Investra Privacy Policy

At Investra, Inc. ("Investra," "we," "us," or "our"), your privacy and trust are central to everything we do. Investra is an AI-powered real estate investment platform that empowers investors and real estate professionals with data-driven insights, market intelligence, and investment strategy tools. This Privacy Policy ("Policy") explains how we collect, use, disclose, and protect your personal information—meaning any information that identifies you as an individual—when you use our website at www.investra-ai.com, access our platform, or otherwise engage with us (collectively, "Services").

This Policy applies to all visitors, investors, real estate professionals, and business partners who use or interact with our Services. It does not apply to information that real estate professionals or brokerages independently collect from their clients outside of the Investra platform.

We comply with applicable data privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, "CCPA/CPRA"), the General Data Protection Regulation ("GDPR") for EU/EEA residents, and other relevant privacy frameworks.

If you have any questions or concerns about this Policy or your data, please contact us at privacy@investra-ai.com.

What Information Do We Collect?

Personal Information You Provide

When you register for an account, request a demo, subscribe to updates, or otherwise interact with our Services, we may collect:

• Identifiers: Name, email, phone number, mailing address.
• Professional Information: Brokerage or company affiliation, title, role, investment preferences.
• Financial Preferences: Down payment ranges, investment goals, property type preferences (we do not process payments or collect banking or card details directly).
• Communication Data: Feedback, support requests, or inquiries you send to us, including any user inputs or queries for market insights.

Automatically Collected Information

When you use our Services, we may automatically collect:

• Device and Usage Data: IP address, browser type, operating system, device identifiers, referring URLs, and interaction data.
• Cookies and Tracking Data: Session logs, analytics, and engagement metrics.

Information From Third Parties

We may obtain professional contact information from trusted partners, real estate networks, or publicly available sources such as LinkedIn, to better serve potential customers. This information is used only for initial outreach, and you can opt out via your privacy rights requests.

We do not intentionally collect sensitive personal data (such as social security numbers, medical information, or precise geolocation).

How Do We Process Your Information?

We use your personal information to:

• Provide and operate the Investra platform, including account management and personalized dashboards.
• Tailor property and investment recommendations to your preferences.
• Communicate with you, including service updates, investor resources, and promotional offers.
• Improve our Services through analytics and user feedback.
• Facilitate connections between investors and real estate professionals.
• Protect against fraud, misuse, or unauthorized access.
• Comply with legal and regulatory obligations.

Automated Processing and AI Use

Our AI tools may analyze your preferences and usage data to generate automated recommendations, such as property matches or market insights. This may involve profiling, but decisions affecting you (e.g., investment suggestions) are not solely automated. You can object to such processing under applicable rights. We use aggregated and anonymized data to train and improve our AI models for better market intelligence.

What Legal Bases Do We Rely On?

We process your information only when permitted by law, including:

• Consent – when you opt in to marketing or product access.
• Contract – to deliver Services you request, such as personalized recommendations.
• Legitimate Interests – to improve our Services (e.g., analyzing platform usage to enhance features) and support investor-broker relationships.
• Legal Obligations – to comply with applicable laws.

When and With Whom Do We Share Your Information?

We do not sell your personal data. We may share your information with:

• Service Providers: Cloud hosting, analytics, email delivery, and customer support vendors, bound by confidentiality.
• Business Partners: Brokerages or real estate professionals you engage with through our platform, only with your consent or as needed to fulfill requested services (e.g., sharing contact details with a selected brokerage).
• Affiliates: Controlled entities that operate under Investra.
• Legal/Regulatory Authorities: When required by law or in response to lawful requests.
• Business Transfers: In connection with mergers, financing, or acquisitions; we will notify users if feasible. Aggregated or anonymized data may be shared for research or industry reports, without identifying individuals.

Third-Party AI Assistants (Model Context Protocol Integrations)

Investra supports connecting your account to third-party AI assistants — such as Anthropic Claude and OpenAI ChatGPT — through the Model Context Protocol (MCP). You initiate each connection yourself and approve the exact permissions it receives on a consent screen before any data is shared.

When an AI assistant is connected:

• Scope of access: the assistant receives an OAuth access token limited to the permissions you approved (e.g., reading your clients, creating analyses). It can call the same Investra APIs you use — nothing outside those scopes.
• Data handling by the assistant: any information the assistant reads or creates on your behalf is transmitted to its servers and handled under its own privacy policy, not ours. We do not control how it stores, logs, or retains that data once it leaves Investra.
• Protected data: your password, full payment card and bank details, other users' records, and anything outside the approved scopes remain inaccessible to the assistant.
• Revoking access: disconnect the assistant from its own settings (for example, Claude's or ChatGPT's connector management). Revoked tokens stop working on Investra immediately.

We recommend reviewing the privacy policy of any AI assistant you connect. Questions about a specific integration? Contact us at support@investra-ai.com.

Do We Use Cookies and Tracking Technologies?

Yes. We use cookies and analytics tools (e.g., Google Analytics) to improve functionality, measure traffic, and personalize experiences. Essential cookies enable core functionality (e.g., login sessions), while optional ones support analytics and marketing, which you can refuse. You may manage or disable cookies through your browser settings or our cookie consent banner. Some Services may not function properly if you disable essential cookies.

How Long Do We Keep Your Information?

We retain personal information only as long as needed for the purposes described in this Policy, unless longer retention is required by law. Examples include: Account data for as long as your account is active, plus up to 1 year post-deletion for legal or dispute resolution; demo request data for 6 months. When no longer needed, we securely delete or anonymize your information.

How Do We Keep Your Information Safe?

We use reasonable safeguards including encryption, role-based access, firewalls, and regular audits to protect your data. We also train staff on data handling best practices. However, no system is completely secure, and we cannot guarantee 100% protection against unauthorized access.

Data Breach Notification

In the event of a data breach, we will notify affected users and relevant authorities as required by law (e.g., within 72 hours under GDPR or as per CCPA timelines).

Do We Collect Information From Minors?

No. Investra is intended for users 18 and older. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us and we will promptly delete it.

Do-Not-Track and Global Privacy Control

We currently do not respond to browser "Do Not Track" signals, but this is under review. We do honor legally required opt-out signals such as Global Privacy Control (GPC).

Rights for California Residents

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sharing personal information. Investra does not sell or share your data for cross-context advertising. To exercise your rights, email us at privacy@investra-ai.com. We will respond within 45 days (extendable if needed) and may require identity verification. We do not charge for requests unless they are excessive.

Rights for EU/EEA Data Subjects (GDPR)

If you are located in the EU/EEA or UK, you have rights including access, rectification, erasure, restriction, portability, and objection. Our privacy team acts as Data Protection Officer and can be reached at privacy@investra-ai.com. We will respond to requests within one month (extendable to three months for complex cases). You also have the right to lodge a complaint with your local data protection authority.

International Data Transfers

Investra is based in the United States. By using our Services, you understand that your data may be transferred to and processed in the U.S. and other jurisdictions. For EU/EEA users, where required, we implement Standard Contractual Clauses or rely on the EU-US Data Privacy Framework (if applicable) and other safeguards with our providers.

Links to Third-Party Websites

Our Services may link to external websites. We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies.

Policy Updates

We may update this Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date. Material changes may also be communicated via email or platform notice. Continued use of our Services after updates implies acceptance.

Contact Information

If you have any questions about this Policy, contact us at:

Investra, Inc.
Email: privacy@investra-ai.com

Requesting Access, Updates, or Deletion

To review, update, or delete the data we have collected about you, please contact us at privacy@investra-ai.com. We will respond within legally required timeframes.