Privacy Policy

1. Information We Collect

Account Information

• Email address, name, and company information
• Account credentials (securely hashed passwords)
• Billing information (processed securely through third-party payment processors)

Property & Client Data

• Commercial property information (addresses, descriptions, financial data)
• Client/tenant information entered into the platform
• Property documents, images, and notes
• Portfolio and relationship tracking data

AI Interaction Data

• Chat messages and queries sent to our AI assistant
• Generated documents (LOIs, analyses, reports)
• Search queries and location-based requests
• AI model usage patterns and preferences

Usage Information

• Log data (IP addresses, browser type, access times)
• Feature usage analytics
• Device and session information

2. How We Use Information

We use collected information to:

• Provide the Service – Process AI requests, generate documents, store property data, and enable platform features
• Improve AI capabilities – Analyze usage patterns to enhance AI model performance and accuracy
• Personalization – Customize your experience based on preferences and usage history
• Communication – Send service updates, feature announcements, and support responses
• Security – Detect fraud, prevent abuse, and maintain platform security
• Compliance – Meet legal obligations and respond to lawful requests
• Analytics – Understand aggregate usage patterns to improve the Service

3. Third-Party Services & Data Sharing

Google Cloud & Vertex AI

We use Google Cloud Platform and Vertex AI to process AI queries and generate content. Your queries and property context are transmitted to Google's servers for AI processing. Google processes this data according to their own privacy policies and data processing agreements.

Google Maps & Search Integration

When you use location-based features, we integrate with Google Maps API and Google Search Grounding. Location data and search queries are sent to Google for processing.

Database Providers

We use secure cloud database services (PostgreSQL) to store your property and client data.

We Do NOT:

• Sell your data to third parties for marketing purposes
• Share client-specific property information with competitors
• Use your proprietary deal information for our own business purposes
• Train publicly available AI models on your confidential data (though Google may use data according to their policies)

4. Data Security

We implement industry-standard security measures:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Database encryption at rest
• Role-based access controls
• Regular security audits and updates

However, no system is completely secure. Users are responsible for maintaining the confidentiality of their account credentials.

5. Data Retention

• Active accounts – Data is retained indefinitely while your account is active
• Canceled accounts – Data is retained for 30 days after cancellation, then permanently deleted
• Terminated accounts – Data may be immediately deleted or retained for fraud prevention
• Legal holds – Data may be retained longer if required by law or pending legal proceedings

6. Your Rights

Access & Export

You can access and export your property data, client information, and generated documents through the platform interface.

Correction & Deletion

You can edit or delete property information, clients, and documents directly through the Service.

Account Deletion

Contact support@virtue.company to request full account deletion.

GDPR Rights (EU Users)

• Right to access your personal data
• Right to rectification (correction)
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (note: we do not sell data)
• Right to non-discrimination for exercising CCPA rights

7. Cookies & Tracking

We use cookies and similar technologies for:

• Essential cookies – Session management and authentication
• Functional cookies – User preferences and settings
• Analytics cookies – Aggregate usage statistics (optional)

You can control cookie preferences through your browser settings.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect information from minors.

9. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers. For EU users, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

10. Business Transfers

If Virtue is acquired, merges, or undergoes bankruptcy, your information may be transferred to the successor entity. You will be notified of any such change.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice in the Service. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related questions, data access requests, or to exercise your rights:

Email: privacy@virtue.company
Support: support@virtue.company