Privacy Policy

This Privacy Policy describes how VESTIMAE CORPORATION, a Florida corporation ("Vestimae," "we," "us," or "our"), collects, uses, discloses, stores, and otherwise processes personal information when you access or use Vestimae’s websites, mobile applications, software, subscription services, reports, analyses, tools, alerts, and related products and services (collectively, the "Service"). This Privacy Policy should be read together with Vestimae’s Terms of Service. By using the Service, you acknowledge the practices described in this Privacy Policy.

This Privacy Policy applies to personal information processed by Vestimae in connection with the Service. It does not apply to information that is lawfully considered public information or de-identified or aggregated information that cannot reasonably be linked to an identified or identifiable individual, except to the extent applicable law provides otherwise.

1. Information We Collect

We collect information that you provide directly to us, information generated through your use of the Service, information collected automatically from your device or browser, and information received from service providers and third-party data sources used to support the Service.

Account and profile information may include your name, email address, account credentials, password or authentication information, telephone number if provided, company or organization name, billing address, subscription level, account preferences, and other information you choose to provide when creating or managing an account. Passwords are not intended to be stored by Vestimae in readable form and may be processed through authentication providers using industry-standard security practices.

Service and usage information may include property addresses and locations you search or analyze, searches, saved properties, saved analyses, report requests, assumptions and parameters entered into analytical tools, generated reports and outputs, alert preferences, feature usage, support interactions, and other activity associated with your account or use of the Service.

Payment and transaction information may include subscription status, transaction amount, billing history, payment status, and payment-related identifiers. Payment-card information is processed by Stripe or another payment processor designated by Vestimae. Vestimae does not intend to store complete payment-card numbers or card security codes on its own systems.

Technical and device information may include Internet Protocol address, browser type, device type, operating system, application version, language settings, device identifiers, approximate location derived from IP address, date and time of access, referring pages, diagnostic information, security logs, and information about interactions with the Service. We may collect this information automatically through cookies, session technologies, server logs, software development tools, and similar technologies that are necessary to operate, secure, maintain, and improve the Service.

User Inputs may include information, files, documents, text, images, property details, financial assumptions, notes, prompts, instructions, or other materials that you submit, upload, enter, transmit, or otherwise provide through the Service. You are responsible for ensuring that you have the right to provide User Inputs to Vestimae and that your use of the Service does not disclose personal information or confidential information in violation of applicable law or third-party rights.

Third-party property and market information may be obtained from public records, government sources, commercial data providers, mapping and location providers, listing sources, and other third parties. Current or anticipated sources may include Census ACS, FEMA, Walk Score, licensed property-data providers, Mapbox, Crexi, LoopNet, MLS partners, and similar providers. Some of this information may relate to properties, businesses, owners, transactions, or locations and may be considered personal information in certain circumstances, while other information may be public or non-personal information. Availability, sources, and providers may change over time.

2. How We Use Information

We use personal information to provide, operate, maintain, personalize, secure, and improve the Service; create and administer accounts; authenticate users; process subscriptions and transactions; generate requested property analyses, valuations, proformas, construction-cost estimates, reports, and other outputs; save searches and analyses; deliver alerts and account notifications; provide customer service and technical support; communicate about billing, security, legal, transactional, and Service-related matters; detect, investigate, and prevent fraud, abuse, unauthorized access, and security incidents; enforce our Terms of Service and other agreements; comply with legal and regulatory obligations; maintain business records; and protect the rights, property, and safety of Vestimae, our users, service providers, and others.

We may also use information to evaluate Service performance, troubleshoot problems, understand how features are used, develop and test new functionality, and improve our products and services. Where reasonably practicable, we may use aggregated or de-identified information for analytics, research, product development, statistical analysis, and business planning.

AI and model improvement. Vestimae may use User Inputs, prompts, files, analyses, Outputs, and related usage information to operate, secure, support, evaluate, and improve the Service, including testing and improving Vestimae-owned features and systems, subject to this Privacy Policy. Vestimae will not use identifiable User Inputs, uploaded files, or prompts to train third-party generative-AI models without separate, specific consent. Aggregated or de-identified information that cannot reasonably be linked to you may be used for analytics, research, product development, testing, and improvement. If Vestimae materially changes these practices, it will update this Privacy Policy and obtain consent where required by applicable law.

3. AI-Assisted Processing

Certain features of the Service use automated processing or artificial intelligence to analyze User Inputs, third-party property information, assumptions, and other data and to generate reports, estimates, narratives, calculations, scores, or other Outputs. Information submitted to an AI-assisted feature may be processed by Vestimae systems and, where reasonably necessary to provide the requested functionality, transmitted to third-party artificial-intelligence, cloud, data, or technology providers. Those providers may have different retention, training, and data-use practices, which are governed by Vestimae’s contractual arrangements with them, their applicable terms and privacy practices, and applicable law. Vestimae does not represent that every third-party provider follows identical data-retention or model-training practices. You should not submit Social Security numbers, government identification numbers, protected health information, confidential information you are not authorized to disclose, or other sensitive or restricted information unless the Service expressly requests it and you are legally authorized to provide it. The Service is not intended to make final automated decisions that produce legal or similarly significant effects concerning an individual. If Vestimae later expressly offers a feature for such a purpose, Vestimae will provide notices, review mechanisms, opt-out rights, or other protections required by applicable law.

4. Sources of Personal Information

We may collect personal information directly from you; automatically from your device, browser, and interactions with the Service; from payment processors, authentication providers, hosting providers, customer-support tools, and other service providers; from public records and governmental databases; from mapping, property, market, construction-cost, and listing data providers; from business partners and enterprise customers where authorized; and from other lawful sources that support the operation or improvement of the Service.

5. How We Disclose Information

Vestimae does not sell personal information for money. Vestimae also does not sell User Inputs and will not disclose identifiable User Inputs, uploaded files, or prompts to a third party for that third party to train a generative-AI model without separate, specific consent. We may disclose personal information to service providers, processors, contractors, and vendors that perform services on our behalf or help us operate the Service, subject to appropriate contractual, confidentiality, privacy, and security obligations where required by law. These providers may include Supabase for authentication and database services, Stripe for payment processing, Vercel for application hosting, Mapbox for mapping functionality, and other providers used for infrastructure, communications, security, customer support, artificial intelligence functionality, diagnostics, and related operational purposes. The particular vendors used by Vestimae may change over time.

Map and property-data providers may receive property coordinates, addresses, search parameters, device or technical information, or other information reasonably necessary to provide the requested functionality. Vestimae does not intend to provide Mapbox with a user’s identity solely for the purpose of displaying map imagery, although technical information may be transmitted as part of ordinary web or application requests.

We may also disclose information when required or permitted by law, legal process, subpoena, court order, governmental request, or regulatory requirement; when reasonably necessary to investigate fraud, security incidents, abuse, or violations of our agreements; to protect the rights, property, safety, or security of Vestimae, our users, or others; or in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, change of control, bankruptcy, or similar corporate transaction, subject to applicable legal requirements.

Where an enterprise, team, brokerage, municipality, investment firm, employer, or other organization provides you access to the Service, certain account information, usage information, User Inputs, analyses, or administrative information may be visible to or controlled by that organization depending on the applicable plan, account configuration, and agreement. Users of organizational accounts should direct questions about their organization’s access to the applicable account administrator.

6. No Sale or Sharing for Cross-Context Behavioral Advertising

As of the Last Updated date, Vestimae does not sell personal information for monetary consideration and does not use or disclose personal information for cross-context behavioral advertising or targeted advertising across unaffiliated websites or services. Vestimae does not knowingly sell or share personal information of individuals under 18. If Vestimae changes these practices, it will update this Privacy Policy and provide any opt-out mechanisms required by applicable law before engaging in such activity.

7. Cookies and Similar Technologies

The Service uses cookies and similar technologies that are reasonably necessary for authentication, account security, session management, preferences, fraud prevention, performance, and core functionality. As of the Last Updated date, Vestimae does not use third-party advertising trackers to build profiles of users for targeted advertising across unaffiliated websites or applications and does not intentionally track users across apps or websites owned by other companies for advertising purposes. If Vestimae later introduces non-essential analytics, advertising, or tracking technologies, this Privacy Policy and any required consent or opt-out mechanism should be updated accordingly.

8. Data Retention

We retain personal information and User Inputs for as long as your account is active and as reasonably necessary thereafter to provide the Service, fulfill the purposes described in this Privacy Policy, comply with contractual and legal obligations, resolve disputes, enforce agreements, maintain security and fraud-prevention records, satisfy legal, accounting, tax, and regulatory requirements, and protect legitimate business interests. Subject to any longer period required or permitted by law or reasonably necessary for these purposes, Vestimae may delete or anonymize inactive accounts and associated User Inputs after twenty-four (24) months of inactivity. Different categories of information may be retained for different periods depending on their purpose and applicable legal requirements.

When you delete your account through available account functionality, Vestimae will initiate deletion or de-identification of personal information associated with the account in accordance with applicable law and its operational retention practices. Certain information may be retained where necessary for legal compliance, tax and financial reporting, fraud prevention, security, dispute resolution, enforcement of agreements, backup integrity, or other lawful purposes. Information maintained in backups may remain for a limited period until overwritten or deleted through ordinary backup cycles. Vestimae does not guarantee indefinite storage of User Inputs, reports, analyses, Outputs, or other account content, and users are responsible for retaining copies they wish to preserve where download functionality is available.

9. Data Security

Vestimae uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, loss, misuse, and destruction. These measures may include encrypted transmission using TLS, password hashing or secure authentication technologies, access controls, logging, vendor controls, and other security practices appropriate to the nature of the information processed. No security system, network, method of transmission, or method of electronic storage is completely secure, and Vestimae cannot guarantee absolute security.

10. Your Privacy Rights

Depending on where you reside and subject to applicable law and statutory exceptions, you may have the right to request access to or confirmation of personal information Vestimae processes about you; obtain a copy of certain personal information; correct inaccurate personal information; request deletion of personal information; request portability of certain information; withdraw consent where processing is based on consent; opt out of certain sales, sharing, targeted advertising, or profiling if Vestimae engages in those activities; limit certain uses of sensitive personal information where applicable; and receive equal service and pricing without unlawful discrimination for exercising privacy rights.

To exercise a privacy right, you may contact Vestimae at info@vestimae.com or use any privacy-request functionality made available through the Service. Vestimae may need to verify your identity and authority before completing a request and may request information reasonably necessary for verification. Authorized agents may submit requests where permitted by applicable law, subject to appropriate verification of the agent’s authority and the consumer’s identity. Vestimae may deny or limit a request where an exception applies, and where applicable law provides an appeal right, you may appeal a denied request by replying to the decision or contacting info@vestimae.com with the subject line "Privacy Appeal."

Vestimae will not discriminate against you for exercising privacy rights provided by applicable law. Some rights apply only to residents of particular states or only to businesses that meet statutory thresholds. Nothing in this Privacy Policy is intended to represent that any particular state privacy statute applies to Vestimae if Vestimae does not meet that statute’s applicability requirements.

11. California Privacy Disclosures

California law may provide qualifying California residents with rights concerning the categories and specific pieces of personal information collected, the categories of sources, the business or commercial purposes for collection or use, the categories of third parties to whom information is disclosed, correction, deletion, and the right to opt out of sale or sharing. Vestimae does not currently sell personal information for monetary consideration or share personal information for cross-context behavioral advertising. Publicly available information, including certain public real-estate and property records, may be excluded from the definition of personal information under California law. If Vestimae becomes subject to additional California-specific notice requirements based on its size, revenue, data volume, or processing activities, it will provide any additional notices and request methods required by law.

12. Sensitive Personal Information

The Service is not designed to require Social Security numbers, government identification numbers, biometric identifiers, protected health or medical information, precise geolocation unrelated to a property analysis, financial-account credentials, or other highly sensitive personal information. You should not upload or submit sensitive personal information, confidential information belonging to another person, or information you are not authorized to disclose unless it is reasonably necessary for a feature that expressly requests it and you have a lawful basis to provide it. If Vestimae collects or processes sensitive personal information, it will do so only for lawful purposes and in accordance with applicable requirements.

13. Children and Minors

The Service is intended only for persons who are at least eighteen (18) years old and is not directed to children or minors. Vestimae does not knowingly collect personal information from children under thirteen (13), and it does not knowingly permit individuals under eighteen (18) to create accounts. If we learn that personal information has been collected from a child or minor in violation of this policy or applicable law, we will take reasonable steps to delete the information and, where appropriate, close the account. A parent or legal guardian who believes a minor has provided personal information to Vestimae may contact info@vestimae.com.

14. Third-Party Websites, Services, and Data Providers

The Service may link to, integrate with, display information from, or rely upon third-party websites, applications, APIs, property databases, mapping providers, listing services, payment processors, artificial intelligence providers, and other third-party services. This Privacy Policy does not govern the independent privacy practices of those third parties. Their collection and use of information may be governed by their own privacy notices and contractual terms. Vestimae is not responsible for the privacy practices of third parties acting independently of Vestimae.

15. International Access and Data Transfers

The Service is currently focused on analysis of properties located in the United States, although users may access the Service from other locations. Vestimae and its service providers may process or store information in the United States and in other jurisdictions where service providers operate. If personal information is transferred across national borders, Vestimae will use transfer mechanisms or safeguards required by applicable law where such requirements apply.

16. Legal Bases Where Applicable

Where applicable law requires a legal basis for processing personal information, Vestimae may process information as necessary to perform a contract with you or provide the Service you request, based on legitimate interests such as operating and securing the Service, based on compliance with legal obligations, or based on consent where consent is required. Where processing is based on consent, you may withdraw consent subject to applicable law, although withdrawal does not affect processing already lawfully completed.

17. Changes to This Privacy Policy

Vestimae may update this Privacy Policy from time to time to reflect changes in the Service, technology, legal requirements, vendors, data practices, or business operations. The revised Privacy Policy will state a new "Last Updated" date. Where required by applicable law, Vestimae will provide additional notice of material changes through email, the Service, account notifications, or another reasonable method. If a material change requires consent under applicable law, Vestimae will seek that consent before applying the change in the manner requiring consent.

18. Contact Us

For privacy-related questions, requests, complaints, or appeals, contact: VESTIMAE CORPORATION, 4121 NW 5th St, Unit 212, Plantation, FL 33317. Email: info@vestimae.com.