Privacy Policy

We collect information you provide directly, including:

• Account Information: Name, email address, phone number, and password when you create an account
• Investment Profile: Investment preferences, budget ranges, target markets, property types, and deal criteria
• Financial Documents: Proof of funds documentation and financial verification materials you choose to upload
• Identity Documents: Government-issued identification (such as passports, driver's licenses, or national identity cards) when required for identity verification purposes, including images of such documents
• Biometric Data: Facial images (selfies) and facial geometry data collected during our identity verification process for the purpose of comparing your likeness to your identity document photo. See Section 2A below for detailed information about how we collect, use, and protect biometric data
• Deal Submissions: Property information, deal terms, and related documentation you submit through the platform
• Communications: Messages, inquiries, and correspondence you send to us or through the platform

When you access or use our Service, we automatically collect certain information, including:

• Usage Data: Pages visited, features used, deals viewed, search queries, and interaction patterns
• Device Information: Device type, operating system, browser type, unique device identifiers, and IP address
• Location Data: General geographic location based on IP address
• Session Information: Session duration, referring URLs, and exit pages

We may receive information about you from third-party sources, including:

• Authentication providers when you sign in using third-party services
• Business partners who may refer you to our platform
• Publicly available sources related to real estate records

During the identity verification process, the following data may be collected:

• Identity Document Images: Photographs or scans of your government-issued identification document (e.g., passport, driver's license, national ID card)
• Facial Images: A selfie or live photograph of your face, captured during the verification session
• Biometric Identifiers: Facial geometry data derived from your selfie and identity document photo, used solely for the purpose of verifying your identity through 1:1 face matching and liveness detection
• Document Data: Information extracted from your identity document via optical character recognition (OCR), including your full name, date of birth, document number, and nationality
• Verification Results: The outcome of the identity verification process, including approval status and any reasons for resubmission or decline

Biometric data (facial geometry) is collected and used exclusively for the following purposes:

• Comparing the selfie you provide with the photograph on your identity document to confirm you are the document holder
• Performing liveness detection to prevent fraud (e.g., ensuring a real person is present rather than a photograph or video)

Biometric data is not used for any other purpose, including surveillance, tracking, profiling, or marketing. We do not sell, lease, or trade biometric data.

Identity verification is performed by Didit (Gamium Corp S.L., operating as didit.me), a third-party identity verification provider. When you initiate the verification process, your identity document images, facial images, and biometric data are transmitted to and processed by Didit on our behalf. Didit acts as a data processor under our instructions and is contractually obligated to:

• Process your data only for the purpose of identity verification
• Implement appropriate technical and organizational security measures to protect your data
• Not retain biometric data beyond the period necessary to complete the verification or as required by applicable law

For more information about Didit's data practices, please review Didit's Privacy Policy.

Biometric identifiers (facial geometry data) used during identity verification are not permanently stored by REI.md. We retain only the verification outcome (approved, declined, or resubmission required) and extracted identity information (name, date of birth) necessary for ongoing compliance and account management. Biometric identifiers are retained by our verification partner only for the duration necessary to complete the verification process, after which they are deleted in accordance with applicable data protection laws.

In addition to the general rights described in Section 6, you may have specific rights regarding your biometric data under applicable state laws (such as the Illinois Biometric Information Privacy Act). These rights may include:

• The right to be informed about the collection and storage of your biometric data
• The right to request deletion of your biometric data
• The right to know the specific purpose and duration for which your biometric data is collected, stored, and used

To exercise any rights related to your biometric data, please contact us using the information provided in Section 12.

• Creating and managing your account
• Verifying your identity to comply with applicable regulations and grant access to platform features
• Matching you with relevant off-market real estate opportunities
• Processing deal inquiries and facilitating connections
• Providing customer support and responding to your requests
• Processing transactions and partnership arrangements

• Analyzing usage patterns to improve the user experience
• Developing new features and functionality
• Conducting research and analytics
• Monitoring and improving Service performance

• Sending deal alerts and opportunity notifications
• Providing Service updates and important announcements
• Responding to your inquiries and support requests
• Sending marketing communications (with your consent where required)

• Protecting against fraud and unauthorized access
• Enforcing our Terms of Service
• Complying with legal obligations
• Protecting the rights and safety of our users

We share information with third-party service providers who perform services on our behalf, including:

• Authentication Services: We use Clerk to manage user authentication and account access
• Identity Verification Services: We use Didit (didit.me) to perform identity verification (KYC), including document verification, facial recognition, liveness detection, and AML screening. When you complete identity verification, your identity documents, facial images, and biometric data are processed by Didit. See Section 2A for detailed information
• Error Monitoring: We use Sentry to monitor and diagnose technical issues with our Service
• Payment Processing: We use payment processors to handle financial transactions securely
• Analytics: We use analytics providers to help us understand how our Service is used

With your consent, we may share relevant information with deal counterparties or partners to facilitate real estate transactions.

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose information to:

• Comply with legal process or government requests
• Enforce our Terms of Service and other agreements
• Protect our rights, privacy, safety, or property
• Respond to claims that content violates third-party rights

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

You may request access to the personal information we hold about you and request a copy of your data in a portable format.

You may request that we correct any inaccurate or incomplete personal information we hold about you.

You may request that we delete your personal information, subject to certain exceptions (such as compliance with legal obligations or completion of pending transactions).

You may opt out of receiving marketing communications from us by following the unsubscribe instructions in those communications or by contacting us directly.

• Essential Cookies: Required for the Service to function properly, including authentication and security
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences

Most web browsers allow you to control cookies through their settings. However, disabling certain cookies may limit your ability to use some features of our Service.