Privacy Policy

1. Scope and Relationship to Other Terms

This Privacy Policy explains how ZionClad collects, uses, discloses, retains, and protects personal information when you visit zionclad.com, create or use an account, communicate with us, or use ZionClad’s commercial real estate software intelligence services. The Services support research, acquisition, outreach, and disposition activities.

This Policy is incorporated into our Terms of Service. Feature-specific notices, a Cookie Policy, a Data Processing Addendum, an order form, or a notice presented when information is collected may supplement this Policy. If a customer organization controls information in its ZionClad workspace, that organization’s privacy notice may also apply.

2. Our Role

ZionClad generally acts as the business or controller for website, account, billing, support, security, and product-usage information that it determines how and why to process.

For personal information that a customer uploads to or manages within a workspace—such as contact lists, property-owner records, CRM notes, documents, or mailing-recipient information—ZionClad generally processes that information for the customer as a service provider or processor. The customer determines the purpose of that processing and is responsible for its notices, permissions, lawful basis, and instructions. Requests concerning customer-controlled information may be referred to the relevant customer.

3. Personal Information We Collect

Account and contact information. We may collect names, business names, job titles, email addresses, telephone numbers, mailing addresses, account identifiers, login credentials, preferences, and authorized-user or workspace information.

Subscription and transaction information. We may collect plan, order, subscription, renewal, cancellation, invoice, tax, and transaction status information. Stripe or another payment processor collects payment-card and financial-account details through hosted checkout; ZionClad generally receives limited transaction and billing records rather than complete card numbers.

Communications. We collect information submitted through contact forms, waitlists, demonstrations, surveys, support requests, feedback, promotions, and other communications with us.

Workspace and CRM information. Customers may submit contacts, pipeline records, tasks, notes, conversations, due-diligence materials, transaction records, reports, analyses, communications, and other content.

Property and public-source information. We may receive property, parcel, assessment, ownership, mailing-address, transaction, comparable-property, mapping, imagery, and related information from customers, public records, government sources, data licensors, and other third parties.

Documents and reports. Customers may upload contracts, property records, images, letters of intent, investor materials, financial assumptions, due-diligence files, reports, and related documents. Generated reports and analyses may contain information supplied by the customer or obtained from other sources.

Outreach and mailing information. If Mail Center features are used, we may process recipient names, postal addresses, mailing lists, campaign content and instructions, proofs, suppression information, delivery or return status, responses, and campaign notes.

AI information. If AI features are used, we may process prompts, queries, selected records, uploaded materials, instructions, feedback, outputs, and interaction metadata needed to provide and improve the requested feature. Do not submit sensitive, confidential, regulated, or unnecessary personal information to an AI feature unless you are authorized to do so and the feature expressly supports it.

Technical and usage information. We may automatically collect IP addresses, device and browser information, operating system, referring pages, timestamps, pages and features used, clicks, session information, approximate location derived from IP address, error records, diagnostics, and security logs.

4. Sources of Personal Information

We collect personal information directly from users and customers; automatically from browsers, devices, cookies, and service logs; from organizational administrators and authorized workspace users; from public records and government sources; from property-data, mapping, imagery, ownership, and other data providers; and from payment, authentication, hosting, security, communications, support, AI, analytics, integration, printing, mailing, and postal-service providers.

Some public-record information may be excluded from certain statutory definitions of personal information, but that does not mean all property, ownership, contact, or commercially sourced information is exempt from privacy law.

5. How We Use Personal Information

We may use personal information to provide, operate, maintain, personalize, secure, and improve the Services; create and administer accounts and workspaces; authenticate users; prevent fraud, abuse, and unauthorized access; enforce usage limits; process subscriptions, payments, renewals, cancellations, and refunds; provide support; and communicate about service, security, administrative, and legal matters.

We may also use information to perform customer instructions; organize CRM and pipeline records; generate reports, calculations, analyses, projections, opportunity scores, and AI-assisted outputs; process direct-mail campaigns; troubleshoot, test, analyze performance, and develop features; comply with law and legal process; protect rights, safety, and property; establish or defend claims; and complete a merger, financing, reorganization, acquisition, or sale.

We may create aggregated or de-identified information and use it for lawful business purposes. We will maintain de-identified information in de-identified form and will not attempt to reidentify it except as permitted by law to test our de-identification processes.

6. Artificial Intelligence

AI features may send prompts, selected workspace content, uploaded material, and contextual information to ZionClad’s AI systems or contracted AI service providers to generate the requested output, maintain safety and security, troubleshoot, and evaluate feature performance.

AI outputs may be inaccurate, incomplete, or inappropriate and must be independently reviewed. ZionClad does not use AI to make legally binding eligibility decisions about credit, housing, employment, insurance, or similar matters. Customers may not use ZionClad or its data for decisions governed by the Fair Credit Reporting Act unless ZionClad expressly authorizes a separately designed, legally compliant service.

Retention and model-improvement practices may depend on the selected AI feature and provider. ZionClad will provide additional notice when a feature materially changes how customer content is used. Customer content will not be represented as excluded from model training unless the applicable technical settings and provider terms support that statement.

7. CRM, Organizational Accounts, and Customer Content

A customer organization controls its managed workspace. Its administrators may access, export, correct, restrict, or delete workspace information; manage authorized users; and receive information about account activity. Other authorized workspace members may access information according to their permissions.

Customers are responsible for the personal information they collect, upload, disclose, analyze, export, or use through ZionClad. They must provide required notices, obtain required permissions, honor applicable rights, and avoid uploading information they are not authorized to process.

8. Property, Ownership, and Public-Record Data

Property and ownership information may come from public records, government offices, customers, data licensors, and other third parties. Source records may be delayed, incomplete, inaccurate, or inconsistent. ZionClad may not control or be able to change an original public or licensed source record.

A person may ask ZionClad to review or correct information displayed by ZionClad. We may request verification, annotate or correct information we control, restrict a display where appropriate, or direct the requester to the original source. ZionClad is not a consumer reporting agency, and the Services must not be used to determine eligibility for credit, employment, housing, insurance, or another purpose governed by the Fair Credit Reporting Act.

9. Direct Mail and Outreach

When a customer requests a postcard, letter, certified-mail item, label, or related mailing service, ZionClad may transmit recipient and campaign information to printers, mailing houses, address-verification providers, postal services, and delivery vendors as necessary to fulfill the request.

Customers are responsible for the legality, accuracy, content, targeting, permissions, and suppression practices associated with their mailing lists and campaigns. Direct mail is distinct from email, telephone, and text-message marketing, which may be subject to different consent and opt-out requirements. ZionClad does not guarantee delivery, recipient identity, response, or legal compliance of customer communications.

10. Cookies and Similar Technologies

ZionClad and its service providers may use cookies, local storage, pixels, and similar technologies that are necessary for authentication, security, preferences, functionality, analytics, and performance. The technologies actually used may change as the Services develop.

Where required, ZionClad will provide a cookie banner or preference control before using nonessential technologies. You may also adjust browser controls. Blocking essential cookies may prevent account or security features from working. Where legally required and technically applicable, ZionClad will recognize Global Privacy Control or another legally recognized opt-out preference signal.

11. How We Disclose Personal Information

We may disclose personal information to hosting and infrastructure providers, including Vercel; database and authentication providers, including Supabase when used; payment processors, including Stripe; and providers supporting security, communications, customer service, analytics, AI, mapping, property data, integrations, printing, mailing, and postal fulfillment.

We may also disclose information to organizational administrators and authorized users; third-party applications a customer directs us to connect; professional advisers, auditors, insurers, and financing sources; law enforcement, regulators, courts, or other parties when legally required or necessary to protect rights and safety; and actual or potential parties to a merger, financing, reorganization, acquisition, or sale.

We may disclose information at a customer’s direction or with consent. Third parties process information under their own terms when they act independently, and ZionClad does not control their privacy practices.

12. Sale, Sharing, Targeted Advertising, and Profiling

Some state laws define “sale,” “sharing,” and “targeted advertising” broadly and may include certain transfers that do not involve payment. ZionClad may use service providers and integrations as described in this Policy. If an applicable practice constitutes sale, sharing, or targeted advertising under law, ZionClad will provide the required notice and method to opt out.

ZionClad does not knowingly sell personal information of individuals under 18. If ZionClad introduces advertising technologies, data exchanges, or financial incentives, this Policy and any required notices and controls will be updated before or when those practices begin.

13. Sensitive Personal Information

The Services may process account credentials, payment-related information handled by payment processors, precise property locations, communication contents, documents, or other information that may be treated as sensitive under some laws. ZionClad uses sensitive personal information to provide requested services, secure accounts, comply with law, and perform other permitted purposes—not to infer characteristics about individuals unless expressly disclosed and permitted.

Do not upload Social Security numbers, government identification numbers, complete payment-card data, medical records, biometric identifiers, or similarly sensitive information unless a ZionClad feature expressly requires and supports it.

14. Data Retention

ZionClad retains personal information for as long as reasonably necessary to provide the Services, maintain accounts and business records, fulfill customer instructions, secure the platform, comply with law, resolve disputes, enforce agreements, and support legitimate business operations.

Retention criteria include the account or subscription term, the nature and sensitivity of the information, customer instructions, feature requirements, vendor capabilities, security needs, limitation periods, tax and accounting obligations, legal holds, and backup cycles. Deletion from active systems may not immediately remove information from backups, archives, fraud-prevention records, or records retained by law.

15. Security

ZionClad uses administrative, technical, and organizational safeguards designed to protect personal information, taking account of the nature of the information and the Services. Safeguards may include access controls, authentication, monitoring, encryption supported by service providers, backups, incident response, and vendor-management practices.

No system is completely secure. Customers must protect credentials, devices, exports, integrations, API keys, and authorized-user access and promptly notify support@zionclad.com of suspected unauthorized activity. If a security incident requires notice under applicable law, ZionClad will provide notice in accordance with those requirements.

16. Privacy Rights and Choices

Depending on where you live and applicable law, you may have rights to confirm processing; know or access personal information; obtain a portable copy; correct inaccuracies; delete information; opt out of qualifying sale, sharing, targeted advertising, or profiling; limit certain uses of sensitive information; withdraw consent; and appeal a denied request. You also may have the right not to receive unlawful discrimination or retaliation for exercising a privacy right.

These rights are not absolute. ZionClad may deny or limit a request when it cannot verify the requester, an exception applies, the information is customer-controlled or public-source data, disclosure would adversely affect another person, or retention is required or permitted by law.

17. How to Submit a Privacy Request

Submit a request by emailing support@zionclad.com with the subject “Privacy Request.” Describe the right you wish to exercise and the email address or account involved. If an in-account privacy tool is available, you may also use that tool.

We may request information reasonably necessary to verify identity, authority, residency, and the information associated with the request. An authorized agent must provide proof of authority, and we may verify the request directly with the individual. We will respond within the period required by applicable law and provide appeal instructions where required.

18. Marketing Communications

You may opt out of promotional email by using the unsubscribe link or contacting us. You may still receive transactional, security, billing, administrative, or legal messages. Customers are responsible for opt-outs and suppression requests relating to communications they send or direct through the Services.

19. Children’s Privacy

The Services are intended for adults and are not directed to anyone under 18. ZionClad does not knowingly collect personal information from children. If you believe a child submitted personal information, contact support@zionclad.com so we can review and take appropriate action.

20. International Users

ZionClad is based in the United States and is designed primarily for the U.S. market. Information may be processed in the United States and other locations where ZionClad or its providers operate. Those locations may have different data-protection laws.

If ZionClad intentionally offers Services in a jurisdiction requiring additional legal bases, transfer safeguards, representatives, or notices, ZionClad will provide the required supplemental terms. Where applicable, processing may rely on consent, performance of a contract, legitimate interests, or compliance with legal obligations.

21. Third-Party Services and Links

The Services may contain links, maps, embedded content, integrations, authentication options, and other services supplied by third parties. Their privacy practices are governed by their own notices. Review those notices before directing ZionClad to transmit information or using an external service.

22. State-Specific Disclosures

Residents of states with comprehensive privacy laws—including California, Colorado, Connecticut, Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states as their laws become applicable—may exercise the rights provided by applicable law using the process in Section 17.

For state-law purposes, the categories collected may include identifiers and contact information; customer records and transaction information; commercial information; internet or electronic activity; approximate geolocation; professional or employment-related information; inferences and AI interaction data; communication contents; account credentials; property and public-record information; and customer-provided documents. Sources, purposes, and recipient categories are described in Sections 3 through 13. Retention is described in Section 14.

California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive nondiscriminatory treatment. Publicly available government records may be excluded from some CCPA definitions, but ZionClad evaluates requests based on the particular information and applicable law. Nevada residents may request to opt out of covered sales as defined by Nevada law.

23. Changes to This Policy

ZionClad may update this Policy as the Services, vendors, data practices, or laws change. The updated Policy will be posted at zionclad.com/privacy-policy with a revised effective date. If a change is material, ZionClad will provide additional notice as required by law, such as email, an in-product notice, or renewed consent where legally necessary.

24. Contact Us

Questions, complaints, and privacy requests may be sent to support@zionclad.com. Use the subject “Privacy Request” for requests involving personal information. ZionClad will provide a physical notice address upon a verified written request.

Website: https://zionclad.com | Privacy Policy: https://zionclad.com/privacy-policy | Terms of Service: https://zionclad.com/terms-of-service