Privacy Policy

1. Introduction and Scope

Accurit AI, Inc. ("Accurit AI", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and protect information obtained through the Accurit AI platform (the "Platform"), including our website at accurit.ai, web application, mobile applications, APIs, and all related services.

This Policy applies to all users of the Platform, including registered account holders, free trial participants, visitors to our website, and any individuals whose personal information is processed through the Platform. By accessing or using the Platform, you consent to the practices described in this Policy.

If you are a resident of California, the European Economic Area, or the United Kingdom, please refer to the jurisdiction-specific provisions in Section 11 of this Policy for additional rights and disclosures applicable to you.

2. Information We Collect

We collect information from multiple sources in order to provide, improve, and protect the Platform. The categories of information we collect include:

2.1 Information You Provide Directly

• Account Registration Data: Full name, email address, phone number, company name, job title, physical address, and professional role/persona selection
• Profile Information: Profile photographs, biographical information, investment preferences, target markets, and deal criteria configurations
• Payment Information: Credit card numbers, billing addresses, and related payment details (processed through PCI DSS-compliant third-party payment processors; Accurit AI does not store full credit card numbers on its servers)
• Uploaded Documents: PDFs, images, spreadsheets, offering memoranda, rent rolls, operating statements, and any other files you upload for analysis
• Communications: Messages sent through our support channels, feedback submissions, survey responses, and any other correspondence with Accurit AI
• Team and Collaboration Data: Email addresses and roles of team members you invite to your organization's account

2.2 Information Collected Automatically

• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, language preferences, and referring URLs
• Usage Data: Pages visited, features used, deals viewed and analyzed, search queries, agent configurations, time spent on the Platform, click patterns, and interaction sequences
• Log Data: Server access logs, error logs, API call records, and system performance metrics
• Location Data: Approximate geographic location inferred from your IP address (we do not collect precise GPS location data)
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, local storage, and similar technologies as described in Section 8

2.3 Information from Third-Party Sources

• Public Records: Property tax records, deed and title information, court filings, lien records, and other publicly available real estate data obtained from government databases and commercial data providers
• MLS Data: Real estate listing information obtained through authorized MLS data feeds, subject to applicable MLS terms of use and IDX policies
• Authentication Providers: If you sign in using a third-party authentication service (e.g., Google, Microsoft), we may receive your name, email address, and profile picture from that service
• Analytics Providers: Aggregated and anonymized analytics data from third-party analytics services integrated into the Platform

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To operate the Platform, process deal analyses, run AI agents, parse uploaded documents, generate scorecards, and deliver the core functionality you expect
• Account Management: To create and maintain your account, authenticate your identity, manage subscriptions, and process payments
• Personalization: To customize the Platform experience based on your role, investment preferences, target markets, and historical usage patterns
• AI Model Improvement: To train, improve, and refine our AI models, algorithms, and agent performance using aggregated and de-identified data (see Section 5 for details on data de-identification)
• Communications: To send transactional emails (deal alerts, agent notifications, security alerts), marketing communications (with your consent), and system updates
• Security and Fraud Prevention: To detect, prevent, and respond to security incidents, unauthorized access, fraudulent activity, and violations of our Terms of Service
• Analytics and Optimization: To understand how users interact with the Platform, identify trends, measure feature effectiveness, and improve the user experience
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and government requests
• Business Operations: To support internal business functions including billing, accounting, auditing, and dispute resolution

4. How We Share Your Information

Accurit AI does not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: We engage trusted third-party companies to perform services on our behalf, including cloud hosting (AWS, Vercel), payment processing (Stripe), email delivery, analytics, and customer support. These providers are contractually bound to use your information only as necessary to provide their services to us and are required to maintain appropriate security measures
• Team Members: If you use Accurit AI as part of an organizational account, certain information (including deal analyses, pipeline activity, and profile information) may be visible to other members of your organization based on their role and permissions
• Legal Requirements: We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform of any such change
• Aggregated and De-Identified Data: We may share aggregated market trends, anonymized usage statistics, and de-identified performance data with partners, investors, and the public. This data cannot be used to identify you personally

5. AI Processing and Uploaded Document Data

5.1 Document Processing. When you upload documents to the Platform, our AI agents (ExtractorAgent and related systems) process these documents to extract financial data, property information, and other relevant details. Uploaded documents are stored in encrypted form on secure servers and are accessible only to the authorized members of your organizational account.

5.2 AI Training Data. Accurit AI may use de-identified and aggregated data derived from Platform usage to improve its AI models and algorithms. Before any data is used for model training, it undergoes a rigorous de-identification process that removes all personally identifiable information, specific property addresses, financial account numbers, and any other data that could be used to identify individual users or specific properties. Enterprise customers may opt out of AI training data usage through their service agreement.

5.3 Document Retention. Uploaded documents are retained for the duration of your active subscription plus thirty (30) days following account termination, after which they are permanently deleted from our systems. You may request earlier deletion of specific documents at any time through the Platform or by contacting privacy@accurit.ai.

5.4 No Human Review. Under normal operations, uploaded documents are processed exclusively by automated AI systems. Accurit AI employees do not access or review your uploaded documents unless: (a) you specifically request manual support, (b) our automated systems flag a processing error requiring human intervention, or (c) we are required to do so by law. In all cases, access is logged and limited to authorized personnel on a need-to-know basis.

6. Data Security

Accurit AI implements comprehensive technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256 encryption. Database connections use encrypted channels with certificate verification
• Access Controls: Role-based access controls limit employee access to personal information on a need-to-know basis. Multi-factor authentication is required for all internal systems access
• Infrastructure Security: The Platform is hosted on SOC 2 Type II-certified infrastructure with continuous monitoring, intrusion detection systems, and automated vulnerability scanning
• Application Security: Regular penetration testing, code reviews, dependency auditing, and bug bounty programs help identify and remediate security vulnerabilities
• Incident Response: We maintain a documented incident response plan and will notify affected users and applicable regulatory authorities of any confirmed data breach in accordance with applicable law
• Employee Training: All employees with access to personal information undergo mandatory security awareness training and are bound by confidentiality obligations

While we strive to protect your information, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active account plus three (3) years following account termination for legal compliance and dispute resolution purposes
• Transaction Records: Retained for seven (7) years as required by applicable tax and financial regulations
• Uploaded Documents: Retained for the duration of your active account plus thirty (30) days following termination
• Usage Logs: Retained for twenty-four (24) months in identifiable form, after which they are aggregated and de-identified
• Marketing Preferences: Retained until you withdraw consent or for two (2) years after your last interaction with our marketing communications

8. Cookies and Tracking Technologies

Accurit AI uses cookies and similar tracking technologies to enhance your experience, analyze usage, and support our business operations. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, authentication, and security. These cannot be disabled
• Functional Cookies: Enable features like remembering your preferences, language settings, and dashboard configurations
• Analytics Cookies: Help us understand how users interact with the Platform, which features are most popular, and how we can improve the user experience. We use tools such as PostHog and Vercel Analytics
• Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. These cookies may be set by our advertising partners and track your activity across websites

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform. For more granular control, you may use our cookie preference center accessible from the Platform's footer.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to certain legal exceptions
• Portability: Request a machine-readable copy of your data for transfer to another service
• Objection: Object to processing of your personal information for certain purposes, including direct marketing
• Restriction: Request that we restrict processing of your personal information under certain circumstances
• Withdrawal of Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing
• Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights

To exercise any of these rights, please contact us at privacy@accurit.ai or through the account settings section of the Platform. We will respond to verifiable requests within thirty (30) days (or forty-five (45) days for complex requests, with notice).

10. International Data Transfers

Accurit AI is headquartered in the United States. Your information may be transferred to, stored in, and processed in the United States or other countries where our service providers maintain facilities. These countries may have data protection laws that differ from the laws of your jurisdiction.

Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate legal mechanisms such as Standard Contractual Clauses approved by the European Commission, or equivalent safeguards. You may request a copy of the applicable safeguards by contacting privacy@accurit.ai.

11. Jurisdiction-Specific Provisions

11.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale or sharing of your personal information (Accurit AI does not sell personal information), and the right to correct inaccurate personal information. California residents may exercise these rights by contacting us at privacy@accurit.ai or calling our toll-free number at 1-888-ACCURIT. We will verify your identity before processing any request. You may designate an authorized agent to exercise these rights on your behalf.

11.2 European Economic Area and United Kingdom (GDPR)

If you are located in the EEA or UK, our legal bases for processing your personal information include: performance of our contract with you, compliance with legal obligations, our legitimate business interests (as described in this Policy), and your consent where applicable. You have the right to lodge a complaint with your local data protection authority. Accurit AI, Inc. is the data controller. For GDPR-related inquiries, contact our Data Protection Officer at dpo@accurit.ai.

12. Children's Privacy

The Platform is not directed to, and we do not knowingly collect personal information from, individuals under the age of 18. If we become aware that we have collected personal information from a person under 18, we will take immediate steps to delete such information. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@accurit.ai.

13. Changes to This Policy

Accurit AI may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Provide notice through the Platform (via a banner notification or in-app alert)
• Send an email notification to the address associated with your account for material changes that affect how we handle your personal information

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: