Privacy Policy

• Account Information: Name, email address, and authentication credentials when you register.
• Property Data: Property addresses, purchase prices, rehab budgets, and other real estate financial inputs you enter for analysis.
• Deal Notes & Documents: Any notes, labels, or documents you attach to your deals.
• Offer & Pipeline Data: Offer amounts, submission dates, pipeline stages, and negotiation notes you log in the Offers Hub.
• Appointment & Scheduling Data: Event types, dates, times, and attendee email addresses you enter when scheduling property visits, inspections, or closing events.
• Contractor Communications: Text messages, photos, voice recordings, change order requests, and draw-checklist updates you exchange with contractors via the Contractor Portal. Contractors you invite will also contribute content to these threads.
• Bid Data: Scope of work, line-item costs, trade categories, and contractor contact details submitted through bid requests.
• Outreach Emails: Recipient email addresses, subject lines, and message body you compose when sending offer letters or deal summaries to agents or partners.
• Communications: Information you provide when contacting us for support.

• Device & Browser Data: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, features used, timestamps, and interaction patterns. If you opt in to analytics, this also includes session recordings (replays of your on-screen interactions, with all form inputs masked).
• Cookies & Similar Technologies: We use strictly-necessary cookies and local storage for authentication, security, and saving your preferences (these cannot be disabled), and — only if you opt in via the cookie banner — analytics cookies (PostHog) to help us improve the Service. We do not use marketing or advertising cookies. See our Cookie Policy for the full list and controls.
• Location Data: Approximate location derived from your IP address (not precise GPS).
• Media Metadata: File sizes and durations of photos and voice recordings uploaded via the Contractor Portal.

Data shared: Property addresses you enter for analysis.
Purpose: To retrieve property details, rental comparable data, rent estimates, and market rental rates for your property analysis.
Provider privacy policy: rentcast.io/privacy

Data shared: Property details, financial inputs, and deal parameters you provide for AI analysis.
Purpose: To generate AI-powered deal analysis, risk assessments, market insights, and investment recommendations using Anthropic's Claude models.
Important: Data submitted through Anthropic's API is processed under its commercial terms and is not used to train Anthropic's models.
Provider privacy policy: anthropic.com/legal/privacy

Data shared: Event title (property address), event type, start/end times, and attendee email addresses for appointments you create in REDA.
Purpose: To create, update, or delete calendar events in your Google Calendar when you use the scheduling feature and have authorized the Google Calendar integration.
Scope: REDA requests the Google Calendar events scope, which Google grants as combined read-and-write access to calendar events. In practice REDA only creates, updates, and deletes the appointments you schedule through REDA; it does not read, display, or otherwise use your other calendar events.
Provider privacy policy: policies.google.com/privacy
Limited Use: REDA's access to, use of, and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. REDA does not use Google Calendar data for advertising, does not sell it, and does not allow humans to read it except for security purposes, to comply with applicable law, or with your explicit consent.

Data shared: Recipient email addresses, subject lines, and message content for outreach and bid emails you send through the Service.
Purpose: To deliver offer letters, deal-summary emails, and contractor bid requests on your behalf.
Provider privacy policy: resend.com/legal/privacy-policy

Data shared: Approximate geographic coordinates derived from a property address.
Purpose: To determine the census tract for a property so we can filter comparable sales and rentals to the correct geographic area. This is a free U.S. government API.

Data shared: The listing agent's name and brokerage for a property you are analyzing.
Purpose: To look up the listing agent's business contact email (a "1-click contact enrichment" used only when you request it) so you can reach out about a deal. We do not request personal or unverified email addresses.
Provider privacy policy: apollo.io/privacy-policy

Data shared: The property address you enter.
Purpose: To retrieve a street-level property image and map view for the property.
Provider privacy policy: policies.google.com/privacy

Data shared: Product-usage events (pages visited, features used, timestamps), associated device/browser data, and session recordings (replays of your on-screen interactions, with all form inputs masked) — only if you opt in to analytics via the cookie banner.
Purpose: To understand how the Service is used and to improve it. Not used for third-party advertising.
Provider privacy policy: posthog.com/privacy

Data shared: Your IP address and the map area being viewed when you open the pipeline map. No deal data, addresses, or account information is sent.
Purpose: To serve the base map tiles used to display your deals on a map.
Provider privacy policy: carto.com/privacy

Data shared: A property's address or its approximate map coordinates. When you open a property's location or neighborhood analysis, your browser contacts most of these providers directly, so your IP address is visible to them. No account information or deal financials are sent.
Purpose: To convert addresses into map coordinates (geocoding) and to retrieve neighborhood context — flood-zone, census/demographic, employment, and nearby-amenity data — for the property you are analyzing. These are free public, government, or open-data services.
Providers: OpenStreetMap / Nominatim and Photon (operated by Komoot) for address geocoding; the U.S. Census Bureau (geocoder and American Community Survey) for census and demographic data; FEMA (National Flood Hazard Layer) for flood-zone data; the U.S. Bureau of Labor Statistics for employment data; and OpenStreetMap Overpass for nearby amenities.
Provider privacy policies: OpenStreetMap, Komoot. U.S. government APIs (Census, FEMA, BLS) are subject to their respective federal privacy notices.

REDA's frontend is hosted on Hetzner infrastructure. Your account, authentication, file uploads, and all entity data (deals, offers, appointments, reminders, contractor messages, bids, and shared deal snapshots) are stored and processed using Supabase (a managed PostgreSQL database, authentication, file storage, and serverless functions platform). We use PostHog for product analytics to understand how the Service is used and to improve it.

Cross-border transfers: REDA analyzes United States real estate, but our service providers operate globally and the operator administers the Service from Israel. As a result, your data may be processed and stored outside your country of residence — specifically in the United States (Anthropic, Apollo, Resend, PostHog, and Google), the European Union / Germany (Hetzner), and accessed for administration from Israel. By using the Service, you consent to this cross-border processing, transfer, and storage of your data outside your country of residence.

Retention period: We retain your account and the data associated with it (deals, offers, appointments, reminders, contractor messages, bids, shared snapshots, listing-agent contact results, and outreach/bid email logs) for as long as your account is active. You may delete individual deals or records from within the app at any time, or request full account deletion via the contact details in Section 9.

Upon account deletion, your data is immediately removed from the active database. Residual copies may persist in encrypted, automated backups for up to thirty (30) days before they are permanently destroyed in the ordinary backup-rotation cycle. Certain non-sensitive preferences (theme, cookie consent, in-flight UI state) are also cached in your browser's localStorage and are cleared when you sign out or clear your browser storage.