Privacy Policy
Effective: August 5, 2026 · Last updated: August 5, 2026
This policy explains what personal information REIBrain collects, why we collect it, who we share it with, and the choices you have. REIBrain is operated by S&B Properties LLC (“we,” “us”), a Tennessee limited liability company.
The short version: we collect what we need to run your account and the product — your email, workspace details, billing status, and basic usage events. We never sell your data, we don’t use your workspace contents to train AI models, and we don’t run advertising trackers. Your card details go straight to Stripe and never touch our servers.
1. Information we collect
Information you give us
- Account: your email address, and the workspace or company name you choose. We sign you in with a one-time email link, so we do not store a password.
- Trial and demo requests: name, email, and optionally company, phone, role, deal volume, and anything you type into the message field.
- Content you create: properties, Buy Boxes, notes, offers, rehab estimates, and other deal information you enter or import.
- Support correspondence: emails you send us.
Information we collect automatically
- Product and site usage: pages viewed, features used, and events such as starting a trial or completing onboarding. These are stored in our own database.
- Technical data: IP address, browser type, and timestamps, generated by our hosting providers as part of serving and securing the site.
Information from third parties
- Billing status from Stripe — subscription state, plan, renewal date, and the last four digits and brand of your card. We never receive your full card number.
- Property, listing, market, and owner data from the data sources listed in section 4, which we retrieve on your behalf when you search or analyze a property.
2. Property owner information (important)
REIBrain retrieves information about property owners — names, mailing addresses, and, if you use skip tracing, phone numbers. These are people who are not our customers and who did not sign up for our service, so we want to be explicit about how this works.
- We retrieve this data at your direction, from licensed third-party providers, so that you can make direct contact about acquiring a property.
- In this respect you act as the controller of that information and we act as your processor. You are responsible for using it lawfully — see the obligations set out in our Terms of Service, including TCPA, Do Not Call, CAN-SPAM, and Fair Housing requirements.
- This data is not a consumer report and must not be used for credit, insurance, employment, or tenant-screening decisions.
- If a property owner contacts us directly and asks what we hold about them, we will respond and, where we are able and it is lawful to do so, delete it or direct them to the customer who obtained it.
3. Why we use it
- To provide the Service — authenticate you, store your work, and run the searches and analyses you ask for.
- To bill you and manage your subscription.
- To send service messages, such as sign-in links, trial reminders, and notices about changes to the Service.
- To improve the product by understanding which features are used, in aggregate.
- To keep the Service secure and investigate abuse.
- To comply with legal obligations.
We rely on performing our contract with you, our legitimate interest in operating and securing the Service, and your consent where required.
4. Who we share it with
We do not sell personal information and we do not share it for cross-context behavioural advertising. We use the following service providers, each of which receives only what it needs:
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Database and authentication | Account email, workspace data, your content |
| Vercel | Application hosting | Technical request data |
| Cloudflare | Website hosting, DNS, email forwarding | Technical request data; email you send to our addresses |
| Stripe | Payment processing | Name, email, billing address, card details (directly — not via us) |
| Anthropic | AI rehab estimates and offer drafting | Property details and listing photos you submit for analysis |
| Realtor.com (via RapidAPI) | Listing discovery | Your search criteria |
| RentCast | Property, rent, and owner data | Property addresses you look up |
| Tracerfy | Skip tracing | Property and owner details you submit |
| Microsoft (Graph) | Sending offer emails | The email you choose to send, and its recipient |
| U.S. Census Bureau, HUD | Public market data | ZIP codes you analyze |
We may also disclose information if required by law, to enforce our Terms, or in connection with a merger, acquisition, or sale of assets — in which case we will notify you before your information becomes subject to a different policy.
AI training: we do not use the contents of your workspace to train AI models, and our AI provider does not train on data submitted through its API.
5. Cookies and analytics
We use a small number of strictly necessary cookies to keep you signed in. We do not use advertising cookies or third-party ad trackers.
Product analytics are stored in our own database rather than sent to an external analytics company. If we later enable Google Analytics on the marketing site, we will update this policy first.
6. How long we keep it
- Account and workspace data: for as long as your account is active, and for 90 days after cancellation so you can reactivate — after which we delete or anonymise it.
- Expired trials: retained for 90 days after the trial ends, then deleted.
- Billing records: kept as long as required by tax and accounting law, typically seven years.
- Usage events: retained in aggregate.
You can ask us to delete your data sooner — see below.
7. Security
Data is encrypted in transit and at rest by our infrastructure providers. Each workspace is isolated at the database level so one customer cannot read another’s data. Access to production data is limited to the people who operate the Service. Sign-in uses one-time email links rather than stored passwords.
No system is perfectly secure. If a breach affects your personal information, we will notify you and any regulator as required by law.
8. Your rights and choices
You can ask us to:
- Access a copy of the personal information we hold about you;
- Correct information that is wrong;
- Delete your account and its data;
- Export your workspace data.
Email hello@reibrain.ai and we will respond within 30 days. We may need to verify your identity first.
Service messages such as sign-in links and billing notices are necessary to operate your account and cannot be turned off while the account is active. Any marketing email we send will include an unsubscribe link.
9. U.S. state privacy rights
Depending on where you live — including California, Colorado, Connecticut, Virginia, Texas, and other states with comprehensive privacy laws — you may have rights to know, access, correct, delete, and port your personal information, and to appeal a refusal.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising any privacy right. To make a request, email hello@reibrain.ai.
10. Children
REIBrain is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the product changes. If a change materially affects how we handle your personal information, we will notify you by email or in the app before it takes effect, and we will update the “last updated” date above.
12. Contact
Privacy questions, or to exercise any right above: hello@reibrain.ai
REIBrain is a product of S&B Properties LLC, a Tennessee limited liability company.