Privacy Policy

1. Who We Are

Aletheia Technologies LLC ('Aletheia,' 'we,' 'us,' or 'our') is a Utah limited liability company that operates usealetheia.com, a real estate offer management platform. We are not a real estate broker and do not provide legal, financial, or real estate advice.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Full name
• Email address
• Password (stored as a one-way bcrypt hash — we cannot read your password)
• Phone number (optional, used for SMS notifications and verification)
• Mailing address (optional)
• Property addresses associated with offers or listings
• User role (buyer, seller, agent, or builder)
• Financial information related to transactions (earnest money amounts, purchase prices, financing details)

2.2 Professional Information

For agents and builders, we additionally collect:

• Real estate license number and state
• Brokerage name
• Company name and builder license number (builders)

2.3 Identity Verification

For certain transactions, we may collect identity verification documents and selfie photos to verify your identity. These are stored securely and used solely for verification purposes.

2.4 Offer and Transaction Data

When you submit or respond to offers, we collect all offer fields including:

• Purchase price, earnest money, financing type, and contingencies.
• Closing and possession dates.
• Buyer legal name, address, phone, and email (as entered on the offer form).
• Agent information, if applicable.
• Offer status history, counter-offers, and negotiation events.

2.5 Documents and Signatures

We collect and store:

• Documents you upload (pre-approval letters, proof of funds, inspection reports, property disclosures, title documents, etc.).
• Digital signature data and cryptographic hashes.
• IP addresses and timestamps associated with signatures, for legal audit trail integrity.

2.6 Payment Information

Payment card details are processed directly by Stripe, Inc. and are not stored on Aletheia servers. We store payment status, transaction IDs, Stripe receipt URLs, and the amount paid.

2.7 Communication Data

We store messages sent between buyers and sellers through the Platform's messaging system, negotiation hints, and property questions and answers.

2.8 Technical and Usage Data

We automatically collect:

• IP addresses
• Browser and device type (user agent strings)
• Device information (operating system, screen resolution)
• Session tokens (stored as secure, HTTP-only cookies)
• Login timestamps and rate limit data (to prevent brute-force attacks)
• Audit log entries for all significant platform actions

2.9 Communications Preferences

We store your opt-in or opt-out status for marketing emails, SMS messages, and feedback surveys.

3. How We Use Your Information

We use the information we collect to:

• Platform Operation: Create and manage your account, process offer submissions, facilitate negotiations, and coordinate transactions.
• Audit and Legal Integrity: Generate and maintain tamper-evident, hash-chained audit trails for legal integrity and regulatory compliance.
• Payment Processing: Process payments and subscriptions through Stripe.
• Notifications: Send transactional notifications (offer updates, status changes, deadlines) via email and SMS through SendGrid and Twilio.
• Marketing: Send marketing emails and product updates to users who have opted in.
• Feedback: Send feedback surveys and satisfaction questionnaires to users who have opted in.
• Fraud Prevention: Detect and prevent fraud, abuse, and security incidents through IP monitoring, rate limiting, and behavioral analysis.
• Legal Compliance: Comply with applicable federal and state laws, including real estate record-keeping requirements, the E-SIGN Act, and fair housing laws.
• Partner Referrals: When you choose to connect with a partner service (such as a title company, inspector, or lender) through the Platform, we share your contact information with that partner so they can assist you. We only share your information with partners you initiate contact with.
• Platform Improvement: Improve the Platform based on aggregated, anonymized usage patterns.

4. Marketing Communications and Opt-In

We will only send you marketing emails, product announcements, or feedback surveys if you have opted in. You may opt in during registration or at any time through your account settings. You may opt out at any time by:

• Clicking the unsubscribe link in any marketing email.
• Updating your preferences in your account settings.
• Emailing support@usealetheia.com.

Transactional notifications (offer received, offer accepted, deadline reminders) are not marketing communications and cannot be opted out of while your account is active, as they are necessary for platform operation.

5. How We Share Your Information

We share information only in the following circumstances:

5.1 With Other Platform Users

Offer data is shared between the buyer who submitted the offer and the seller who received it. Sellers see all offers on their property. Agents granted access by a buyer or seller may view relevant offer and document data in a read-only capacity.

5.2 With Service Providers

We share data with trusted third-party providers who help us operate the Platform:

• Stripe, Inc. (payment processing) — processes subscription payments, offer submission fees, and listing fees. Receives your name, email, and payment method details. United States.
• SendGrid (email delivery) — delivers transactional and marketing emails. Receives your email address and name. United States.
• Twilio (SMS delivery) — delivers text message notifications and verification codes. Receives your phone number. United States.
• Supabase (database hosting and file storage) — hosts platform data and uploaded documents. United States.
• Upstash (rate limiting and caching) — processes rate limit data to protect the Platform from abuse. Receives IP-based identifiers. United States.

5.3 Partner Referrals

If you choose to connect with a partner service provider through the Platform (such as a title company, home inspector, or lender), we will share your name, email, and phone number with that provider so they can assist you. We only share your information when you initiate the connection. We do not share your information with partners without your action.

5.4 Legal Requirements

We may disclose information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, safety, or property of Aletheia, our users, or the public.

5.5 Business Transfers

If Aletheia is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you via email or Platform notice before your data is transferred and becomes subject to a different privacy policy.

6. Data Retention

We retain your account information for as long as your account is active. If you close your account, we will delete your personal profile information within 90 days, except that we will retain:

• Transaction records, offer data, audit trails, and documents for a minimum of 7 years, as required for legal and regulatory compliance in real estate transactions and per industry record-keeping standards.
• Payment records as required by financial regulations.
• Earnest money tracking records for the same 7-year retention period.
• Any data required to resolve pending disputes or legal claims.

Retained records are stored securely and are not used for marketing purposes.

7. Data Security

We implement reasonable technical and organizational security measures to protect your information, including:

• Encryption: All data in transit is encrypted via HTTPS/TLS. Passwords are stored using bcrypt hashing — we cannot read your password.
• Secure Sessions: Session tokens are stored in secure, HTTP-only cookies with proper expiration.
• Audit Trails: All significant platform actions are logged in a tamper-evident, hash-chained audit trail that cannot be retroactively altered.
• Access Controls: Role-based access controls ensure users can only access data relevant to their transactions.
• Rate Limiting: Login attempts are rate-limited to prevent brute-force attacks.
• Secure File Storage: Uploaded documents are stored in private Supabase buckets with signed, time-limited access URLs.
• Environment Validation: Critical configuration variables are validated on startup to prevent misconfiguration.

No security system is perfect. We cannot guarantee that your information will never be accessed by unauthorized parties. If you believe your account has been compromised, contact us immediately at support@usealetheia.com.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update inaccurate information through your account settings or by contacting us.
• Deletion: You may request deletion of your account and personal data, subject to our legal retention obligations described in Section 6. Transaction records, offer data, and audit trails must be retained for a minimum of 7 years per real estate record-keeping requirements.
• Data Portability: You may request an export of your personal data in a commonly used format.
• Opt-Out: You may opt out of marketing communications at any time as described in Section 4.

To exercise these rights, contact us at support@usealetheia.com. We will respond within 30 days.

9. Children's Privacy

The Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us at support@usealetheia.com and we will promptly delete the account.

10. Utah Privacy Law

If you are a Utah resident, you may have additional rights under the Utah Consumer Privacy Act (UCPA), including the right to know what personal data we process, the right to delete your data, and the right to opt out of the sale of personal data. We do not sell personal data. To exercise your UCPA rights, contact support@usealetheia.com.

11. California Privacy Rights (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to our legal retention obligations described in Section 6.
• Right to Opt Out of Sale: We do not sell your personal information. No opt-out is necessary.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at support@usealetheia.com. We will respond to verifiable consumer requests within 45 days.

12. Cookies and Tracking

We use session cookies to keep you logged in. We do not use third-party advertising cookies or tracking pixels. The only cookie we set is a secure, HTTP-only session token necessary for Platform operation. You may disable cookies in your browser settings, but doing so will prevent you from logging in to the Platform.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on the Platform at least 14 days before changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.