Privacy Policy
Effective September 2026 · Real Deal Engine · realdealengine.io
This policy explains what information Real Deal Engine ("we," "us") collects when you use realdealengine.io and the Real Deal Engine application (the "Service"), and how we use it.
Information you give us
- Email address — when you unlock a report, join our mailing list, or sign in to sync deals across devices.
- Deal inputs — the property addresses, site parameters, and financial assumptions you enter to run an analysis. Saved deals are stored in your browser and, if you sign in, in your account.
Payments
Purchases are processed by Stripe. Your card number goes directly to Stripe and never touches our servers. We receive only what we need to fulfill your purchase: your plan, payment status, and a Stripe customer reference.
Information collected automatically
- Product analytics (PostHog) — high-level usage events (e.g. "analysis completed"). Automatic click capture and session recording are off, and URL parameters (which can contain addresses) are stripped before sending.
- Error monitoring (Sentry) — crash and error reports so we can fix bugs. Reports are scrubbed of cookies, request bodies, URL parameters, and email addresses before sending.
- Hosting logs (Vercel) — standard server logs, including IP address, used for security and rate limiting.
Property data
Analyses are enriched with property, parcel, tax, and market data from licensed data providers (such as ATTOM) and public government sources (such as FEMA, the U.S. Census Bureau, NOAA, and USDA). Ownership and tax details shown in the app come from public records compiled by those providers, not from our users. We surface this information to you for your analysis — we do not sell it, resell it, or build marketing profiles from it.
How we cache property lookups
To keep results fast and to avoid re-billing an external provider each time the same address is queried, we temporarily cache the property and parcel records returned for an address. This cache is keyed to the address — not to you, your account, or your identity — and it holds public-record property data, never a profile of you or a history of your searches. Cached records are refreshed at least every 90 days. When this cache is turned off, every lookup goes live to the provider.
Cookies & local storage
- rde_tier — a signed, HttpOnly cookie set after a purchase so our servers can verify your plan. Expires after 30 days.
- googtrans — remembers your language choice if you use the in-app translator.
- Local storage — your saved deals and preferences live in your own browser. Clearing your browser data removes them.
We do not use advertising cookies or cross-site trackers.
How we use your data
Real Deal Engine is a data-retrieval and analysis tool. We use the information described above solely to operate, secure, and improve the Service — specifically to:
- Run your analyses — geocode the address you enter and retrieve property, parcel, valuation, flood, demographic, and environmental data from the sources above to build your feasibility report and 3D massing.
- Deliver what you ask for — show your results on screen and let you email, download, or share the reports and pro-forma files you generate.
- Process purchases — confirm your plan and manage your subscription or one-time purchase through Stripe.
- Send only the emails you opted into — your welcome report and any mailing-list updates you signed up for.
- Sync your saved deals — only if you create an account and sign in; otherwise your deals stay in your own browser.
- Keep the Service running and improve it — rate-limiting and abuse prevention, fixing errors, and understanding in aggregate which features are used.
What we do not do. We do not sell, rent, or resell your personal information or your search history; we do not build advertising or marketing profiles about you; and we do not share the addresses, deals, or reports you create with other users — except a deal you choose to publish through a share link, which redacts financial figures. The property information in a report is surfaced from third-party providers — we are not warehousing it or your clients' information.
Not professional advice
Reports are feasibility estimates for screening and decision-support — not a survey, title report, appraisal, or engineering, legal, or investment advice. Valuation and zoning figures are labeled estimates; verify all figures with the relevant jurisdiction and licensed professionals before relying on them. See our Terms of Service.
Service providers
We share data only with the processors that operate the Service: Stripe (payments), SendGrid (email), Supabase (account & deal sync), PostHog (analytics), Sentry (error monitoring), Vercel (hosting), Google (maps, fonts, optional translation), OpenAI (AI features — see below), and our property-data providers. Each receives only what its function requires.
AI processing
Some features send data to OpenAI to be processed: the investor memo, the error check, the unit-mix suggestion, and — where we hold no verified local rule — an estimate of the zoning for an address. What is sent is the property address and the analysis figures for that project. We do not send your email address, account identifier, payment details, or saved-deal history, and we do not use your inputs to train any model.
Retention
Cached property lookups are refreshed at least every 90 days (see “How we cache property lookups”). Mailing-list contacts stay until you unsubscribe. Account-synced deals stay until you delete them or your account. Server logs and error reports are retained on short, rolling windows by the respective providers.
Your rights
You can unsubscribe from any email in one click, delete saved deals in the app, and request access to or deletion of your personal information by emailing founders@realdealengine.io.
California privacy rights (CCPA/CPRA)
Real Deal Engine is based in California. Whether or not we currently meet the revenue and volume thresholds that make the California Consumer Privacy Act mandatory, we apply the following to every user.
Categories of personal information we collect. Using the statutory categories:
- Identifiers — email address (if you give it), account identifier, IP address, device and browser identifiers.
- Commercial information — reports purchased, subscription status, and the properties you analysed and saved.
- Internet or network activity — pages viewed, features used, and error diagnostics.
- Geolocation — only the property addresses you type in. We do not collect your device location.
- Inferences — none. We do not build profiles about you.
We do not collect sensitive personal information as the CPRA defines it (such as government identifiers, precise geolocation, health, biometrics, race, religion, or the contents of your communications), and we do not process it to infer characteristics. Payment card details go directly to Stripe and never reach our servers.
Where it comes from. Directly from you (addresses, project inputs, email); automatically from your device as you use the Service; and from our payment processor (subscription status only).
Why we use it. To run the analyses you request, deliver and email your reports, operate accounts and deal sync, take payment, keep the Service secure and working, and — if you opt in — send product email. Nothing more.
Disclosure. In the previous 12 months we disclosed personal information for business purposes only, to the service providers listed above, each under contract and limited to what its function requires.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising — the two things the CCPA and CPRA define as "sale" and "sharing." We have never done so, including in the previous 12 months, and we do not sell or share the personal information of anyone under 16. We run no advertising trackers.
Your rights. Regardless of where you live, you may ask us to:
- Know what personal information we hold about you, where it came from, why we have it, and who received it.
- Access a portable copy of it.
- Correct anything inaccurate.
- Delete it, subject to narrow exceptions such as completing a transaction, security, or a legal obligation.
- Opt out of sale or sharing — there is nothing to opt out of, because we do neither.
- Limit the use of sensitive personal information — not applicable, because we do not collect it.
- Not be discriminated against for exercising any of these rights. We will not deny you the Service, charge you a different price, or give you a lesser experience.
How to exercise them. Email founders@realdealengine.io with the request. We will acknowledge within 10 business days and respond within 45 days, extending once by a further 45 days if genuinely needed, and we will tell you if we do. To verify you, we will ask you to reply from the email address on the account and to confirm a recent detail such as a saved property — we ask for nothing more than is needed to match you to your data. An authorised agent may act for you with your written permission, which we may ask to confirm with you directly. Exercising these rights is free.
Shine the Light. Under California Civil Code §1798.83, California residents may request details of personal information disclosed to third parties for their direct marketing purposes. We do not make such disclosures.
Children
The Service is not directed to children and is intended for users 18 or older.
Changes
If we make material changes to this policy, we will update this page and its effective date.