Privacy Policy

1. Who we are

We are TerraVenture AI LLC, a Florida limited liability company. Our principal place of business is at 6219 Bent Pine Dr, Apt 313B, Orlando, FL 32822. For any privacy-related question, contact us at privacy@terraventureapp.com.

2. Information we collect

2.1 Information you provide directly

• Account & authentication: name, email address, password (hashed), and other registration details handled by our identity provider (Supabase Auth).
• Investor profile: target market, experience level, capital available, target ROI, preferred strategy, and any other profile fields you fill in.
• Property & analysis data: properties you add, scenarios you create, comparable sales, notes, tasks, due-diligence verifications, custom inputs, files you upload, and chat-style prompts you send to AI tools.
• Billing data: if you subscribe to a paid plan, our payment processor (Stripe, when enabled) handles your card details — we receive only a token, transaction status, plan, and the last four digits of the card.
• Support communications: if you contact us, we keep a record of the exchange.

2.2 Information collected automatically

• Usage data: pages viewed, features used, gem charges, errors, timestamps, language and theme preferences, and basic device/browser fingerprint information.
• Cookies & similar technologies: see Cookies Policy for the full list.
• IP address & approximate location: used for security, rate-limiting, and fraud prevention.

2.3 Information received from third parties

• Listing data: public real-estate listing data via the Zillow / Redfin APIs (accessed through RapidAPI), keyed to the properties you investigate.
• Pricing references: retail pricing for renovation materials via The Home Depot APIs.
• AI providers: when AI Outputs are generated by Anthropic on our behalf, the input we sent and the response we received are logged for quality assurance.

3. How we use your information

We use the information described above to:

• provide, operate, and improve the Service;
• authenticate you and protect your account;
• pre-fill defaults and personalize AI recommendations using your investor profile;
• process payments, manage subscriptions and gem balances;
• send you transactional emails (sign-in, billing, security, important policy updates) and, with your opt-in, product or marketing emails;
• monitor and improve the quality of AI Outputs and underwriting models;
• detect, prevent, and respond to abuse, fraud, or security incidents;
• comply with legal obligations and enforce our Terms of Service.

4. Legal bases for processing (GDPR users)

If you are in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases:

• Performance of a contract — to provide the Service you signed up for.
• Legitimate interests — for security, fraud prevention, product improvement, and analytics, balanced against your rights.
• Consent — for optional marketing communications and any non-essential cookies. You may withdraw consent at any time.
• Legal obligation — to comply with applicable laws, court orders, or regulatory requirements.

5. Third-party service providers

We share information with the following processors / sub-processors so they can perform services on our behalf:

• Supabase — hosting, database, authentication, and file storage (United States).
• Anthropic — large-language-model inference for AI features (United States).
• RapidAPI — gateway to the Zillow / Redfin listing APIs (United States).
• The Home Depot — pricing references for renovation estimators (United States).
• Stripe — payment processing, when enabled (United States).
• PM2 / hosting infrastructure — runtime hosting of the Service.

Each processor is bound by its own privacy and data-processing terms. We require them to protect your data and to use it only to perform services for us.

6. AI processing of your data

When you use AI features (for example, the AI Capital Advisor, the AI Rehab Estimator, the Strategy Evaluation agent, or the Baseline AS-IS diagnostic), we send the relevant property data, scenario inputs, and the profile context you have set to our AI provider for the duration of the request. We do not use your prompts to train third-party general AI models; our AI provider may keep request logs for abuse monitoring under their own retention policies.

We may use anonymized, aggregated request data to improve our own engines and prompts.

7. Cookies & similar technologies

We use cookies and similar technologies (local storage, session storage) for essential functions like authentication, language and theme preferences, and remembering the state of the Setup Guide widget. See our Cookies Policy for the full breakdown and how to control them.

8. When we share your data

• With service providers as described in Section 5, to operate the Service.
• With your consent, for any other purpose disclosed when you provide it.
• For legal reasons — to comply with applicable law, valid legal process, or to protect rights, property, or safety.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets; we will continue to protect your data and notify you of any material change.

We do not sell your personal information for monetary consideration.

9. Data retention

We retain your information for as long as your account is active, plus a reasonable period after closure to comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion as described under “Your rights” below. Anonymized or aggregated data may be kept indefinitely.

10. Your rights & choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct or update inaccurate information;
• delete your personal information (subject to legal retention duties);
• port your data in a structured, machine-readable format;
• object to or restrict certain processing;
• withdraw consent at any time (without affecting prior processing);
• lodge a complaint with your local data-protection authority.

California residentshave additional rights under the CCPA / CPRA, including the right to know what we collect, the right to delete, the right to correct, and the right to opt out of any “sale” or “sharing” of personal information (we do not currently sell or share personal information as those terms are defined under CCPA).

To exercise any of these rights, contact privacy@terraventureapp.com. We will respond within the timeframe required by applicable law (usually 30–45 days).

11. Children’s privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, please contact us so we can delete it.

12. International data transfers

We are based in the United States, and our processors are primarily located in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other jurisdictions where our processors operate. We rely on standard contractual clauses or equivalent mechanisms where required.

13. Security

We use industry-standard administrative, technical, and physical safeguards designed to protect your information — including encryption in transit (TLS), encryption at rest for our database, role-based access controls, secret management, and least-privilege access. No security control is perfect; you are responsible for using a strong password and keeping your credentials confidential.

14. Data breach notification

If we become aware of a personal-data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority without undue delay, in accordance with applicable law.

15. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced via in-product notice or email at least 14 days before they take effect. The “Last updated” date at the top of this page shows when the Policy was last revised.

16. Contact

Questions about this Privacy Policy or how we handle your data? Reach us at privacy@terraventureapp.com or by mail at the address shown in the footer of this page.