Privacy Policy

• Account Information: Name, email address, and authentication credentials when you register.
• Property Data: Property addresses, purchase prices, rehab budgets, and other real estate financial inputs you enter for analysis.
• Deal Notes & Documents: Any notes, labels, or documents you attach to your deals.
• Offer & Pipeline Data: Offer amounts, submission dates, pipeline stages, and negotiation notes you log in the Offers Hub.
• Appointment & Scheduling Data: Event types, dates, times, and attendee email addresses you enter when scheduling property visits, inspections, or closing events.
• Contractor Communications: Text messages, photos, voice recordings, change order requests, and draw-checklist updates you exchange with contractors via the Contractor Portal. Contractors you invite will also contribute content to these threads.
• Bid Data: Scope of work, line-item costs, trade categories, and contractor contact details submitted through bid requests.
• Outreach Emails: Recipient email addresses, subject lines, and message body you compose when sending offer letters or deal summaries to agents or partners.
• Billing Information: When you subscribe or buy a credit pack: your name, email, the plan or pack, amounts, dates and receipts. Card details are entered on our payment provider's secure page and are never stored by REDA.
• Communications: Information you provide when contacting us for support.

• Device & Browser Data: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, features used, timestamps, and interaction patterns. If you opt in to analytics, this also includes session recordings (replays of your on-screen interactions, with all form inputs masked).
• Cookies & Similar Technologies: We use strictly-necessary cookies and local storage for authentication, security, and saving your preferences (these cannot be disabled), and — only if you opt in via the cookie banner — analytics cookies (PostHog) to help us improve the Service, and marketing cookies (the Meta Pixel) to measure our ads. Both are off unless you turn them on. See our Cookie Policy for the full list and controls.
• Ad Attribution: If you arrive through one of our ad or campaign links, we save that link's campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content, and the fbclid / gclid click identifiers), the page you landed on and the referring site, together with your account — the first such link only — to measure which campaigns bring users.
• Location Data: Approximate location derived from your IP address (not precise GPS).
• Media Metadata: File sizes and durations of photos and voice recordings uploaded via the Contractor Portal.

Data shared: Property addresses you enter for analysis.
Purpose: To retrieve property details, rental comparable data, rent estimates, and market rental rates for your property analysis.
Provider privacy policy: rentcast.io/privacy

Data shared: Property details, financial inputs, and deal parameters you provide for AI analysis.
Purpose: To generate AI-powered deal analysis, risk assessments, market insights, and investment recommendations using Anthropic's Claude models.
Important: Data submitted through Anthropic's API is processed under its commercial terms and is not used to train Anthropic's models.
Provider privacy policy: anthropic.com/legal/privacy

Data shared: Event title (property address), event type, start/end times, and attendee email addresses for appointments you create in REDA.
Purpose: To create, update, or delete calendar events in your Google Calendar when you use the scheduling feature and have authorized the Google Calendar integration.
Scope: REDA requests the Google Calendar events scope, which Google grants as combined read-and-write access to calendar events. In practice REDA only creates, updates, and deletes the appointments you schedule through REDA; it does not read, display, or otherwise use your other calendar events.
Provider privacy policy: policies.google.com/privacy
Limited Use: REDA's access to, use of, and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. REDA does not use Google Calendar data for advertising, does not sell it, and does not allow humans to read it except for security purposes, to comply with applicable law, or with your explicit consent.

Data shared: Recipient email addresses, subject lines, and message content for outreach and bid emails you send through the Service.
Purpose: To deliver offer letters, deal-summary emails, and contractor bid requests on your behalf.
Provider privacy policy: resend.com/legal/privacy-policy

Data shared: Approximate geographic coordinates derived from a property address.
Purpose: To determine the census tract for a property so we can filter comparable sales and rentals to the correct geographic area. This is a free U.S. government API.

Data shared: The listing agent's name and brokerage for a property you are analyzing.
Purpose: To look up the listing agent's business contact email (a "1-click contact enrichment" used only when you request it) so you can reach out about a deal. We do not request personal or unverified email addresses.
Provider privacy policy: apollo.io/privacy-policy

Data shared: The property address you enter.
Purpose: To retrieve a street-level property image and map view for the property.
Provider privacy policy: policies.google.com/privacy

Data shared: Product-usage events (pages visited, features used, timestamps), associated device/browser data, and session recordings (replays of your on-screen interactions, with all form inputs masked) — only if you opt in to analytics via the cookie banner.
Purpose: To understand how the Service is used and to improve it. Not used for third-party advertising.
Provider privacy policy: posthog.com/privacy

Data shared: Your IP address and the map area being viewed whenever a map is shown (the pipeline map, property maps, and comparable-sales maps); and the address text you type into an address field, so matching U.S. addresses can be suggested. No deal financials or account information is sent.
Purpose: To serve the base map tiles behind every map in the Service, and to suggest complete, correctly spelled addresses as you type. If Mapbox is unavailable, map tiles are loaded from OpenStreetMap instead, which receives the same IP address and map-area information.
Provider privacy policy: mapbox.com/legal/privacy

Data shared: A property's address or its approximate map coordinates. When you open a property's location or neighborhood analysis, your browser contacts most of these providers directly, so your IP address is visible to them. No account information or deal financials are sent.
Purpose: To convert addresses into map coordinates (geocoding) and to retrieve neighborhood context — flood-zone, census/demographic, employment, and nearby-amenity data — for the property you are analyzing. These are free public, government, or open-data services.
Providers: OpenStreetMap / Nominatim and Photon (operated by Komoot) for address geocoding; the U.S. Census Bureau (geocoder and American Community Survey) for census and demographic data; FEMA (National Flood Hazard Layer) for flood-zone data; the U.S. Bureau of Labor Statistics for employment data; and OpenStreetMap Overpass for nearby amenities.
Provider privacy policies: OpenStreetMap, Komoot. U.S. government APIs (Census, FEMA, BLS) are subject to their respective federal privacy notices.

Where: both the REDA app (app.redainvest.com) and our website (redainvest.com), each with its own cookie banner.
Data shared: Only if you opt in to marketing cookies via the cookie banner: the pages you visit, the fact that you created an account, started a free trial or paid for a subscription (with the plan, amount and currency), and associated device/browser data (such as IP address, browser type, and Meta cookie identifiers). Pages whose address contains private links or tokens are excluded, and no deal data, property addresses, or form contents are sent.
Server-side purchase record: When you pay for a subscription after opting in to marketing cookies, our servers also send that purchase directly to Meta (Conversions API), so it is counted even if your browser blocks the Pixel: the plan, amount and currency; your email address and an account identifier, both irreversibly hashed (SHA-256) before sending; the IP address and browser type of the device that started the checkout; and Meta's cookie identifiers. It shares an identifier with the browser event so Meta counts the purchase once. If you did not opt in to marketing cookies, nothing about the purchase is sent to Meta. We delete the email address, IP address, browser type and cookie identifiers from our record of the event once it has been sent.
Purpose: To measure the effectiveness of REDA's ads on Facebook and Instagram and to help Meta show those ads to relevant audiences. Meta may combine this data with information it holds about you under its own privacy policy.
Provider privacy policy: facebook.com/privacy/policy

Data shared: Your name, email, workspace identifier, the plan or credit pack you buy, amounts and dates. Your card details go directly to CHING's hosted payment page and are not stored by REDA.
Purpose: To charge subscriptions and credit packs, keep the card on file for renewals, and issue receipts. Payments are processed by our payment provider CHING and collected on behalf of Michaelson Group LLC by its Israeli billing affiliate, which issues the receipt and keeps billing records as required by tax law.
Location: Israel.
Provider website: ching.co.il

Data shared: Replies that recipients send to offer emails sent through REDA — the sender's email address and the reply content.
Purpose: To receive those replies and show them to you next to the offer.
Provider privacy policy: twilio.com/legal/privacy

Data shared: The property address or area you analyze (no account information or deal financials). Requests are sent by our servers through a relay server we operate in Germany (Hetzner).
Purpose: To retrieve recent sales, listing details and photos used for comparable-sales and value estimates.
Provider privacy policy: rapidapi.com/privacy

Data shared: Only if you accept analytics cookies on redainvest.com: pages viewed, how you arrived (for example an ad or a search), and device/browser data including your IP address.
Purpose: To understand how visitors use our marketing website. Not used in the REDA app.
Provider privacy policy: policies.google.com/privacy

Data shared: Your IP address and browser information, when your browser loads these files.
Purpose: Google Fonts (the app's typeface, on every page), Unsplash (a cover image in generated deal PDFs) and unpkg (map marker icons).
Provider privacy policies: Google, Unsplash, unpkg (Cloudflare)

REDA's frontend is hosted on Hetzner infrastructure. Your account, authentication, file uploads, and all entity data (deals, offers, appointments, reminders, contractor messages, bids, and shared deal snapshots) are stored and processed using Supabase (a managed PostgreSQL database, authentication, file storage, and serverless functions platform) in its Frankfurt, Germany (EU) region. The web application is served from Hetzner in Nuremberg, Germany. Uploaded files (documents, photos, proof of funds) are stored privately and can be opened only by members of the workspace they belong to (or, for personal files such as proof of funds, only by you). We use PostHog for product analytics to understand how the Service is used and to improve it.

Cross-border transfers: REDA analyzes United States real estate, and our service providers operate in several countries. Your data may therefore be processed and stored outside your country of residence — in the European Union / Germany (Supabase, Hetzner, our Zillow relay), the United States (Anthropic, Rentcast, Zillow/RapidAPI, Mapbox, Apollo, Resend, SendGrid, PostHog, Google, the U.S. government data services, and — if you opt in to marketing cookies — Meta), and Israel (CHING and our billing affiliate, for payments and receipts; and administration and support of the Service). By using the Service, you consent to this cross-border processing, transfer, and storage of your data outside your country of residence.

Retention period: We retain your account and the data associated with it (deals, offers, appointments, reminders, contractor messages, bids, shared snapshots, listing-agent contact results, and outreach/bid email logs) for as long as your account is active. You may delete individual deals or records from within the app at any time, and download all your data or delete your whole account yourself in Settings → Data (or ask us via the contact details in Section 9).

Billing records (amounts, dates, receipts) are kept for as long as tax and accounting law requires, even after an account is deleted.

When you delete your account we also keep, without your name or email where possible: records of your acceptance of our Terms and this Policy (to show what was agreed and when); a key derived from your email that only prevents a second free trial; and usage-cost records that no longer identify you. Deals you added to another member's team workspace belong to that team and stay there, with your name removed.

Upon account deletion, your data is immediately removed from the active database. Residual copies may persist in encrypted, automated backups for up to thirty (30) days before they are permanently destroyed in the ordinary backup-rotation cycle. Certain non-sensitive preferences (theme, cookie consent, in-flight UI state) are also cached in your browser's localStorage and are cleared when you sign out or clear your browser storage.