We do not sell your personal data to third parties. We use your data only to operate the platform, improve our services, and communicate with you about your account.
1. Who We Are
Underlytix LLC ("Underlytix," "we," "us," or "our") operates the capital intelligence platform at underlytix.com (the "Platform"). This Privacy Policy explains how we collect, use, store, and share information when you use the Platform.
For privacy questions, contact us at support@underlytix.com.
2. Information We Collect
A. Information You Provide Directly
| Category | Examples | Purpose |
|---|
| Account Information | Name, email address, phone number, password (hashed) | Account creation and authentication |
| Professional Information | Real estate license number, brokerage name, lender company, lender type, lending states | Role verification and portal access |
| Deal Data (Investors) | Property address, loan amount, purchase price, ARV, credit score, deal type, financial figures | AI deal analysis and lender matching |
| Client Data (Realtors) | Client descriptions entered into the prequal chat: income, employment type, credit range, purchase price, property type, location, debts, HOA, taxes, insurance | Generating prequalification estimates for your clients |
| Payment Information | Billing email, subscription status | Subscription management (payment card data is processed and stored by Stripe, not by us) |
B. Information Collected Automatically
- Usage data: Pages visited, features used, session duration, number of analyses run.
- Device and browser data: IP address, browser type, operating system, referral URL.
- UTM parameters: Campaign source, medium, and name when you arrive via tracked links (e.g., ctcready.com).
We do not use cookies for advertising or cross-site tracking. We do not integrate with advertising networks.
3. How We Use Your Information
- Providing the Platform: Running AI deal analysis, generating prequalification estimates, matching investors to lenders, and displaying results.
- Account management: Authentication, password reset, usage tracking against plan limits.
- Communications: Welcome emails, analysis completion notifications, billing receipts, and account alerts. We use Resend to deliver transactional emails.
- Platform improvement: Understanding how users interact with features to improve reliability and accuracy.
- Fraud prevention and compliance: Detecting misuse, enforcing our Terms of Service, and complying with applicable law.
- Operator reporting: Aggregated, anonymized metrics used internally to measure platform health (deal volume, pass rates, geographic distribution).
4. Client Data Entered by Realtors
When realtors use the Realtor Portal, they enter information about their clients (buyers). This data is processed to generate prequalification estimates.
- Client data is stored in our database associated with the realtor's account, not with any individual consumer record.
- We do not use client data to contact, profile, or market to any individual consumer.
- Realtors are responsible for obtaining any consents required by their jurisdiction before entering client information into the Platform.
- Client data is retained for 24 months from the date of entry or until the realtor's account is deleted, whichever comes first.
5. How We Share Information
We do not sell your personal data. We share data only in the following circumstances:
- Stripe, Inc.: Payment processing. Stripe receives your email and subscription details. Stripe's Privacy Policy governs their use of this data.
- Supabase, Inc.: Database and backend infrastructure. Your data is stored in Supabase-managed PostgreSQL databases on AWS infrastructure.
- Anthropic, PBC: AI analysis engine. Deal details and prequal chat messages are sent to Anthropic's Claude API to generate analysis. Anthropic does not use API-submitted data to train its models per their API Terms.
- Resend, Inc.: Transactional email delivery. Your email address is shared with Resend to deliver account and notification emails.
- Notion Labs, Inc.: CRM and operator pipeline. Deal submissions and lender activity are synced to an internal Notion workspace accessible only to Underlytix operators.
- Legal requirements: We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of Underlytix, its users, or the public.
- Business transfer: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.
6. Data Retention
| Data Type | Retention Period |
|---|
| Account information | Duration of account plus 90 days after deletion |
| Deal analysis records (investors) | Duration of account plus 90 days |
| Client prequal records (realtors) | 24 months from creation |
| Payment and billing records | 7 years (legal/tax compliance) |
| Server logs and usage data | 90 days |
7. Data Security
We implement the following security measures:
- All data in transit is encrypted via TLS 1.2 or higher.
- Passwords are hashed before storage and never stored in plaintext.
- Authentication tokens are signed and time-limited.
- Database access is restricted to authorized application services.
- Netlify edge functions and Supabase edge functions handle sensitive operations server-side, not in the browser.
No system is completely secure. If you believe your account has been compromised, contact us immediately at support@underlytix.com.
8. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and associated data. Billing records may be retained for legal compliance periods.
- Portability: Request export of your data in a machine-readable format.
- Opt-out of non-essential emails: You may unsubscribe from marketing emails at any time. Transactional emails (receipts, alerts) cannot be disabled while your account is active.
To exercise any of these rights, email us at support@underlytix.com from the email address associated with your account. We will respond within 30 days.
9. California Privacy Rights (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- The right to know what personal information we collect, use, share, and sell (we do not sell).
- The right to delete personal information we have collected.
- The right to correct inaccurate personal information.
- The right to opt out of the sale or sharing of personal information (we do not sell or share for advertising).
- The right to non-discrimination for exercising your privacy rights.
To submit a CCPA request, email support@underlytix.com with "CCPA Request" in the subject line.
10. Children's Privacy
The Platform is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact us immediately and we will delete it.
11. Third-Party Links
The Platform may contain links to third-party websites (e.g., Stripe billing portal, Notion CRM). This Privacy Policy does not apply to those sites. We are not responsible for their privacy practices.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If we make material changes, we will notify active subscribers by email at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.
13. Contact Us
For privacy questions, data requests, or concerns:
Email: support@underlytix.com
Website: underlytix.com