Privacy Policy

• You, your employer, account administrator, teammates, agents, or representatives.
• Public records and government sources, including recorder, assessor, tax, court, corporate, licensing, planning, permit, and other governmental records.
• Licensed third-party data sources, service providers, and other lawful business sources.
• Customers and Authorized Users who upload, enter, synchronize, or otherwise provide information through the Services.
• Cookies, pixels, SDKs, server logs, analytics tools, and similar technologies, subject to applicable consent requirements.
• Affiliates, vendors, service providers, referral sources, public websites, widely distributed media, and other lawful sources.

• Provide, operate, host, authenticate, personalize, maintain, and support the Services.
• Create and administer accounts, subscriptions, permissions, billing, payments, and customer support.
• Process user requests and provide requested platform features and functionality.
• Process, organize, and present property-related information through the Services.
• Communicate about accounts, transactions, service changes, security, privacy, legal notices, trials, renewals, and support.
• Detect, investigate, prevent, and respond to fraud, abuse, scraping, unauthorized access, security incidents, prohibited uses, and legal violations.
• Measure performance, troubleshoot issues, improve usability and service quality, and maintain platform reliability.
• Create aggregated, anonymized, or de-identified information and use it for lawful business purposes, including improving and protecting the Services, subject to reasonable measures designed to prevent reidentification.
• Market Sumatrix products and services, manage events and campaigns, and measure marketing effectiveness, subject to applicable consent and opt-out requirements.
• Comply with law, legal process, contracts, audits, data-rights requests, suppression obligations, and regulatory requirements; establish or defend legal claims; and protect the rights, property, safety, and integrity of Sumatrix, Customers, individuals, and the public.
• Carry out another purpose disclosed at collection or with your consent.

Sumatrix provides business-oriented real estate information and related services. Information made available through the Services may originate from public records, licensed third-party sources, Customer Data, or information lawfully generated in connection with the Services.

Publicly available information may be excluded from certain statutory definitions of personal information, but its public-record status does not eliminate all privacy, suppression, marketing, fair-housing, anti-harassment, or other legal restrictions. Customers are contractually prohibited from using Sumatrix data for unlawful outreach, consumer-reporting purposes, harassment, discrimination, or other prohibited uses.

Sumatrix does not represent that property-related data is accurate, complete, current, or consented for contact. Individuals may have rights to request access, correction, deletion, opt-out, or suppression depending on applicable law and the source and nature of the information.

The Services may generate or present analytical, calculated, estimated, summarized, or other derived outputs based on available information. Sumatrix does not disclose its confidential or proprietary methods, processes, systems, logic, or technology through this Policy.

These features may produce errors, stale information, false positives, false negatives, bias, or incomplete results. They are designed for business research and decision support and are not used by Sumatrix to make legal or similarly significant decisions about individuals concerning credit, employment, insurance, housing, tenancy, government benefits, or other regulated eligibility. Customers are prohibited from using the Services for such purposes.

Sumatrix may use de-identified or aggregated usage and performance information to operate, secure, evaluate, and improve the Services. Sumatrix will not disclose identifiable Customer Data for an unrelated third party's independent commercial use except as disclosed in this Policy or otherwise permitted by law.

Sumatrix and its service providers may use cookies, pixels, local storage, SDKs, web beacons, session technologies, and similar tools to operate the Services, remember preferences, authenticate users, secure accounts, understand usage, improve performance, measure communications, and support marketing.

Cookies and technologies may be categorized as strictly necessary, functional, analytics, or advertising. Where required, non-essential technologies will be activated only after consent. You may manage choices through sumatrix.co/cookie-settings and browser or device settings. Blocking certain technologies may impair functionality.

Sumatrix will identify material analytics, session-replay, advertising, and consent-management providers in an updated cookie notice before those tools are deployed. Sumatrix will honor legally recognized opt-out preference signals, including Global Privacy Control, where required by applicable law.

This section applies to residents of U.S. states with comprehensive consumer privacy laws, including California and other states whose laws are currently effective or become effective during the period this Policy applies. Rights and exceptions vary by jurisdiction.

In the preceding twelve (12) months, Sumatrix may have collected the categories described in Section 2; used them for the purposes described in Section 4; and disclosed them to the categories of recipients described in Section 5. Depending on applicable statutory definitions, providing licensed property and related data to Customers may constitute a "sale" or disclosure for valuable consideration, even when the information is derived from public records. Online advertising disclosures may constitute "sharing" or targeted advertising where such technologies are deployed.

Sumatrix does not knowingly sell or share personal information of individuals under sixteen (16) and does not knowingly use sensitive personal information to infer characteristics beyond lawful business purposes. Sumatrix does not offer a financial incentive program in exchange for personal information at this time.

California residents may have rights under the California Consumer Privacy Act, as amended (CCPA/CPRA), including rights to know, access, correct, delete, and opt out of sale or sharing, subject to statutory exceptions. Where Sumatrix meets the California definition of a data broker, Sumatrix will maintain the required California data-broker registration and participate in the California Privacy Protection Agency's Delete Request and Opt-out Platform (DROP), including retrieving and processing applicable deletion requests within required timeframes. California privacy requests may also be submitted directly through sumatrix.co/privacy-choices.

Sumatrix operates a U.S.-focused real estate intelligence platform and obtains and processes property-related information from lawful public, licensed, Customer-provided, and other permitted sources. Where Sumatrix's activities satisfy an applicable statutory definition of a data broker, Sumatrix will comply with applicable registration, notice, consumer-rights, suppression, security, and reporting obligations. These obligations are determined under applicable law based on Sumatrix's activities and are not dependent on identifying any particular upstream data source in this Policy.

Any individual may request that Sumatrix review, suppress, delete, correct, or restrict personal information associated with that individual by using sumatrix.co/privacy-choices or legal@sumatrix.co. Individuals who qualify for heightened protection - such as judges, prosecutors, law-enforcement personnel, domestic-violence or stalking survivors, address-confidentiality participants, and others protected by applicable law - should identify the request as a "Protected Person Suppression Request."

Before publication, Sumatrix will confirm that its documented retention practices are consistent with applicable law, contractual requirements, and the factual operation of the Services.

Sumatrix uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or destruction. Sumatrix does not publicly disclose security configurations or other security-sensitive implementation details.

No method of transmission, storage, or security is completely effective, and Sumatrix cannot guarantee absolute security. You are responsible for securing credentials, devices, networks, exports, and information under your control and for promptly notifying Sumatrix of suspected compromise.

If Sumatrix discovers a security incident requiring notice, Sumatrix will notify affected individuals, Customers, regulators, or others as required by applicable law and contract.

Sumatrix retains personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide Services, maintain accounts, satisfy Customer instructions, preserve security and audit logs, prevent fraud, resolve disputes, enforce agreements, comply with legal and regulatory obligations, and establish or defend claims.

Retention depends on the type of information, source requirements, Customer settings, contractual commitments, sensitivity, legal obligations, and operational need. Sumatrix may retain de-identified information, suppression records, transaction records, security logs, and records necessary to demonstrate compliance after other information is deleted.

Sumatrix confirms that its documented retention practices are consistent with applicable law, contractual requirements, and the factual operation of the Services.

The Services are designed for adults and business use and are not directed to children under thirteen (13) or intended for account holders under eighteen (18). Sumatrix does not knowingly collect personal information directly from children for account or marketing purposes. If you believe a child has provided personal information directly to Sumatrix, contact us so we can investigate and take appropriate action.

Property or public records may incidentally identify relationships involving minors. Customers are prohibited from using the Services to target, profile, or contact minors for marketing or other prohibited purposes.

The Services are currently designed for U.S. real estate, U.S. properties, and primarily U.S.-based business use. Information may be processed and stored in the United States and other locations where Sumatrix or its service providers operate. Those jurisdictions may have different privacy laws than your location.

Individuals accessing the Services from outside the United States are responsible for determining whether access and use are lawful. Where legally required, Sumatrix will use an appropriate transfer mechanism and provide applicable rights regarding account information. The standard Services are not represented as a data product concerning residents or properties outside the United States.

The Services may link to or rely on third-party websites, products, data sources, or services. Their privacy practices are governed by their own notices, and Sumatrix is not responsible for third-party services outside its control. Review applicable third-party terms and privacy notices before providing information to a third party.

Sumatrix may revise, update, or modify this Privacy Policy in its sole discretion. We will post the revised Policy and update the "Last Updated" or effective date. If changes are material, we will provide notice as required by applicable law, which may include email, an in-product message, or a prominent notice on the website.

Unless a different period is required by law, material changes will become effective no earlier than thirty (30) days after notice to existing Customers. Changes required by law, regulation, security, or contractual requirements may take effect sooner. Continued use of the Services after the effective date constitutes acknowledgment of the updated Policy; where consent is legally required, Sumatrix will request it separately.

To ask a privacy question or exercise a privacy right, contact: