Privacy Policy

1. Information We Collect

We collect several categories of information in connection with your use of the Service:

1.1 Information You Provide Directly

• Account information: When you register, we collect your name, email address, and password (stored as a secure hash).
• Billing information: Subscription and payment data is processed by our payment provider (Stripe). We store only a tokenized reference — we do not store full card numbers on our servers.
• Profile preferences: Budget ranges, target states, and investor settings you configure inside the platform.
• Communications: Emails or messages you send to our support team.

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, search queries within the Service, and clickstream data.
• Device and technical data: IP address, browser type and version, operating system, referring URLs, and time-zone settings.
• Cookies and similar technologies: We use session cookies to keep you signed in and analytics cookies to understand feature usage. You can control cookies through your browser settings; disabling session cookies will prevent you from using authenticated features.

1.3 Information From Third Parties

We may receive limited profile information if you choose to authenticate using a third-party identity provider (e.g., Google OAuth). We receive only the information that provider makes available, typically your name and email address.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Authenticating your account, delivering county intelligence, running opportunity and deal-finder queries, and maintaining your investor profile.
• Billing and subscriptions: Processing payments, issuing receipts, handling upgrades and cancellations, and detecting fraudulent transactions.
• Communication: Sending transactional emails (account verification, password resets), product update notifications, and — only with your consent — marketing emails. You may opt out of marketing emails at any time via the unsubscribe link.
• Improving the Service: Analyzing aggregated usage patterns to fix bugs, improve features, and prioritize the product roadmap.
• Legal compliance: Meeting our obligations under applicable law, responding to lawful requests from public authorities, and enforcing our Terms of Service.

We do not sell your personal information to third parties and do not use it to train machine-learning models that are shared externally.

3. Sharing Your Information

We share your information only in the following limited circumstances:

• Service providers: We engage third-party vendors (e.g., cloud hosting, payment processing, transactional email delivery, error monitoring) who process data on our behalf under data processing agreements that prohibit them from using your data for any other purpose.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service prior to such a transfer.
• Legal obligations: We may disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of The Deed Club, LLC, our users, or the public.
• With your consent: We may share your information for any other purpose with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained while your account is open and for 30 days after deletion to allow for accidental-deletion recovery. After that period, identifying fields are purged or anonymized.
• Billing records are retained for seven (7) years to comply with financial record-keeping requirements.
• Usage and analytics data is retained in aggregated, non-identifying form for up to 24 months.
• Support correspondence is retained for 24 months from the date of the last interaction.

You may request deletion of your account and associated personal data at any time by contacting us at privacy@thedeedclub.com. We will process deletion requests within 30 days, subject to any legal retention obligations.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

5.1 For Residents of the European Economic Area (GDPR)

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request that we limit how we process your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

5.2 For California Residents (CCPA / CPRA)

• The right to know what personal information we collect, use, disclose, and sell.
• The right to delete personal information we have collected from you, subject to exceptions.
• The right to opt out of the sale or sharing of personal information (we do not sell personal information).
• The right to non-discrimination for exercising your CCPA rights.

To exercise any of these rights, please contact us at privacy@thedeedclub.com. We may need to verify your identity before fulfilling your request. We will respond within 30 days (or 45 days where permitted by law).

6. Data Security

We implement industry-standard technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include TLS encryption for data in transit, encrypted storage for sensitive fields, access controls limited to personnel with a need to know, and regular security reviews. No method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security, but we are committed to protecting your data.

7. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately at privacy@thedeedclub.com and we will take prompt steps to delete such information.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email or by posting a prominent notice inside the Service before the changes take effect. Your continued use of the Service after the changes are effective constitutes acceptance of the revised policy.

9. Contact Information

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us: