Privacy Policy

We collect information you provide directly to us, information generated through your use of our services, and information we may receive from third parties, as described below.

Information You Provide Directly: - Account registration details (name, email address, password) - Professional information (brokerage name, license number, specialization) - Profile and avatar uploads - Client data you enter into the platform (client names, contact details, property preferences, deal information, notes, documents, and tags) - Communication content (messages, support tickets, feedback) - Payment and billing information (processed by a third-party payment provider; we do not store full card numbers)

Information Generated Through Your Use: - Log data (IP address, browser type, operating system, referring URL, pages visited, time spent, and timestamps) - Device identifiers and cookies - Usage patterns and feature interaction data - Activity logs related to clients, deals, tasks, and documents within your account

Information From Third Parties: - OAuth identity data from Google or Microsoft when you choose to sign in via those providers (limited to the scopes you authorize) - Data from analytics or error-monitoring tools we use to improve the platform

We use the information we collect for the following purposes:

- Providing and maintaining the service — creating and managing your account, processing transactions, and delivering the features and functionality of SolidSeed - Personalizing your experience — tailoring content, recommendations, and interface settings to your preferences - Communication — sending you transactional emails (registration confirmation, password reset, email verification), service updates, and, where you have opted in, marketing communications - Security and fraud prevention — monitoring for unauthorized access, enforcing account lockout policies, and protecting against abuse - Analytics and improvement — understanding how the platform is used so we can improve features, fix bugs, and optimize performance - Legal and compliance obligations — responding to legal process, complying with applicable laws, and enforcing our Terms of Service - Support — responding to your inquiries and resolving issues

We use cookies and similar tracking technologies (such as local storage and session storage) to operate and improve SolidSeed.

Strictly Necessary Cookies: These are required for the platform to function. They maintain your logged-in session and store authentication tokens. You cannot opt out of these cookies without losing access to the service.

Functional Cookies: These remember your preferences (such as theme selection and sidebar state) to provide a consistent experience across sessions.

Analytics Cookies: We use anonymized analytics data to understand usage patterns. We do not build individual behavioral profiles from this data.

You can manage cookie preferences through your browser settings. For detailed information on how to do this, consult your browser's documentation. Note that disabling non-essential cookies may affect certain features of the platform.

We do not sell your personal information to third parties. We may share information in the following limited circumstances:

- Service providers: We share information with vendors and partners who assist in operating SolidSeed (e.g., hosting, database, payment processing, error monitoring). These providers are contractually bound not to use your data for their own purposes beyond providing the service. - Legal requirements: We may disclose information when required by law, court order, or government request, or when necessary to protect the rights, property, or safety of SolidSeed, its users, or the public. - Business transfers: If SolidSeed is acquired, merged, or undergoes a similar transaction, your information may be transferred to the acquiring entity. We will notify you of any such transfer in advance where required by law. - With your consent: We may share information in other circumstances with your explicit consent.

We do not share your client data with other SolidSeed users or with third parties unless you explicitly authorize it within the platform.

We retain your personal information for as long as your account is active or as needed to provide the service. Specific retention periods include:

- Active account data: Retained for the duration of your account plus a reasonable period afterward for operational continuity. - Security audit logs: Retained for 7 days as described in our security architecture. - Deleted accounts: When you delete your account, we begin a 30-day grace period after which your data is permanently removed from our primary systems. Anonymized or aggregated data may be retained for analytics purposes. - Legal holds: If your data is subject to a legal hold or regulatory requirement, we will retain it for the duration required by law, regardless of account status.

Backups may retain copies of your data for a limited period following deletion; these are not accessible and are overwritten during routine backup cycles.

Depending on your state of residence within the United States, you may have certain privacy rights. These may include:

- Access: The right to know what personal information we hold about you. - Deletion: The right to request that we delete your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention). - Correction: The right to request correction of inaccurate personal information. - Opt-Out of Data Sale: Although we do not sell personal information in the traditional sense, you may have the right to opt out of certain data sharing practices. You can exercise this right by contacting us. - Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

California Residents: California residents have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the rights described above. You may submit a "Do Not Sell or Share My Personal Information" request by contacting us at privacy@solidseed.com.

Virginia, Colorado, Connecticut, Utah, and Other State Residents: Residents of states that have enacted comprehensive privacy laws (such as the Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, and Utah Consumer Privacy Act) may have similar rights. Contact us to exercise them.

To submit a request, email privacy@solidseed.com and include your name, email address on file, and a description of your request. We will respond within 45 days, as required by applicable law.

We take the security of your personal information seriously and implement appropriate technical and organizational measures, including:

- Encryption of data in transit (TLS) and at rest - Password hashing using bcrypt with a cost factor of 12 - Account lockout after 5 consecutive failed login attempts (30-minute lock period) - Rate limiting on authentication endpoints (10 login attempts per minute per IP; 3 password resets per hour per email) - JWT-based session management with configurable expiration - Row-level security policies on your data in our database

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information, but we are committed to protecting it using industry-standard practices. If you become aware of any security issue, please report it to us promptly at privacy@solidseed.com.

SolidSeed is intended for use by real estate professionals aged 18 and older. We do not knowingly collect personal information from individuals under the age of 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@solidseed.com so we can promptly delete it.

SolidSeed may link to or integrate with third-party services (such as Google or Microsoft for OAuth authentication). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use in conjunction with SolidSeed.

SolidSeed is operated from the United States. If you access the service from outside the U.S., you understand that your information may be transferred to, and processed in, the United States. By using the service, you consent to such transfers. We process your information in accordance with applicable U.S. federal and state privacy laws.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, where required by law, notify you via email or a prominent notice on the platform. Your continued use of SolidSeed after a change constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, contact us at:

SolidSeed, Inc. Email: privacy@solidseed.com

We will do our best to respond within 30 days of receiving your request.