Privacy Policy

Account information: name, email, phone, company, password (stored only as a secure hash — we cannot read it), tier, and communication preferences.

Content you submit: property records and photos, deal documents you upload to a deal room, messages and attachments you send other members, homeowner submissions, and your buying criteria.

Verification material: proof-of-funds documents, proof of contract or ownership, closing paperwork submitted for deal verification, and — where you choose to complete identity verification — a government-issued ID. This material is reviewed by platform administrators and is never shown to other members.

Safety and moderation records: if you block another member, report a conversation, or a report is made about you, we keep that record along with the reviewing administrator’s decision and any appeal you file. We also keep a log of administrative actions taken on the platform, so decisions about accounts can be reviewed.

Usage and payments: tool usage counts, server logs, and subscription status. Card details go directly to Stripe — they never touch our servers.

To run the platform: creating your account, connecting you with other members, powering analysis tools, processing subscriptions, sending transactional email and text messages (codes, alerts, receipts), reviewing verification material, keeping the network safe, and improving the service. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Other members see what you choose to share — your profile, records you publish, and messages you send. Deal documents and attachments are visible only to participants of that conversation. Verification material and moderation records are seen by administrators only.

Service providers process data on our behalf, each receiving only what its function requires:

• Supabase — database and file storage.
• Railway — application hosting and server logs.
• Stripe — subscription payments and card processing.
• Resend — transactional email delivery.
• Twilio — text-message delivery, if you choose SMS.
• RentCast — property addresses you look up, to return comparable sales.
• Google Places — city and ZIP searches in the title-company finder.
• Nominatim (OpenStreetMap Foundation) — turning addresses and areas you type into map coordinates.
• Carto — the map tiles the sourcing map is drawn on.
• Anthropic — analysing property photos you submit to the renovation estimate tool. Photos sent to that tool leave our servers for analysis; it is optional and only runs when you use it.
• Federal Reserve Bank of St. Louis (FRED) — published mortgage-rate data. No member information is sent.

We disclose information if the law requires it or to protect the platform and its members from fraud or abuse.

Traffic is encrypted in transit (HTTPS), passwords are hashed, uploaded documents live in access-controlled private storage reached only through short-lived signed links, and database access is restricted by row-level security. Uploads are checked to confirm the file is really the type it claims to be.

We keep information while your account is active. Messages and shared files stay in a conversation until a participant removes them or the conversation is closed. Records tied to a report or an appeal are kept while that review is open, and administrative action logs and billing records are kept as long as legal and accounting obligations require — including after an account is deleted.

You can edit your profile and communication preferences, switch to email-only, or delete your account entirely from Settings — deletion removes your personal information from the live platform, except records we are required to retain as described above. Depending on where you live (including California under the CCPA), you may have rights to access, correct, or delete your data; email us and we will honor them.

The platform is for adults — we do not knowingly collect information from anyone under 18.

We set no advertising or cross-site tracking cookies and do not track you across other websites. What we do set is functional:

• Your session cookie — an encrypted, signed cookie that keeps you signed in. Essential; the platform cannot work without it.
• Local storage in your browser — small preferences that never reach our servers, such as which onboarding checklist you dismissed, which cards you passed on, and whether you acknowledged the Compliance Hub notice. Clearing your browser data clears them.

Because there is no advertising or cross-site tracking to opt out of, the site does not respond to browser “Do Not Track” signals (this disclosure is made under California’s CalOPPA).

California residents may request to know, correct, or delete the personal information we hold about them, and to receive a copy in a portable format. Email support@outofsightmarket.com with the subject “Privacy Request” and we will verify your identity and respond within 45 days. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is no “sale/share” to opt out of. We will never discriminate against you for exercising these rights. Most requests can be handled instantly and yourself: Settings lets you change your email, unsubscribe from the member digest, or delete your account entirely.

Questions about this policy? Email support@outofsightmarket.com. If this policy changes materially, we’ll announce it on the platform before it takes effect. Continued use after the effective date means acceptance.