Privacy Policy

REI Compass™ is committed to protecting the privacy and security of the real estate investors, operators, and professionals who rely on our platform. We built REI Compass™ to help you organize deals, run analysis, manage your Power Team, and stay accountable to your investing goals — and we recognize that the information you entrust to us to do that is sensitive.

This Policy describes what we collect, what we do not collect, how we use information, and the rights you have with respect to your data. By creating an account or otherwise using REI Compass™, you acknowledge that you have read and understood this Policy.

We collect only the information necessary to operate the platform and provide the services you request.

Account Information

• Name
• Email address
• Authentication information (such as hashed password credentials or federated identity tokens)
• Account status (for example, active, disabled, or pending verification)

User Content

Content you create or upload while using REI Compass™ is stored so it can be displayed back to you and used within the features you activate. This includes:

• Deals
• Property analysis
• Power Team contacts
• Journal entries
• Reports
• Goals
• Notes
• Calculator data

Security Information

• Activity logs
• Security logs
• Device information
• IP address
• User agent

Authentication

• Multi-Factor Authentication (MFA) enrollment and verification information
• Login history
• Password reset events

REI Compass™ is a tool for organizing and analyzing your real estate investing activity. We do not collect, store, or process the following categories of information:

• Credit card numbers
• Bank account information
• Social Security Numbers
• Government-issued identification
• Tax returns
• Credit reports

We use the information we collect strictly to:

• Operate the REI Compass™ platform
• Authenticate users and secure account access
• Provide the specific services and features you request
• Detect, investigate, and prevent security incidents and abuse
• Generate reports and analyses you have configured
• Provide customer support and respond to your inquiries
• Comply with our legal, tax, and regulatory obligations

We do not sell your personal information, and we do not use your user content to train third-party advertising models.

REI Compass™ relies on a small set of vetted service providers to deliver the platform. Each provider receives only the information necessary to perform its specific function.

• Supabase — database, authentication, and application storage
• Cloudflare Turnstile — bot and abuse protection on public-facing forms
• Google OAuth — optional federated sign-in, when you choose to use it
• Lovable Hosting — application hosting and delivery
• AI providers — used only when you invoke AI-powered features
• Stripe — payment processing (once billing is enabled)

These providers act as processors on our behalf and are contractually required to protect your information consistent with the purposes described in this Policy.

REI Compass™ currently uses only essential technologies — cookies, tokens, and similar mechanisms — required to operate the platform. These are used for:

• Authentication
• Security
• Session management
• Bot protection

Certain features within REI Compass™ use artificial intelligence to help you summarize, analyze, or draft content faster. When you use an AI feature, the relevant inputs are sent to our AI provider solely to generate the requested output.

REI Compass™ allows you to store contact information for sellers, buyers, contractors, lenders, agents, attorneys, property managers, vendors, and other individuals who are part of your Power Team or transactions.

You are solely responsible for ensuring that you have the legal right to collect, store, and manage that contact information within REI Compass™, including under any applicable privacy laws. REI Compass™ stores this information solely on your behalf and only for the purposes you direct.

Protecting your account is a first-class product concern. Current security measures include:

• Encrypted connections between your device and REI Compass™
• Industry-standard password hashing
• Multi-Factor Authentication (MFA)
• Cloudflare Turnstile bot protection on public forms
• Row Level Security to isolate each user's data
• Audit and activity logging
• Secure authentication flows
• Managed, secure hosting infrastructure

• Items you delete within REI Compass™ generally remain recoverable for approximately 30 days before permanent removal.
• Deleted accounts generally remain recoverable for approximately 30 days before permanent removal.
• Security, authentication, and audit logs are retained according to our operational and security requirements.

Retention periods may be extended where required to comply with our legal obligations, resolve disputes, or enforce our agreements.

As a REI Compass™ user, you may:

• Update your account information at any time from within the application
• Delete your account
• Request account recovery within the retention window described above
• Download your information (self-service export coming soon during the Beta)
• Contact us with any privacy questions or requests

To exercise any of these rights, contact us using the addresses in the Contact card below. We may need to verify your identity before acting on a request.

REI Compass™ is intended solely for adults 18 years of age or older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to REI Compass™, please contact us so we can remove it.

We may update this Privacy Policy from time to time to reflect changes in the platform, our practices, or applicable law. When we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you within the application or by email. Your continued use of REI Compass™ after an update constitutes acceptance of the revised Policy.