Privacy Policy

Account Information (name, email, credentials); Property Data (addresses, prices, rehab budgets, financial inputs); Deal Notes & Documents; Offer & Pipeline Data; Appointment & Scheduling Data (including attendee emails); Contractor Communications (messages, photos, voice recordings, change orders); Bid Data; Outreach Emails (recipient addresses, subject, body); and Communications when contacting support.

Device & Browser Data (IP, browser, OS, device identifiers); Usage Data (pages, features, timestamps, interactions); Cookies & Similar Technologies: We use strictly-necessary cookies and local storage for authentication, security, and saving your preferences (these cannot be disabled), and — only if you opt in via the cookie banner — analytics cookies (PostHog) to help us improve the Service. We do not use marketing or advertising cookies. See our Cookie Policy for the full list and controls. Location Data (approximate, from IP — not precise GPS); and Media Metadata (file sizes and durations of uploads).

Data shared: property addresses. Purpose: property details, rental comparables, rent estimates, market rates. Privacy policy: rentcast.io/privacy

Data shared: property details, financial inputs, deal parameters for AI analysis. Purpose: AI-powered deal analysis using Anthropic's Claude models. Data submitted through Anthropic's API is processed under its commercial terms and is not used to train Anthropic's models. Privacy policy: anthropic.com/legal/privacy

Data shared: event title (property address), event type, start/end times, attendee emails. Purpose: create/update/delete calendar events when authorized. Scope: only the calendar write scope required to manage events it creates; we do not read your existing calendar events. Privacy policy: policies.google.com/privacy

Limited Use: REDA's access to, use of, and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements. REDA does not use Google Calendar data for advertising, does not sell it, and does not allow humans to read it except for security purposes, to comply with applicable law, or with your explicit consent.

Data shared: recipient email addresses, subject lines, and message content for outreach and bid emails. Purpose: deliver offer letters, deal-summary emails, and bid requests on your behalf. Privacy policy: resend.com/legal/privacy-policy

Data shared: approximate geographic coordinates derived from a property address. Purpose: determine the census tract to filter comparables to the correct geographic area. This is a free U.S. government API.

Data shared: the listing agent's name and brokerage for a property you are analyzing. Purpose: to look up the listing agent's business contact email (a "1-click contact enrichment" used only when you request it) so you can reach out about a deal. We do not request personal or unverified email addresses. Privacy policy: apollo.io/privacy-policy

Data shared: the property address you enter. Purpose: to retrieve a street-level property image and map view for the property. Privacy policy: policies.google.com/privacy

Data shared: product-usage events (pages visited, features used, timestamps) and associated device/browser data — only if you opt in to analytics via the cookie banner. Purpose: to understand how the Service is used and to improve it. Not used for third-party advertising. Privacy policy: posthog.com/privacy

Data shared: your IP address and the map area being viewed when you open the pipeline map. No deal data, addresses, or account information is sent. Purpose: to serve the base map tiles used to display your deals on a map. Privacy policy: carto.com/privacy

REDA's frontend is hosted on Hetzner infrastructure. Your account, authentication, file uploads, and all entity data (deals, offers, appointments, reminders, contractor messages, bids, and shared deal snapshots) are stored and processed using Supabase (managed PostgreSQL database, authentication, file storage, and serverless functions). Cross-border transfers: REDA analyzes United States real estate, but our service providers operate globally and the operator administers the Service from Israel. As a result, your data may be processed and stored outside your country of residence — specifically in the United States (Anthropic, Apollo, Resend, PostHog, and Google), the European Union / Germany (Hetzner), and accessed for administration from Israel. By using the Service, you consent to this cross-border processing, transfer, and storage of your data outside your country of residence.

Retention period: We retain your account and the data associated with it (deals, offers, appointments, reminders, contractor messages, bids, shared snapshots, listing-agent contact results, and outreach/bid email logs) for as long as your account is active. You may delete individual deals or records from within the app at any time, or request full account deletion via the contact details in Section 9. Upon account deletion, your data is immediately removed from the active database. Residual copies may persist in encrypted, automated backups for up to thirty (30) days before they are permanently destroyed in the ordinary backup-rotation cycle. Certain non-sensitive preferences (theme, cookie consent, in-flight UI state) are also cached in your browser's localStorage and are cleared when you sign out or clear your browser storage.