and underwriting criteria, may be shared with brokers submitting deals to you and borrowers whose applications match your criteria.

4.2 Sharing of Sensitive Financial Information

We share sensitive financial information, including tax identification numbers (SSN, TIN, EIN) with lenders processing your loan application, credit bureaus for credit pulls, identity verification services, and as required for regulatory compliance. Financial statements, tax returns, credit reports, and bank statements are shared with lenders evaluating your application and their designated underwriters.

4.3 With Service Providers

We share information with third-party vendors who perform services on our behalf, including cloud hosting and data storage providers, payment processors, email and communication services, analytics providers, customer support platforms, identity verification services, credit reporting agencies, background check providers, document storage and management services, and security and fraud prevention services. All service providers are bound by contractual obligations to protect your information.

4.4 For Legal and Compliance Purposes

We may disclose information to comply with applicable laws, regulations, or legal processes, to respond to lawful requests from government authorities, to comply with financial regulatory requirements (FinCEN, state regulators), to enforce our Terms of Service and other agreements, to protect our rights, privacy, safety, or property, to protect against fraud or other illegal activity, in connection with legal proceedings or investigations, and to report suspicious activities under the Bank Secrecy Act.

5.1 Enhanced Security for Tax Identification Numbers

We implement enhanced security measures for Social Security Numbers, Tax Identification Numbers, and Employer Identification Numbers, including encryption at rest using AES-256 encryption, encryption in transit using TLS 1.2 or higher, access controls limiting access to authorized personnel only, audit logging of all access to tax identification numbers, tokenization where possible to minimize exposure, and secure deletion when no longer needed.

5.2 Protection of Financial Documents

Financial statements, tax returns, bank statements, and other sensitive financial documents are protected by secure document storage with encryption, role-based access controls, watermarking and access tracking, secure transmission protocols, and regular security assessments.

5.3 Protection of Deal and Pricing Information

Confidential deal information, including interest rates, pricing structures, and commission arrangements, is protected by access restrictions to parties involved in specific transactions, confidentiality agreements with all Platform users, audit trails for access to pricing information, and prohibition on bulk download or export of pricing data.

6.1 Technical Safeguards

Encryption of data in transit (TLS 1.2+) and at rest (AES-256), secure authentication protocols including multi-factor authentication, intrusion detection and prevention systems, regular vulnerability assessments and penetration testing, web application firewalls, DDoS protection, and secure coding practices.

6.2 Administrative Safeguards

Employee background checks, security awareness training, access controls and least-privilege principles, incident response procedures, regular security audits, vendor security assessments, and data classification policies.

6.3 Limitations

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

7.1 Specific Retention Periods

7.2 Secure Deletion

When information is no longer needed, we will securely delete or anonymize it using industry-standard methods.

8.1 Account Information

You may access, update, or correct your account information at any time through your account settings or by contacting us at support@propertycapital.ai.

8.2 Communication Preferences

You may opt out of marketing communications by clicking the "unsubscribe" link in marketing emails, adjusting your notification settings in your account, or contacting us at support@propertycapital.ai. Note that you may still receive transactional and service-related communications.

8.3 Account Deletion

You may request deletion of your account by contacting us at support@propertycapital.ai. Please note that certain information may be retained for legal or compliance purposes, information shared with other users or third parties may not be retrievable, and deletion requests may take up to thirty (30) days to process.

8.4 Data Access and Portability

You may request a copy of the personal information we hold about you by contacting us at support@propertycapital.ai. We will provide the information in a commonly used, machine-readable format where technically feasible.

9.1 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell personal information, but you may opt out of sharing for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: Request that we limit use of sensitive personal information to purposes necessary to provide services
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

9.2 Virginia, Colorado, Connecticut, and Utah Residents

Residents of these states may have similar rights under their respective privacy laws, including rights to access, delete, correct, and opt out of certain processing. Please contact us to exercise any applicable rights.

10.1 Categories of Nonpublic Personal Information

We collect the following categories of nonpublic personal information: information you provide on applications (name, address, SSN, income, assets), information about your transactions with us or others, and information from consumer reporting agencies.

10.2 Opt-Out Rights

You have the right to opt out of certain information sharing. To opt out, contact us at support@propertycapital.ai.

10.3 Protection of Information

We maintain physical, electronic, and procedural safeguards that comply with federal regulations to guard your nonpublic personal information.