Privacy Policy

1. Introduction

IVAI Pro ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered real estate investment analysis platform.

2. Information We Collect

2.1 Account Information

• Email address (required for account creation)
• Name and profile information (optional)
• Password (encrypted, never stored in plain text)
• Subscription plan and billing information (processed via Clerk and Stripe)

2.2 Property Data

• Property addresses you search or upload
• CSV files containing MLS data or property lists
• Property notes, decisions, and analysis results
• Saved properties and portfolios

2.3 Usage Data

• AI queries and chat interactions
• Features used and pages visited
• Device type, browser, and operating system
• IP address and approximate location (city/state level)
• Session duration and login times

2.4 Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze site usage and performance
• Prevent fraud and security threats

3. How We Use Your Information

We use collected information to:

• Provide and improve the IVAI Pro platform
• Generate AI-powered property analysis and valuations
• Fetch market data from third-party APIs (RentCast, Perplexity AI)
• Process payments and manage subscriptions
• Send transactional emails (account updates, receipts, security alerts)
• Provide customer support
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Information Sharing & Third-Party Services

We share your information only in the following circumstances:

4.1 Service Providers

4.2 Legal Requirements

We may disclose your information if required by law, court order, subpoena, or government request, or to protect our rights, property, or safety.

4.3 Business Transfers

If IVAI Pro is acquired or merged with another company, your information may be transferred to the new owner.

5. Data Security

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data in transit (TLS/SSL)
• Encrypted databases (AES-256)
• Password hashing with bcrypt
• Regular security audits and vulnerability scanning
• Role-based access controls (RBAC) via Clerk
• Rate limiting and DDoS protection

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information as follows:

• Account Data: Until you delete your account, plus 30 days for backups
• Property Data: Until you delete it or your account is closed
• Usage Logs: 90 days for analytics, then aggregated/anonymized
• Billing Records: 7 years (legal requirement for tax purposes)

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and data
• Portability: Export your data in CSV or JSON format
• Opt-Out: Unsubscribe from marketing emails (transactional emails still required)
• Objection: Object to processing of your data for certain purposes

To exercise these rights, email us at privacy@ivai.pro or use the account settings page.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

9. European Users (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Our legal basis for processing your data is consent, contract performance, and legitimate interests.

10. Children's Privacy

IVAI Pro is not intended for users under 18. We do not knowingly collect information from children. If you believe we have inadvertently collected data from a minor, contact us immediately at privacy@ivai.pro.

11. International Data Transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place through Standard Contractual Clauses or other approved mechanisms.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification. The "Last Updated" date at the top reflects the most recent revision.

13. Contact Us

For privacy-related questions, requests, or concerns: