Privacy Policy

Last updated: February 21, 2026

Appraise Properties, LLC (“Appraise Properties,” “we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our commercial real estate appraisal platform, including our website, web application, API, Microsoft Office add-in, documentation portal, and any related services (collectively, the “Service”).

If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1

Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

  • •Create an account — name, email address, password, professional credentials, and organization affiliation.
  • •Complete your profile — phone number, business address, professional license numbers, and role within your organization.
  • •Use the Service — property data, comparable sale and lease information, appraisal assignment details, client information, cost approach data, income and expense data, file uploads (photos, documents, spreadsheets), and notes or comments you enter.
  • •Submit bids — bid amounts, terms, scope of work, and related correspondence within the bidding pipeline.
  • •Communicate with us — support tickets, emails, feedback forms, and any other correspondence.
  • •Subscribe or make a payment — billing address and payment method details (processed by our third-party payment processor; we do not store full credit card numbers).

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

  • •Device and browser information — IP address, browser type and version, operating system, device type, and screen resolution.
  • •Usage data — pages viewed, features used, search queries (including AI-powered natural language searches), clicks, time spent on pages, and navigation paths.
  • •Log data — access times, error logs, referring URLs, and API request metadata.
  • •Location data — approximate location inferred from IP address; precise geolocation only if you use map features and grant browser permission.
  • •Cookie and tracking data — as described in Section 8 below.

1.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

  • •Authentication providers — if you sign in using a third-party identity provider (e.g., Google, GitHub), we receive your name, email address, and profile picture as permitted by that provider.
  • •Public property records — property data from county assessors, MLS systems, and public databases used to populate or validate records within the Service.
  • •Mapping and geocoding services — address verification and geolocation data from providers such as Google Maps.
  • •Accounting integrations — if you connect QuickBooks or similar services, we receive invoice and payment data as necessary to facilitate synchronization.
2

How We Use Your Information

We use the information we collect for the following purposes:

  • •Provide and operate the Service — including property management, appraisal assignment tracking, comparable analysis, mapping, report generation, and Microsoft Office integration.
  • •Process transactions — manage subscriptions, process payments, and send billing-related communications.
  • •Improve and develop the Service — analyze usage patterns, diagnose technical issues, and develop new features.
  • •AI-powered features — process natural language search queries and provide intelligent search results. Your search queries may be sent to third-party AI providers (such as Google Gemini) for processing. These queries are not used to train third-party AI models.
  • •Personalize your experience — remember your preferences, saved filters, map views, and workspace configurations.
  • •Communicate with you — send service announcements, security alerts, support responses, and, with your consent, product updates and marketing communications.
  • •Ensure security — detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
  • •Enforce our terms — comply with our Terms of Service and other legal obligations.
  • •Audit and compliance — maintain audit logs for data integrity, regulatory compliance, and internal record-keeping.
3

Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal grounds:

  • •Performance of a contract — processing necessary to provide the Service under our Terms of Service.
  • •Legitimate interests — improving our Service, ensuring security, preventing fraud, and marketing our products (where not overridden by your rights).
  • •Consent — where you have given explicit consent, such as for marketing emails or optional analytics.
  • •Legal obligation — where processing is required to comply with applicable law.
4

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

4.1 Within Your Organization

If you belong to an organization on Appraise Properties, other members of your organization may see your name, role, and work product (assignments, properties, comparables) in accordance with the permissions set by your organization’s administrator. Organization administrators can manage member access, roles, and data visibility.

4.2 Service Providers

We share data with trusted third-party service providers who assist us in operating the Service, including:

  • •Cloud infrastructure — Amazon Web Services (AWS) for hosting, compute, and file storage (US-East-2 region, Ohio).
  • •Database hosting — Neon for PostgreSQL database services (US-East-2 region).
  • •Frontend hosting — Vercel for website and application delivery.
  • •Payment processing — third-party payment processors to handle billing securely.
  • •Mapping services — Google Maps Platform for geocoding, mapping, and address verification.
  • •AI services — Google Gemini for natural language search processing.
  • •Email and communications — transactional email providers for account notifications and support.
  • •Analytics — tools that help us understand how the Service is used.

These service providers are contractually obligated to use your data only as necessary to perform services on our behalf and to maintain appropriate security measures.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to:

  • •Comply with a legal obligation, subpoena, court order, or government request.
  • •Protect and defend our rights or property.
  • •Prevent or investigate possible wrongdoing in connection with the Service.
  • •Protect the personal safety of users or the public.

4.4 Business Transfers

If Appraise Properties is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

  • •Account data — retained for the duration of your account and for up to 30 days after account deletion to allow for recovery.
  • •Property and appraisal data — retained for the duration of your account. Upon account deletion, your organization’s administrator may retain organizational data in accordance with their retention policies.
  • •Audit logs — retained for a minimum of 7 years to support regulatory compliance and data integrity requirements common in the appraisal industry.
  • •Billing records — retained as required by applicable tax and accounting laws.
  • •Server logs — automatically purged after 90 days.
  • •Backups — retained for up to 30 days and then automatically deleted.

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

6

Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

  • •Encryption in transit — all data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
  • •Encryption at rest — data stored in our databases and file storage systems is encrypted using AES-256 encryption.
  • •Access controls — role-based access control (RBAC) and row-level security (RLS) ensure users can only access data they are authorized to view.
  • •Authentication security — support for passkeys (WebAuthn), multi-factor authentication (MFA/2FA), single sign-on (SSO), and secure session management.
  • •Audit logging — comprehensive audit trails track data access and modifications for accountability.
  • •Infrastructure security — our cloud infrastructure is hosted in SOC 2-certified data centers with physical security controls, firewalls, and intrusion detection systems.
  • •Regular security assessments — we conduct periodic security reviews and vulnerability assessments.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

7

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 All Users

  • •Access and portability — request a copy of the personal data we hold about you in a structured, machine-readable format.
  • •Correction — request that we correct inaccurate or incomplete personal data.
  • •Deletion — request deletion of your personal data, subject to legal retention requirements.
  • •Account closure — close your account at any time through account settings or by contacting support.
  • •Marketing opt-out — unsubscribe from marketing emails using the link in any marketing email, or by updating your communication preferences in account settings.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • •Right to know — request information about the categories and specific pieces of personal information we have collected, the sources from which it was collected, the business purpose for collection, and the categories of third parties with whom we share it.
  • •Right to delete — request deletion of your personal information, subject to certain exceptions.
  • •Right to correct — request correction of inaccurate personal information.
  • •Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising.
  • •Right to limit use of sensitive personal information — where applicable.
  • •Non-discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us using the information in Section 13. We will verify your identity before processing your request.

7.3 EEA/UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

  • •Right to restriction — request restriction of processing of your personal data.
  • •Right to object — object to processing based on legitimate interests or for direct marketing.
  • •Right to withdraw consent — withdraw consent at any time where processing is based on consent.
  • •Right to lodge a complaint — file a complaint with your local data protection authority.
8

Cookies and Tracking Technologies

8.1 Types of Cookies We Use

  • •Essential cookies — required for authentication, session management, security, and core functionality. These cannot be disabled.
  • •Functional cookies — remember your preferences, such as theme settings, saved filters, and map configurations.
  • •Analytics cookies — help us understand how users interact with the Service, which pages are most visited, and where users experience issues.

8.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may prevent you from using the Service. For more information on managing cookies, visit your browser’s help documentation.

8.3 Do Not Track

We currently do not respond to Do Not Track (DNT) browser signals, as there is no universally accepted standard for how to respond to such signals. However, you can manage your privacy preferences using the cookie controls described above.

9

International Data Transfers

Appraise Properties is based in the United States, and our servers and service providers are located primarily in the United States (AWS US-East-2 region, Ohio). If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

For users in the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to ensure an adequate level of data protection for international transfers.

10

Children’s Privacy

The Service is designed for professional use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us using the information in Section 13.

11

Third-Party Links and Integrations

The Service may contain links to third-party websites or integrate with third-party services (such as Google Maps, QuickBooks, and Microsoft Office). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service.

12

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

  • •Update the “Last updated” date at the top of this page.
  • •Notify you by email or through a prominent notice within the Service.
  • •Where required by law, obtain your consent before applying material changes.

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

13

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out through our contact page.

We will respond to privacy-related inquiries within 30 days, or sooner where required by applicable law.