1. Information We Collect

1.1 Information You Provide Directly

•       Account Registration: name, email address, company name, and password.

•       Payment Information: billing address and payment card details, processed by our third-party payment processor (Stripe). Lotify AI does not store raw card numbers.

•       Profile & Preferences: job title, intended use case, and communication preferences.

•       Communications: information you provide when contacting support, submitting feedback, or participating in design partner programs.

 

1.2 Information Collected Automatically

•       Usage Data: pages visited, features accessed, Report types generated, search queries, click patterns, and session duration.

•       Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and referring URLs.

•       Property Search Data: addresses and parcel identifiers you search or query within the Platform.

•       Log Data: server logs that record interactions with the Platform, including timestamps and error events.

 

1.3 Cookies & Tracking Technologies

We use cookies, pixel tags, and similar technologies to operate and improve the Services. These fall into three categories:

•       Essential Cookies: required for the Platform to function (authentication, session management). Cannot be disabled.

•       Analytics Cookies: help us understand how users interact with the Platform (e.g., Google Analytics, Mixpanel or similar tools). You may opt out via your browser settings or our cookie preference center.

•       Preference Cookies: remember your settings and display preferences across sessions.

We do not use advertising or behavioral targeting cookies. We do not serve third-party ads through the Platform.

 

1.4 Public Records & Property Owner Data

The Services aggregate publicly available property records from government entities and, in some cases, licensed commercial data providers. This data includes information about individuals who are not Lotify AI users — such as property owners, taxpayers, permit applicants, and other parties whose information appears in municipal, county, or state databases. Lotify AI does not collect this information directly from those individuals; it is sourced from public government records.

•       Accuracy & Corrections: Because this data originates from government agencies, individuals seeking to correct inaccuracies in the underlying public record must contact the relevant government agency directly. Lotify AI cannot modify official government records.

•       Redaction Requests — General: To request removal or redaction of your information from our Platform (where legally required), email privacy@lotify.ai with subject line “Data Redaction Request” and include the property address, your relationship to the property, and the basis for your request. We aim to process redaction requests within 10 business days.

•       Redaction Requests — Law Enforcement, Judicial Officers & Protected Individuals: If you are a law enforcement officer, judicial officer, prosecutor, elected official, or other individual protected under a state address confidentiality or non-publication statute (including “Daniel’s Law” or equivalent), email redact@lotify.ai with subject line “Protected Person Redaction”. Please include your name, the address(es) to be redacted, and documentation of your protected status. We will expedite review and aim to complete redaction within 3 business days of verification.

Lotify AI complies with all legally mandated redaction obligations. However, we are not the original publisher of public record data. Removal from our Platform does not remove your information from the underlying government database or other third-party aggregators.

 

1.5 Information from Other Third Parties

•       Identity Verification: where required for compliance, we may receive verification data from identity service providers.

 

2. How We Use Your Information

2.1 To Provide and Operate the Services

•       Generate and deliver Property Reports and related data outputs.

•       Process payments, manage subscriptions, and administer accounts.

•       Authenticate users and maintain platform security.

•       Provide customer support and respond to inquiries.

 

2.2 To Improve the Services

We may use de-identified, aggregated data derived from user activity to improve our data models, Report accuracy, and product features. This data cannot reasonably be used to identify you. We do not use identifiable personal information — including your name, email, or your specific, un-aggregated property search history — to train or fine-tune our AI models. Specifically, we do not use your individual query patterns, target property clusters, or search sequences in any manner that would reveal your proprietary investment strategy or target markets to other users or to the public. Your search behavior is yours.

If you participate in a design partner or beta program, we may collect structured feedback about the Services. Participation is voluntary and governed by the terms of your design partner agreement.

 

2.3 To Comply with Legal Obligations

•       Respond to lawful government requests, subpoenas, or court orders.

•       Process data redaction requests under applicable property data laws.

•       Meet financial, tax, and anti-fraud compliance requirements.

 

2.4 To Communicate with You

•       Send transactional communications (account confirmations, Report delivery, payment receipts).

•       Send service updates, security alerts, and policy change notifications.

•       Send product news or promotional communications (you may opt out at any time via the unsubscribe link in any email or by contacting us at privacy@lotify.ai).

 

2.5 Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA) or United Kingdom, we process personal data under the following legal bases:

•       Contract Performance: processing necessary to deliver the Services you requested.

•       Legitimate Interests: improving the Services, maintaining platform security, fraud prevention, and direct marketing to existing customers (subject to your right to object).

•       Legal Obligation: processing required to comply with applicable law.

•       Consent: where we rely on consent (e.g., optional analytics, model improvement using identifiable data), you may withdraw it at any time without affecting the lawfulness of prior processing.

 

3. Data Sharing & Disclosure

3.1 We Do Not Sell Your Personal Information

Lotify AI does not sell your personal contact information or property search history to third-party marketers, data brokers, or advertisers. This applies to the definition of “sale” under the California Consumer Privacy Act (CCPA/CPRA) and similar state laws.

 

3.2 Service Providers

We share data with trusted vendors who process it on our behalf, under written data processing agreements that restrict their use to providing services to us:

•       Payment Processing: Stripe, Inc. (billing and fraud prevention).

•       Cloud Infrastructure: Amazon Web Services (AWS) or equivalent cloud provider (hosting, storage, compute).

•       Analytics: Google Analytics, or similar tools (de-identified usage analytics).

•       Customer Support: help desk and ticketing platforms (support ticket content only).

•       Communications: email delivery providers (transactional and marketing emails).

 

3.3 Business Transfers

If Lotify AI is involved in a merger, acquisition, asset sale, or financing, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

 

3.4 Legal Disclosures

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law or legal process; (b) protect the rights, property, or safety of Lotify AI, our users, or the public; or (c) detect, prevent, or address fraud, security, or technical issues.

 

3.5 Aggregated & De-Identified Data

We may share or publish aggregated, de-identified data (e.g., market-level permit trends, coverage statistics) that cannot reasonably identify you. This is not subject to this Privacy Policy.

 

4. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy or as required by law. General retention guidelines:

•       Account Data: retained for the duration of your account plus 3 years following account closure, to allow for dispute resolution and legal compliance.

•       Property Report Data: retained for 5 years following Report generation, to support audit trails and customer re-access.

•       Payment Records: retained for 7 years as required for financial and tax compliance.

•       Usage & Log Data: retained for 13 months, then deleted or anonymized.

•       Support Communications: retained for 2 years following resolution.

If you request deletion of your account, we will delete or anonymize your personal information within 45 days, except where retention is required by law or for legitimate business purposes such as fraud prevention or pending legal claims.

 

5. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information. We respond to verified requests within 45 days (CCPA/CPRA) or 30 days (GDPR), with a possible 45- or 60-day extension where permitted.

​

​

5.1 How to Exercise Your Rights

•       Email: privacy@lotify.ai with subject line “Privacy Rights Request”

•       We will verify your identity before processing the request. Verification typically requires confirmation of your registered email address.

•       We will not discriminate against you for exercising any privacy right — you will not receive a different quality of service or be charged different prices.

 

5.2 Opt-Out of Sale / Sharing (CCPA/CPRA)

While we do not sell personal information in the traditional sense, to the extent that sharing data with analytics providers or service partners constitutes “sharing” under CCPA/CPRA, you may opt out by emailing privacy@lotify.ai or by adjusting your cookie preferences in your account settings. We will process opt-out requests within 15 business days.

 

5.3 Texas Residents — Texas Data Privacy and Security Act (TDPSA)

If you are a Texas resident, you have rights under the Texas Data Privacy and Security Act (TDPSA), which took effect July 1, 2024. These include the right to access, correct, delete, and obtain a portable copy of your personal data, and the right to opt out of targeted advertising, the sale of personal data, and certain profiling decisions. To exercise these rights, email privacy@lotify.ai with subject line “Texas Privacy Rights Request.” We will respond within 45 days, with a possible 45-day extension. If you believe we have failed to resolve your complaint, you may submit a complaint to the Texas Attorney General.

 

5.4 EEA/UK Users — Right to Lodge a Complaint

If you are located in the EEA or UK and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local supervisory authority (e.g., the UK Information Commissioner’s Office or the relevant EU data protection authority).

 

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These include:

•       Encryption: data encrypted in transit (TLS 1.2+) and at rest (AES-256 or equivalent).

•       Access Controls: role-based access and multi-factor authentication for internal systems.

•       Vendor Security: we contractually require service providers to implement appropriate security measures.

•       Monitoring: automated monitoring for anomalous access patterns and potential security incidents.

No system is completely secure. In the event of a data breach affecting your personal information, we will notify you and applicable regulators as required by law, generally within 72 hours for GDPR purposes or within applicable state law timeframes.

 

7. Children’s Privacy

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@lotify.ai and we will delete it promptly. Users between 13 and 18 may use the Services only with verifiable parental consent.

 

8. Third-Party Links & Services

The Platform may contain links to third-party websites or integrate with external services not operated by Lotify AI. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing any personal information. We are not responsible for the privacy practices of any third-party site or service.

 

9. Interstate & International Data Transfers

Our Services operate from the United States. If you are accessing the Services from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

For transfers of personal data from the EEA or UK to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms as applicable. Contact us at privacy@lotify.ai for a copy of applicable transfer safeguards.

 

10. Do Not Track

Some browsers include a “Do Not Track” (DNT) feature that signals your preference not to be tracked across websites. Because there is currently no industry-standard interpretation of DNT signals, our Platform does not respond to DNT signals at this time. You may manage tracking preferences through our cookie settings instead.

 

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated Policy on our website with a revised Effective Date. For material changes, we will provide notice via email or a prominent in-product notification at least 30 days before the change takes effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.

 

12. Contact Us

For privacy questions, requests, or concerns, please contact us at:

 

Lotify AI Inc. — Privacy Team

Email: privacy@lotify.ai

Mailing Address: 1500 N GRANT ST / SUITE 10616 DENVER, CO 80203

Response Time: We aim to respond to all privacy inquiries within 10 business days.