Privacy Policy

1. Information We Collect

Information you provide

• Account information: name, email address, password, and (optionally) phone number and profile photo.
• Company information: company name, website, address, your role or position, and team membership.
• Payment information: billing contact details, and card brand, last four digits, and expiration date. Full payment card numbers are collected and stored by our payment processor, Stripe, and are never stored on PAXIV systems.
• Content you submit: projects, deal records, notes, tasks, documents and files you upload to Deal Rooms, saved searches, and messages you send through the platform.
• Search and AI queries: the text of searches and questions you submit to our AI search features.
• Support communications: information you provide when you contact us.

Information collected automatically

• Usage data: pages viewed, features used, clicks, searches run, session duration, and similar activity.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, and cookie or session identifiers.
• Approximate location derived from IP address. Precise GPS location is read only with your permission — see Device location below.
• Session recordings: we record on-screen interactions with the platform for product analytics and troubleshooting.

Property and property-owner information

The Services include public-record and commercially licensed real estate data, including parcel boundaries, assessment and sale records, zoning information, and property-owner names and mailing addresses. When a user runs a skip trace, we obtain additional contact information about a property owner from a third-party data provider, which may include phone numbers, email addresses, demographic attributes, address history, and associated individuals.

This information concerns property owners who are generally not PAXIV users. We process it to provide the Services to our business customers. Property owners may request access to or deletion of this information as described in Section 7.

What we do NOT collect

For clarity, PAXIV does not collect biometric information or facial-geometry data, does not use facial recognition, and does not record telephone or video calls.

Device location

We read your device's precise location only with your permission, and only to center the map on you. This happens in two cases: when you tap the locate-me control on the map, and — if you have already granted location permission in your browser or device settings — once when the map first loads, so it opens centered on you. We do not track your location continuously or in the background, and we take no reading at all unless permission has been granted. On the web, the resulting map position is saved in your browser's local storage so the map can reopen where you left it; in the mobile app, nothing is stored. If you then search the visible map area, its bounds and center coordinates are sent to PAXIV's servers to perform the search. When you enable location-based map overlays in the mobile app, the map center or a geographic envelope derived from it is also sent either to PAXIV's overlay proxy or directly to public Esri ArcGIS, U.S. Geological Survey, and U.S. Census Bureau map-data services to retrieve nearby overlay features. When the map has not been moved after centering on you, those coordinates or envelopes may reveal the precise permission-derived location reading to those recipients. We do not separately store the raw device-location reading in our database or use it for advertising. You can revoke the permission at any time in your browser or device settings, which stops new device-location reads, and clearing the site data removes the stored position.

2. How We Use Information

• To provide, operate, maintain, and improve the Services
• To create and administer accounts, authenticate users, and maintain security
• To process payments, manage subscriptions, and handle billing
• To respond to support requests and communicate with you about your account
• To generate AI-assisted search results, summaries, and reports
• To analyze usage, diagnose problems, and develop new features
• To send product updates and marketing communications, which you may opt out of at any time
• To detect, investigate, and prevent fraud, abuse, and violations of our Terms
• To comply with legal obligations and enforce our agreements

Artificial intelligence

We use third-party large language models, currently Google (Gemini) and OpenAI, to power AI search and report generation. Your search queries, conversation history, and the property records returned by a search are sent to these providers to generate a response. We do not use your content to train our own models. AI-generated output may contain errors and is not professional advice.

PAXIV does not make decisions producing legal or similarly significant effects about any individual through solely automated means.

3. How We Share Information

We share personal information in the following circumstances:

Within your organization. Content you create is visible to other members of your company account according to the permissions configured by your administrators.

Service providers. We share information with vendors who perform services on our behalf and are contractually restricted to using it only for those purposes. Our principal service providers are:

• Supabase — Database and application hosting
• Vercel — Application hosting and performance monitoring
• Amazon Web Services (S3) — File and document storage
• MotherDuck — Property data querying
• Stripe — Payment processing
• Google (Gemini) and OpenAI — AI search and report generation
• Google OAuth — Account authentication
• Upstash Redis — Rate limiting and temporary application caching
• PostHog — Product analytics and session recording
• Google Analytics / Google Tag Manager — Website analytics
• LinkedIn — Advertising measurement
• Resend — Transactional and marketing email
• Twilio — Verification messages
• Mapbox — Mapping and geocoding
• Esri ArcGIS, U.S. Geological Survey, and U.S. Census Bureau — Public map-overlay data queried by viewport location
• Cloudflare — Security, bot protection, and content delivery
• ChatKitty — In-app messaging
• SkipEngine — Property-owner contact data

Advertising partners. We use advertising and analytics technologies from Google and LinkedIn that may share online identifiers and browsing activity for cross-context behavioral advertising. Under California law this is considered “sharing.” See Section 7 for how to opt out.

Legal and safety. We may disclose information to comply with law or legal process, to enforce our Terms, or to protect the rights, property, or safety of PAXIV, our users, or others.

Business transfers. If PAXIV is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information for money.

4. Cookies and Tracking

We and our providers use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure usage, and support advertising. This includes a first-party attribution cookie that records marketing campaign parameters for up to 90 days.

You can control cookies through your browser settings. Disabling cookies may prevent parts of the Services from working. You may also opt out of interest-based advertising through the Network Advertising Initiative (optout.networkadvertising.org) and the Digital Advertising Alliance (optout.aboutads.info).

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Services, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. Specific periods:

• Your user record: for the life of the account, and deleted when you delete your account. Projects and assets you own are deleted if there is no other company member, or transferred to another company member when one remains.
• Company records: retained after you delete your account. A company is shared by its members and is linked to billing and tax records, so deleting one member does not delete the company. If you are its only member, the company record may retain the name, email address, website, and other contact information associated with it. Email privacy@paxiv.com to request deletion or correction of a company record, subject to legal retention requirements.
• Content, projects, and uploaded documents: for the life of the account, except that content shared with your company may be transferred to another member of your company when you delete your account. Deleting your account removes uploaded files from the platform, but the stored copies held by our file-storage provider are not yet purged automatically — see Section 7 for how to request their erasure.
• Payment records: retained as required by tax and accounting law.
• Search queries and usage logs: retained for analytics and service improvement.
• Property-owner contact records: retained while they remain useful to the customers who requested them, subject to deletion requests under Section 7.
• Session records: retained according to the retention period configured with our analytics provider.

6. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, encryption of authentication secrets at rest, row-level database access controls, time-limited signed URLs for file access, and optional two-factor authentication on user accounts.

No system is completely secure. You are responsible for keeping your password confidential and for notifying us promptly of any suspected unauthorized access at security@paxiv.com.

If a breach affecting personal information occurs, we will notify affected individuals and regulators as required by applicable law, including the Utah Protection of Personal Information Act.

7. Your Privacy Rights and Choices

Everyone

• Access and correction: you may review and update most account information directly in your account settings, or contact us.
• Account deletion: you may delete your account from account settings, or by contacting us. Deleting your account removes your PAXIV profile, credentials, sessions, and database-backed projects and assets, subject to the retention exceptions above. Chats, messages, and message attachments held by our messaging and storage providers are not automatically purged when you delete your account. Files you uploaded to a Deal Room are no longer available through the platform after deletion, although a previously issued time-limited download or preview link may remain usable until it expires. The underlying stored copies are also not yet purged automatically from our file-storage provider. Email privacy@paxiv.com to request erasure of provider-held chats, attachments, or files.
• Marketing email: our marketing emails carry a standard unsubscribe header, which most mail clients (including Gmail, Outlook, and Apple Mail) present as an Unsubscribe option. You may also opt out at any time by emailing support@paxiv.com. We honor opt-out requests within 10 business days. We will still send transactional messages about your account.

California residents (CCPA/CPRA)

You have the right to know what personal information we collect, use, and disclose; to request deletion; to request correction; to opt out of the sharing of personal information for cross-context behavioral advertising; to limit the use of sensitive personal information; and not to receive discriminatory treatment for exercising these rights.

To opt out of sharing for cross-context behavioral advertising, or to make any other request, email privacy@paxiv.com with the subject line “California Privacy Request.” Because PAXIV operates exclusively online, email is our designated request method.

Categories of personal information we have collected in the preceding 12 months: identifiers; customer records (name, contact, payment card metadata); commercial information; internet and network activity; geolocation information, including approximate IP-derived location and permission-derived map-center coordinates when you search that map area or request location-based overlays; professional or employment information; audio-visual information in the form of session recordings; and the content of communications you send through the Services. We disclose these categories to the service providers listed in Section 3 for the purposes described there. We share identifiers and internet activity information with advertising partners as described in Section 3. We do not sell personal information for money, and we do not knowingly share the personal information of consumers under 16.

Other U.S. state residents

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, and others, may have rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of targeted advertising. Where a state provides a right to appeal a denied request, you may appeal by replying to our response or emailing privacy@paxiv.com with “Privacy Appeal” in the subject line.

Property owners

If you are a property owner and believe PAXIV holds contact information about you, you may request access to or deletion of that information by emailing privacy@paxiv.com. We may need to verify your identity and your connection to the property before acting on the request.

Verification

To protect your information, we will take reasonable steps to verify your identity before fulfilling a request. An authorized agent may submit a request on your behalf with written proof of authority.

8. Children

The Services are intended for business use by professionals and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact privacy@paxiv.com and we will delete it.

9. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy with a revised “Last Revised” date. If we make material changes, we will provide notice through the Services or by email.

10. Contact Us

PAXIV, LLC
35 South 100 East
American Fork, Utah 84003
Attn: Legal Department

• Privacy: privacy@paxiv.com
• Security: security@paxiv.com