Privacy Policy

This policy explains what RTM Deal Master (operated by REI Transaction Mastery) collects, how it is used, and the choices you have. Short version: we collect what’s needed to run the product, we don’t sell your data, and you can ask us to delete it.

1. What We Collect

• Account information — your email address and login credentials (passwords are hashed by our authentication provider; we never see them).
• Content you enter — deal analyses, property addresses, repair estimates, tracker notes, room sketches, and photos you upload for AI repair analysis.
• Branding you configure — company name, logo, and contact details for document generation.
• Usage data — page views and basic device/browser information via privacy-focused analytics, used to improve the product.
• Billing — payments are processed by Stripe/GoHighLevel. We never receive or store your full card number.

2. How We Use It

• To operate the Service: run your analyses, store your deals, generate your documents.
• To provide AI features: content you submit to the AI assistant or photo analyzer is sent to our AI provider (Anthropic) for processing and returned to you. Per that provider’s API terms, API content is not used to train their models.
• To look up market data: property addresses and ZIP codes you search are sent to data providers (RentCast, U.S. Census Bureau, HUD, FRED) to retrieve estimates.
• To support you: responding to help requests, service emails about your account.

3. Who Else Touches Your Data (Processors)

We use reputable infrastructure providers to run the Service: Supabase (database, authentication, and file storage), Vercel (hosting and analytics), Stripe and GoHighLevel (billing and customer communication), Anthropic (AI processing), and the market-data providers named above. Each receives only what is needed for its function.

4. What We Don’t Do

• We do not sell your personal information.
• We do not share your deal data with other users. Reports become visible to others only when you explicitly create a share link — and you can revoke any share link at any time.
• We do not send third-party marketing on your behalf.

5. Cookies

We use essential cookies for login sessions and lightweight analytics. We do not run third-party advertising trackers on the Service.

6. Retention & Deletion

Your data is retained while your account is active. To delete your account and its data, email bfelton89@gmail.com from your account email — we will delete your stored content within 30 days, except records we must keep for legal or billing purposes.

7. Security

Data is encrypted in transit, stored with row-level security so accounts can only access their own records, and uploaded photos live in private storage buckets. No system is perfectly secure, but access to your content is restricted by design.

8. Age Requirement

The Service is for adults (18+) and is not directed at children.

9. Changes

If this policy changes materially, we’ll update this page and its “last updated” date.

10. Contact

Privacy questions or requests: bfelton89@gmail.com