Legal

Privacy Policy

Last updated: February 21, 2026

1. Introduction

xREI, Inc. ("xREI," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website (xrei.co), application (application.xrei.co), and related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

  • Account information: name, email address, and password when you register
  • Profile data: investment preferences, strategy selections, financing terms, and investor persona settings
  • Payment information: billing details processed securely through Stripe (we do not store credit card numbers)
  • Communications: messages you send through contact forms, support requests, or email
  • User content: property notes, deal pipeline data, portfolio information, and custom analyses you create

2.2 Information Collected Automatically

  • Device information: browser type, operating system, device identifiers
  • Usage data: pages visited, features used, interaction patterns, timestamps
  • Log data: IP address, access times, referring URLs, error logs
  • Cookies and similar technologies: session cookies, authentication tokens, and analytics cookies (see Section 7)

2.3 Third-Party Data

We may receive information from third-party services you connect, such as Google (if you use Google Sign-In). We only access the minimum information necessary for authentication (name, email, profile picture).

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Calculate personalized property scores and investment analytics
  • Process payments and manage subscriptions
  • Send service-related notifications and updates
  • Respond to your inquiries and support requests
  • Analyze usage patterns to improve features and user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your investment data for any purpose other than providing the Service to you.

4. Data Sharing and Disclosure

We may share your information only in the following circumstances:

  • Service providers: trusted third parties that help us operate the Service (e.g., Stripe for payments, cloud hosting providers, email delivery services). These providers are contractually required to protect your data.
  • Legal requirements: when required by law, subpoena, court order, or to protect our rights, safety, or property
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with prior notice to you
  • With your consent: when you explicitly authorize data sharing

5. Data Security

We implement industry-standard security measures to protect your data:

  • All data transmitted between your browser and our servers is encrypted using TLS/SSL
  • Passwords are hashed using bcrypt and never stored in plaintext
  • Authentication uses secure, HttpOnly cookies
  • Access to production systems is restricted and audited
  • Regular security reviews and vulnerability assessments

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

Anonymized, aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement purposes.

7. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies: required for authentication and core functionality (cannot be disabled)
  • Analytics cookies: help us understand how users interact with the Service (can be opted out)

We do not use advertising cookies or third-party tracking pixels. We do not build advertising profiles based on your activity.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Service.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate or incomplete data
  • Deletion: request deletion of your personal data ("right to be forgotten")
  • Portability: request your data in a machine-readable format
  • Objection: object to processing of your data for certain purposes
  • Restriction: request limitation of processing in certain circumstances

To exercise these rights, contact us at hello@xrei.co. We will respond within 30 days.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • The right to know what personal information is collected and how it is used
  • The right to request deletion of personal information
  • The right to opt out of the sale of personal information (we do not sell personal information)
  • The right to non-discrimination for exercising privacy rights

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

For users in the European Economic Area (EEA), we process data under lawful bases including consent, contract performance, and legitimate interests.

11. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

For privacy-related questions or to exercise your data rights:

xREI, Inc.
Privacy Team
Email: hello@xrei.co
Web: www.xrei.co/contact