Privacy Policy

Account information. Name, email address, phone number, and business type when you start a trial, book a demo, or create an account.

Customer Data. Everything you put into the Service to run your business: property and deal records, scopes of work, budgets, comps, documents, photos, contacts, leases, tasks, notes, and messages. This is yours; we process it to run the Service for you.

Financial data through Plaid. If you connect a bank or card account, Plaid passes us the account and transaction data you approve. We never see or store your bank username or password.

Payment data through Stripe. Stripe processes subscription payments. We store your subscription status and the last four digits and card type Stripe returns. We do not store full card numbers.

AI client connections. When you connect a third-party AI client (for example Claude or ChatGPT), we record the client's name, the scopes you granted, and the tokens needed to keep that connection working, plus a log of what the client read and proposed.

Usage and device data. Log data such as IP address, browser type, pages viewed, and actions taken on reiosapp.com and inside the Service, used for security, support, and product improvement.

Communications. Emails, support conversations, and demo or trial requests you send us.

• To provide, operate, secure, and support the Service.
• To bill you and manage your subscription.
• To send transactional messages: confirmations, reminders, approval requests, and account notices.
• To respond to demo and trial requests and to follow up on them.
• To understand how the Service is used so we can improve it.
• To comply with law and enforce our Terms.

We do not sell your information. We do not use Customer Data to train models of our own.

We share information only with the providers that make the Service work, with your connected clients at your direction, and where the law requires it.

Subprocessors and service providers, and what each one does for you:

• Base44: application hosting, database, file storage, and transactional email.
• PostHog: product analytics and session replay on reiosapp.com and inside the Service, used to understand how pages and features are used and to fix problems. Form fields are masked in replays.
• Stripe: payment processing and subscription billing.
• Plaid: bank and card account connections.
• Google (Drive, Calendar, Maps): document sync, demo scheduling, and mapping features you enable.
• DocuSign: e-signature for documents you choose to send.
• Anthropic and OpenAI: AI processing when you use built-in AI features (rei.AI).
• Property data providers: public-record, comparable-sale, and valuation data enrichment.
• Twilio: SMS delivery, once SMS features are enabled.

Each provider receives only the data needed for its purpose and is bound by its own terms and security obligations.

AI clients you connect. When you connect your own AI client through a scoped connection, that client reads only what the scopes you granted allow. What the client's provider does with data it receives is governed by that provider's privacy policy, not this one. You can revoke any client at any time from Settings > Connected Clients.

People you invite. Crew members, tenants, partners, and anyone you share a property record or portal link with see what you choose to share.

Legal and safety. We may disclose information to comply with law, respond to lawful requests, protect our rights, or prevent fraud or harm.

Business transfers. If REI.OS LLC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Scopes are the control. A connected AI client can hold, for example, a read scope on comps without holding a write scope on scopes of work. Nothing is granted account-wide by default.

Reading and acting are separate permissions. Sending a message, signing or generating a document, moving money, locking a comp set or scope of work: each of these stages as a draft that you approve inside the Service. Nothing sends, signs, or pays without your approval.

We keep a log of what each connected client read and proposed so you can audit it.

Customer Data is encrypted in transit and at rest on hosted infrastructure. Access inside the Service is scoped: users, portals, and AI clients see only what they have been granted. Bank credentials never touch our systems.

We do not yet hold a formal third-party security certification. That is on our roadmap. We would rather tell you exactly where things stand than round up.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as required by law.

We keep your information for as long as your account is active.

After you cancel or close your account, you have 30 days to export your Customer Data. We delete or de-identify it within 90 days after that, except for records we must keep for legal, tax, or financial-audit reasons, and backup copies that expire on their own schedule.

When you disconnect a bank account, we remove the connection at Plaid so no further data flows.

You can access, correct, export, or delete your information from inside the Service or by emailing info@reiosapp.com. We will respond within 30 days.

Deleting your account. You can delete your account and its data from inside the Service or the mobile app (Settings, then Profile, then Delete account). If you can't sign in or don't have the app, follow the steps at reiosapp.com/delete-account. Deletion follows the retention rules above.

Depending on where you live, you may have additional rights under state privacy law, including the right to know what we collect, to request deletion, and to not be discriminated against for exercising those rights. We do not sell personal information and do not share it for cross-context behavioral advertising.

You can opt out of non-essential email at any time using the link in the message. Transactional messages about your account will continue while you have one.

reiosapp.com and the Service use cookies and similar technologies to run the site, keep you signed in, and measure how pages and features are used. We use PostHog for this, including session replay, which records page interactions such as clicks and scrolling with form fields masked. PostHog receives your IP address and uses it to estimate your approximate location. reiosapp.com also loads advertising tags from ChatGPT, Google and Meta so we can tell which ads bring visitors and report trial sign-ups back to those platforms; these tags are not loaded when your browser sends a Global Privacy Control signal. We do not sell this data. You can block analytics and advertising cookies in your browser settings.

The Service is for businesses and adults. We do not knowingly collect information from anyone under 18. If you believe we have, contact us and we will delete it.

We may update this policy. For material changes we will email the address on your account before the change takes effect and update the "Last updated" date above. Continued use after the effective date means you accept the updated policy.

The rei.OS app for iPhone and Android gives you access to the same Service and collects the same kinds of information described above. It also uses these device features, only when you use the feature that needs them and only after your device asks for your permission:

• Camera: to photograph receipts, property conditions, and walkthroughs, which are saved to the property you choose.
• Microphone and speech recognition: for walkthrough voice notes and spoken requests to the built-in assistant.
• Photos: to attach pictures already on your device to a property.
• Location: to suggest the property you are standing at when you upload a photo or document. We do not track your location in the background.
• Notifications: if you allow them, we store a device token so we can send task, approval, and account notifications. You can turn them off in your device settings at any time.

You can withdraw any of these permissions in your device settings; the rest of the app keeps working. Product analytics (PostHog) also run inside the app, as described in Cookies and Analytics. The app shows no ads, and we do not use the app to track you across other companies' apps or websites.

REI.OS LLC, Ohio, United States. Privacy questions and requests go to info@reiosapp.com.