Privacy Policy

Effective · October 20, 2026

This Privacy Policy explains what data REIzer ("REIzer," "we," "us") collects when you use our service, how we use it, who we share it with, and the rights you have over it. It applies to reizer.io and all related products.

1. What we collect

Account information

When you sign up, we collect your email address and (where you provide it) name and profile photo. If you sign in with Google, we receive your email, name, and profile picture from Google via OAuth. If you sign in with Apple, we receive your email (or Apple's private relay address, if you choose to hide yours) and your name if you share it; we keep Apple's sign-in token so that deleting your account also tells Apple to disconnect REIzer. If you sign up with email and password, we store a salted hash of your password — never the plaintext.

Deal and portfolio data

The property addresses, purchase prices, rehab budgets, financing terms, projected rent, projected ADR, occupancy assumptions, deal notes, comparison rubrics, and any other inputs you enter or upload — collectively, "Your Deal Data." This data is yours; we hold it to run the service for you.

Payment information

If you subscribe to a paid plan, payment is handled by Stripe. We receive limited billing metadata from Stripe (your subscription tier, last 4 digits of your card, billing country) but never receive or store your full card number, CVV, or bank credentials. If you subscribe in the REIzer AI iPhone app, Apple processes the payment as the seller: Apple tells us the plan, its status and renewal date, linked to your account so your plan also works on reizer.io, and we never see your Apple payment details.

Usage and diagnostic data

Pages you visit within the app, features you use, browser and device type, IP address, approximate location derived from IP, error messages, and performance metrics. This data is used to operate, debug, and improve the service.

Communications

Messages you send via the contact form or in response to product emails. We retain these for support history and to improve the product.

REIzer AI inputs

The prompts, questions, and follow-ups you send to the REIzer AI, plus any deal context the app sends along with your prompt (described in REIzer AI data).

REIzer AI mobile app

The iPhone app uses the same account and data as reizer.io. In addition: photos and screenshots you attach are sent to our AI providers so they can read the numbers, and we do not store the images. In voice mode, your recording is sent to OpenAI to turn it into text, and REIzer's answer is sent to OpenAI to turn it into speech; we do not keep the audio. The app asks for access to the camera, your photos or the microphone only when you use those features. Your choice of voice and appearance is stored on your phone only.

2. How we use your information

We use the data we collect to:

• Operate the service — authenticate you, save and load your deals, render charts, generate PDF reports, and route comp requests to data providers.
• Process payments and manage subscriptions (via Stripe).
• Send transactional email — sign-in links, password resets, billing receipts, important service notices, plan-limit warnings, and security alerts (via Resend).
• Provide REIzer AI responses (via our AI providers) when you invoke that feature.
• Improve the product — diagnose bugs, measure feature adoption in aggregate, and prioritize roadmap.
• Comply with legal obligations, enforce our Terms of Service, and protect against fraud and abuse.

The legal bases for these uses (where required by applicable law) are: performance of our contract with you, our legitimate business interests in running and improving the service, your consent (for any marketing communications you opt into), and compliance with legal obligations.

3. What we never do

• We never sell your data. Not to brokers, not to list-buyers, not to advertisers, not to anyone.
• We never use your deal data or REIzer AI prompts to train AI models — ours or any third party's. Our AI providers' commercial terms prohibit using your prompts to train their models.
• We never send marketing email without your opt-in. Transactional email (sign-in, billing, security) is necessary and is not marketing.
• We never share your deal data with other users, even when they ask. Row-level security policies in our database enforce this at the database layer.
• We never give ad platforms what you put into the app. Optional ad cookies (see Cookies) run only if you allow them, and never see your deals, portfolio, AI chats or account details.

4. Sub-processors

We rely on a small set of vendors to run the service. Each is contractually bound to handle your data only for the purpose it was shared with them. The current list:

• Supabase — Hosts our database (your account, deals, portfolio), file storage (uploaded images, PDFs), authentication, and Edge Functions. U.S. infrastructure on AWS. Data is encrypted in transit (TLS) and at rest. Row-level security policies isolate your data from other users at the database layer.
• Stripe — Processes subscription payments. Handles card data directly; your full card number never touches our servers. PCI-DSS Level 1 certified.
• AI providers — OpenAI and Anthropic run the language models behind REIzer AI; each request goes to one of them. They receive the prompts you send to REIzer AI plus the deal context the app attaches to your prompt, and any photo or screenshot you attach. In the mobile app's voice mode, OpenAI also receives the audio of your question (to turn it into text) and the answer (to turn it into speech). Under their commercial API terms, neither uses this data to train its models.
• Resend — Delivers transactional email (sign-in links, password resets, billing receipts, plan-limit notices). Receives your email address and the email body.
• RentCast — Source for sale comps, long-term rent comps, and market statistics. When you trigger a comp lookup, we send the target property's address and search parameters; we do not send your account email or other identifying information.
• AirRoi — Source for Airbnb / VRBO short-term-rental comps, ADR, occupancy, and seasonality. When you trigger an STR comp lookup, we send the target market identifier and search parameters only.
• Google — Optional sign-in via Google OAuth. If you choose Google sign-in, Google shares your email, name, and profile picture with us; we do not receive your Google password.
• Apple — Optional Sign in with Apple, and App Store payments for subscriptions bought in the REIzer AI iPhone app. Apple shares your email (or a private relay address) and name if you choose to; for a purchase, Apple processes the payment and tells us the subscription's plan, status and renewal date.
• Expo — Delivers updates to the REIzer AI mobile app. When the app checks for an update, Expo receives the app's version information and your device's IP address.
• U.S. Census Bureau Geocoder — A free public service we use to place a property on a map when you ask the mobile app for short-term-rental comps. We send only the property's address — never your name, email or account.
• Plausible Analytics — Measures which pages are visited and how people move through the site. Cookieless and privacy-first: it sets no cookies, stores no identifiers on your device, does not track you across other websites, and collects no personal data — only aggregate counts (page URL, referrer, country, browser, device type). Because it sets no cookies, it runs for every visitor without a consent prompt. EU-hosted.
• Amazon Web Services — Underlying cloud infrastructure for Supabase. U.S.-region hosting.

When we add or remove a sub-processor, we will update this list. Material additions for paid customers will be announced via email at least 30 days in advance.

5. REIzer AI data handling

When you use the REIzer AI:

• Your prompt is sent to one of our AI providers via an authenticated Edge Function. The prompt may be accompanied by a structured user_context block containing a snapshot of your portfolio, recent deals, or the form state of the analyzer you opened REIzer AI from — only what is needed to answer your question.
• We do not include your full database or other users' data in the prompt — only the slice relevant to your query.
• Prompts are not used for training by our AI providers under their commercial API terms.
• Conversation history is stored in our database so you can return to past chats. You can delete a conversation from within the REIzer AI chat; deleted conversations are permanently removed within 30 days.
• Rating an answer. If you mark an answer helpful (thumbs up), we store only that rating and which AI model answered — no text from your conversation. If you mark it not helpful (thumbs down) and press Send, that question and answer, the reason you pick, any note you add, and which AI model answered are saved so our team can review them and improve REIzer AI. Only answers you choose to send are reviewed. Our team reads them and may use our AI providers to help grade them; they are never used to train AI models. They are deleted when you delete that conversation or your account.
• We log token and message counts for billing and rate-limiting (not prompt content). Aggregate counts may be surfaced to operators for capacity planning.
• The REIzer AI is metered. Your monthly message and token usage is stored against your account so we can enforce plan limits.

6. Cookies and local storage

We use a small number of essential cookies and browser-storage entries:

• Authentication tokens — keep you signed in across pages. Required for the service to work.
• Theme preference — remembers your light/dark/midnight selection.
• Local cache — preserves form state between page loads so you don't lose work on refresh.

Our main analytics (Plausible, listed under Sub-processors) is cookieless and needs none of the above. We also remember your cookie choice (below) in browser storage.

Analytics and ad cookies — only if you allow them

We advertise on X and Reddit, and use Google Analytics for a more detailed view of how people use our public pages. Each of these sets cookies, so they load only after you click "Allow" on our cookie banner. If you click "No thanks" or ignore the banner, nothing loads.

• Who: X Corp. (X pixel), Reddit, Inc. (Reddit pixel) and Google LLC (Google Analytics). X and Reddit receive this data as independent companies under their own privacy policies. We run Google Analytics for measurement only: its advertising features and Google signals are switched off.
• Where: our public pages (home, features, pricing, calculators, blog, docs, sign-in), plus a single "signed up" event when you create an account.
• What they receive: the page you visited, how you arrived (including whether it was one of our ads), your IP address, browser and device details, their cookie identifier, and the "signed up" event. We do not send your name, email, deals, portfolio or anything you type into the app.
• Changing your mind: click "Cookie settings" in the site footer or the button below at any time. Switching to "No" removes these scripts and clears their cookies on our site. If your browser sends a Global Privacy Control signal, we treat it as "No" and never show the banner.

7. Data retention and account deletion

We retain your data for as long as your account is active and as needed to provide the service. When you delete your account:

• Your account, saved deals, portfolio data, comp snapshots, REIzer AI conversations, and uploaded files are permanently removed within 30 days.
• Backups are purged on rolling retention; residual copies expire within 90 days.
• Billing records and transaction history are retained for the period required by tax and accounting law (typically 7 years), separately from your account data.
• Aggregate, anonymized usage statistics (counts, no identifiers) may be retained for product analytics.

You can request account deletion from settings (on reizer.io or in the REIzer AI app) or by contacting us via our contact page. Deleting your account cancels a plan paid on reizer.io. A subscription bought through Apple keeps renewing until you cancel it in your iPhone's Settings → your name → Subscriptions — deleting your account does not stop it. Deleting an account that uses Sign in with Apple also tells Apple to disconnect REIzer from your Apple ID.

8. Security

We follow standard industry practices for protecting your data:

• All data is encrypted in transit via TLS 1.2 or higher.
• All data is encrypted at rest by our database provider.
• Database access is gated by row-level security policies that isolate each user's records — meaning we can't accidentally surface another user's deals even via internal queries.
• API keys for third-party providers (RentCast, AirRoi, our AI providers, Stripe) are stored as encrypted Edge Function secrets, never exposed to the browser.
• We follow least-privilege principles for internal access. Routine admin operations are audited.
• SOC 2 Type II certification is on our roadmap as we scale.

No system is perfectly secure. If we become aware of a security incident affecting your data, we will notify affected users without undue delay and in accordance with applicable law.

9. Your rights

Regardless of where you live, you can:

• Access — request a copy of your account data and deals at any time.
• Correct — update or correct profile and deal information from your settings.
• Delete — delete your account and all associated data from settings or by contacting support.
• Export — download your saved deals as PDF (today) or structured export (on roadmap).
• Opt out — unsubscribe from any non-transactional email at any time.

If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under GDPR, UK GDPR, and the CCPA respectively, including the right to object to processing, the right to data portability, and (for California) the right to know what categories of personal information we have shared. We follow GDPR-equivalent practices globally and do not sell personal information as defined under the CCPA. The optional ad cookies described under Cookies may count as "sharing" for cross-context behavioral advertising under the CCPA; they load only after you opt in, you can opt out at any time through "Cookie settings," and we honor Global Privacy Control signals as an opt-out. To exercise any of these rights, contact us via the contact page; we'll respond within 30 days.

10. Children

The service is not directed to anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a child has provided us personal data, please contact us and we will delete it.

11. International users

REIzer is operated from the United States, and all data is stored and processed on U.S. infrastructure. If you access the service from outside the U.S., you understand and consent to the transfer of your data to the U.S., which may have data-protection laws different from those of your jurisdiction. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for cross-border transfers.

12. Developer API and MCP server

REIzer publishes a public REST API at reizer.io/api/v1 and a remote MCP server at reizer.io/mcp that AI assistants can connect to. Unless you sign in from your assistant (described below), these surfaces sit outside your account, so this section describes them specifically.

Anonymous analysis calls. The four analysis tools (analyze_deal, best_use, solve_max_offer, list_strategies) require no account and no API key. They receive only the numeric deal assumptions the caller sends — price, rent, financing terms and similar. We do not receive your name, email or account identity through these calls, and we do not attempt to link them to a REIzer account.

Shareable reports. Each analysis is stored as an anonymous snapshot so the returned report_url resolves to a viewable page. The snapshot holds the analysis inputs and results only — no name, email, IP address or account identifier. Snapshots expire automatically 30 days after creation and are deleted; report identifiers are unguessable UUIDs, and the underlying table is restricted to our server processes with no public read access. Anyone holding the link can view that report until it expires, so treat a report link as public.

Rate limiting and usage counts. To prevent abuse we keep short-lived counters keyed to the caller's IP address (for anonymous callers) or to the account behind an API key or a signed-in connection. Minute-level counters are discarded after two minutes and daily counters after 48 hours. Separately we record which tool names were called, without storing the arguments, to understand usage volume; anonymous calls carry no account identifier, and signed-in calls are covered below.

API keys and licensed data. Two optional tools — pull_comps and str_market_data — require a REIzer account, either through an API key issued to a paid account or by signing in from your assistant, and return data from our licensed providers, RentCast and AirRoi (listed under Sub-processors). Using them sends the subject property's address or coordinates to that provider in order to return comparables; it does not send your identity. Usage counts against your plan's monthly allowance, and you can revoke any API key at any time from Settings.

Signing in from an AI assistant. The connector at reizer.io/mcp/account lets you sign in to your REIzer account from Claude, ChatGPT or another AI assistant. Nothing is shared until you approve the app on our consent screen, which names the app and the address it will send you back to. Once you approve it, the assistant receives an access token — never your password — and can, on your behalf: run analyses; pull comps and short-term-rental data, counted against your plan's monthly allowance; and read your saved deals and save new ones. It cannot change your plan or billing or delete anything. The app also learns the email address on your account. We record each of its calls with your account identifier, the tool name and the app's client identifier — not the arguments — so usage counts against your allowances. You can disconnect any app at any time under Settings → Connected apps, which revokes its access immediately. Sign-in tokens are issued by our authentication provider, Supabase (see Sub-processors). What the assistant does with the results inside its own product is governed by that provider's terms and privacy policy, not ours.

What we do not do. We do not use API or MCP inputs to train any AI model, we do not sell them, and the MCP server runs no AI model of its own — it is a deterministic calculation engine.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Effective" date at the top. For material changes — for example, adding a new category of data we collect or a new sub-processor — we will provide reasonable advance notice by email or in-app message before the change takes effect.

14. Contact

Privacy questions, data requests, or concerns? Reach out via our contact page and we'll respond within one business day.