Privacy Policy

Version 3.0
Effective Date: August 2, 2026
Last Updated: August 2, 2026

The Invest Nest Holdings, Inc. ("Company," "we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at theinvestnest.com, use our application at app.theinvestnest.com, or otherwise interact with our services (collectively, the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.

This Privacy Policy applies to information about you (the user). Separately, the Service surfaces information about third parties (such as property owners) sourced from third-party data providers. The use of that data is governed by Section 11 below and by our Terms of Service.

1. Information We Collect

1.1 Personal Information

We collect personal information you provide directly when you create an account, subscribe, contact customer support, complete a form, or use the Service. This may include:

  • Your name, city of residence, phone number, and email address
  • Account credentials (username and password)
  • Billing information for subscriptions and in-app purchases such as skip-trace credit packs (collected and stored by our payment processor, Stripe, on our behalf)
  • Communications you send to us, including support tickets, survey responses (such as exit surveys), and chat messages
  • Marketing source information (whether you arrived via email, paid ads, social media, referrals, etc.)
  • Records of your acceptance of our Terms of Service and this Privacy Policy, including the document version you accepted and the date and time of acceptance

1.2 Usage and Device Data

We automatically collect information about your interaction with the Service, including:

  • Pages and screens viewed, features used, and actions taken within the application
  • Date, time, and duration of visits
  • IP address, device type, operating system, browser type and version, screen resolution
  • Referring URLs and exit pages
  • Diagnostic and crash data

We also generate records related to fraud and abuse prevention, such as payment-method fingerprints provided by our payment processor (we never see or store full card numbers) and logs of anti-abuse actions taken on accounts.

1.3 Cookies and Tracking Technologies

We and our service providers use cookies, pixels, tags, web beacons, and similar technologies to operate the Service, analyze usage, personalize content, and support advertising. You can configure your browser to refuse cookies or alert you when cookies are being sent. Disabling cookies may limit your ability to use parts of the Service.

2. Third-Party Service Providers and Data Processors

We use the following service providers ("processors") who may receive, process, or store your personal information on our behalf. We are the data controller; these providers act as processors under our instructions.

  • Amazon Web Services (AWS): Hosts the Service, including databases (RDS), file storage (S3), authentication (Cognito), and email (SES). All user data is stored in US-based AWS regions. https://aws.amazon.com/privacy/
  • Stripe: Processes payments, manages subscriptions and one-time purchases, and stores billing information. We do not store full credit card numbers on our systems. https://stripe.com/privacy
  • Loops: Delivers our product and marketing emails and stores the contact details and email engagement data needed to send them. https://loops.so/privacy
  • Attio: Stores customer relationship records (such as your name, email, and subscription status) that help us manage accounts and support. https://attio.com/legal/privacy
  • Intercom: Powers our in-app chat widget (including AI-assisted support), stores conversation history, captures contact attributes, and delivers in-product messages and surveys. https://www.intercom.com/legal/privacy
  • PostHog: Provides product analytics and session replay so we can understand how the application is used and improve it. Session replays mask sensitive fields such as passwords and payment inputs. https://posthog.com/privacy
  • Sentry: Collects error and crash diagnostics so we can find and fix technical problems. https://sentry.io/privacy/
  • ChartMogul: Provides subscription analytics based on billing data from Stripe. https://chartmogul.com/privacy/
  • Google Analytics 4 (GA4) and Google Search Console: Measure website and application traffic, conversions, and user behavior. https://policies.google.com/privacy
  • Google Ads: Serves advertising and measures ad performance, including conversion tracking and remarketing. You may opt out at https://adssettings.google.com/
  • Meta Pixel: May be deployed to measure advertising performance and support remarketing across Meta properties (Facebook, Instagram). https://www.facebook.com/policies/cookies/
  • Hotjar: May be deployed to capture session recordings and heatmaps showing how users interact with our Service. Hotjar records clicks, scrolls, mouse movement, and form interactions while masking sensitive fields such as passwords and payment inputs. https://www.hotjar.com/legal/policies/privacy/
  • Supademo: Embeds interactive product walkthroughs and tours within our website and application. https://supademo.com/privacy
  • RealEstateAPI: Provides the underlying property records, ownership data, and skip-trace data displayed within the Service. RealEstateAPI is a third-party data source, not a processor of your personal information. See Section 11 for details on third-party data.

We may engage additional service providers from time to time to support the operation, analytics, marketing, and security of the Service (including additional hosting, analytics, advertising, customer support, fraud detection, AI, or email providers). We will update this Privacy Policy when material changes occur. Your continued use of the Service after changes are posted constitutes your acceptance of the updated list of processors.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Service
  • Authenticate users and secure accounts
  • Process payments, subscriptions, trials, credit pack purchases, and refunds
  • Communicate with you about your account, transactions, product updates, support requests, and (with appropriate consent) marketing
  • Personalize your experience and surface relevant features
  • Measure and analyze usage, performance, and conversion
  • Detect, prevent, and respond to fraud, abuse (including trial abuse), security incidents, and technical issues
  • Maintain records of your acceptance of our legal terms
  • Comply with legal obligations and enforce our agreements

We process personal data on the following legal grounds, where applicable:

  • Consent: For purposes such as marketing communications. You may withdraw consent at any time.
  • Contractual necessity: To deliver the Service you have signed up for.
  • Legal obligation: To comply with tax, accounting, and other laws.
  • Legitimate interests: To improve the Service, secure our systems, prevent abuse, and grow our business, balanced against your privacy rights.

3.1 Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. We use automated checks to detect fraud and abuse (for example, detecting when a payment method has been used across multiple free trials); where such a check affects your sign-up, we present the outcome to you in the product and you can contact support for review. We may use profiling techniques for purposes such as personalized marketing or product analytics, but these activities do not produce significant legal effects. If this changes, we will update this Privacy Policy and provide appropriate safeguards.

4. Disclosure of Your Information

We may share your information in the following circumstances:

  • With service providers identified in Section 2, who process data on our behalf under contractual obligations.
  • For legal reasons: to comply with applicable laws, regulations, legal process, or government requests; to enforce our Terms of Service; to protect the rights, property, or safety of The Invest Nest, our users, or others; and to prevent or investigate suspected fraud, abuse, or security issues.
  • In a business transaction: If The Invest Nest is involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor or acquiring entity. We will notify you of any such transfer and any resulting changes to this Privacy Policy.
  • With your consent: For any other purpose, with your prior consent.

We do not sell your personal information for monetary consideration. However, certain advertising and analytics activities (such as Google Ads remarketing and Meta Pixel) may be considered "sharing" or "sale" under California law. See Section 8 for your rights and how to opt out.

5. Data Security

We use a combination of administrative, technical, and physical safeguards to protect your personal information, including encryption in transit and at rest, role-based access controls, secure cloud infrastructure, and regular security reviews. No method of transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

5.1 Breach Notification

In the event of a data breach involving your personal information, we will notify you and applicable regulators as required by law and within the timeframes mandated by applicable data protection laws.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. Specific retention periods depend on the type of data and the purpose for which it was collected. Records related to billing, legal-terms acceptance, and abuse prevention may be retained after account closure where we have a legal obligation or a legitimate interest in keeping them. Anonymous and aggregated data, which does not identify you directly or indirectly, may be retained indefinitely.

You may request deletion of your personal information at any time as described in Section 7.

7. Your Privacy Rights

Depending on the law that applies to you, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete personal information
  • Delete your personal information, subject to legal exceptions
  • Receive a portable copy of your personal information
  • Restrict or object to certain processing activities
  • Withdraw consent where processing is based on consent
  • Opt out of marketing communications
  • Lodge a complaint with a data protection authority

7.1 How to Submit a Data Subject Rights Request

To exercise any of these rights, email info@theinvestnest.com with the subject line "Privacy Request." Please include:

  1. The right you wish to exercise (access, correction, deletion, etc.)
  2. The email address associated with your account
  3. Any additional information necessary to verify your identity

We will acknowledge your request within a reasonable time and respond as required by applicable law. We may need to verify your identity before fulfilling your request, and we may decline requests where permitted by law (for example, where deletion would interfere with legal recordkeeping requirements).

You can also delete your account directly in your Account Settings. Deleting your account immediately cancels any active subscription or trial, as described in our Terms of Service.

You may opt out of marketing emails at any time by clicking "unsubscribe" in any marketing email or by emailing info@theinvestnest.com.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: Request the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
  • Right to Delete: Request deletion of personal information we have collected from you, subject to exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: Opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. We do not sell personal information for money. However, our use of advertising cookies (Google Ads, Meta Pixel) may qualify as "sharing" under California law.
  • Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information beyond what is necessary to provide the Service or as otherwise allowed under applicable law.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

8.1 Do Not Sell or Share My Personal Information

To opt out of the sharing of your personal information for cross-context behavioral advertising, email info@theinvestnest.com with the subject line "Do Not Sell or Share." You may also use browser-based opt-out signals such as the Global Privacy Control (GPC), which we honor for California residents where technically feasible.

To exercise any California right, follow the process in Section 7.1. You may also designate an authorized agent to make a request on your behalf.

9. Children's Privacy

The Service is not directed to children. Consistent with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete that information promptly.

Separately, the Service is intended for adult use only. By creating an account, you represent that you are at least 18 years of age.

10. International Users and Data Transfers

The Service is intended for users located in the United States. Our infrastructure, personnel, and business operations are based in the United States, and your information is stored and processed in the US.

We do not actively offer the Service to residents of the European Union, the United Kingdom, or other jurisdictions outside the United States. If you access the Service from outside the United States, you do so on your own initiative and at your own risk. By using the Service, you acknowledge that your personal data will be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction.

We do not currently rely on Standard Contractual Clauses or other GDPR transfer mechanisms because we do not market the Service to EU or UK residents.

11. Third-Party Property and Owner Data

The Service surfaces public-record and third-party property information, including ownership records, contact information for property owners and occupants (skip-trace data), and related details. This data is sourced from RealEstateAPI and other third-party data providers.

This data is not about you as a user of the Service. It is provided so that you can research properties and reach out to owners in connection with real estate investing activities.

Skip-trace results may include additional third-party data signals, such as an indicator that a phone number appears on a Do Not Call registry according to provider data ("DNC flag"), phone-activity scores, line types, and labels suggesting whether a contact is the property owner or a resident. These signals come from third-party data, are informational only, and are not verified by us. They are not a compliance service, and users remain fully responsible for complying with all laws that apply to their outreach, as described in our Terms of Service.

11.1 FCRA Disclaimer

The Invest Nest is not a consumer reporting agency as defined by the Fair Credit Reporting Act ("FCRA"), and the data provided through the Service is not a consumer report under the FCRA. You may not use any data obtained through the Service for any purpose regulated by the FCRA, including but not limited to:

  • Pre-employment screening or hiring decisions
  • Tenant screening or rental application decisions
  • Credit eligibility, underwriting, or credit-related decisions
  • Insurance underwriting or eligibility decisions
  • Any other decision regarding a consumer's eligibility for credit, employment, insurance, housing, or government benefits

11.2 Responsible Use

You are solely responsible for how you use property and owner data obtained through the Service, including compliance with all applicable laws. This includes (without limitation) the Telephone Consumer Protection Act (TCPA), Do Not Call regulations, CAN-SPAM, state-level telemarketing and privacy laws, anti-stalking laws, and fair housing laws. You may not use the Service or any data obtained through it to harass, defraud, threaten, stalk, or harm any individual.

11.3 If You Are Not a User and Your Information Appears in the Service

If you are not a user of the Service and believe that information about you appears in property or skip-trace results, you may contact us at info@theinvestnest.com with the subject line "Third-Party Data Inquiry." Because this data originates with third-party data providers and public records rather than our own systems, we may refer you to the relevant data provider, and we cannot guarantee removal from the underlying sources.

12. Links to Other Sites

The Service may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of every site you visit.

13. Changes to This Privacy Policy

Each version of this Privacy Policy carries a version number and an effective date, shown at the top of this page, and we keep a record of the version you accepted and when. We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, where the change is material, notify you by email or through the Service, and we may ask you to review and accept the updated policy the next time you sign in. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

This Version 3.0 replaces the version of this Privacy Policy dated April 17, 2026.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

  • By email: info@theinvestnest.com
  • Through our website: https://www.theinvestnest.com/contact-us
  • By mail: The Invest Nest Holdings, Inc., PO Box 60, Buckeystown, MD 21717