At UWmatic, we collect several types of information to provide you with the best possible service:

Personal Information

We may collect the following personal information:

• Contact information (name, email address, phone number)
• Account credentials (email address and a password, which we store only as a cryptographic hash)
• Billing information (name and billing address)
• If you publish a sponsor profile: your firm name, photo, biography, and team member details — all optional, and only what you choose to enter

We never receive or store your card details.Payment card information is collected directly by our payment processor, Stripe, and does not pass through UWmatic's servers. We hold only a reference identifying your Stripe customer record.

Usage Information

We always collect the technical information necessary for the platform to function and stay secure:

• IP address (for security and fraud prevention)
• Browser type and operating system (for compatibility)
• Authentication events (login/logout for security monitoring)

If — and only if — you accept analytics cookies, we also collect product analytics: which pages you visit, how long you spend on them, and which features you interact with. This is off by default. See "Cookies and Similar Technologies" below.

We do not collect, whether or not you accept analytics:

• Cross-site tracking information
• Device fingerprinting data
• Session recordings or screen replays
• The content you copy from the platform

Cookies and Similar Technologies

We use two categories of cookie and similar storage.

• Essential — required for authentication, session security, and abuse prevention. These are always on, because without them you cannot sign in. Local storage also holds your property preferences and workflow state on your device.
• Analytics — Google Analytics 4 and PostHog, which help us understand which features are used so we can improve them. These are off until you accept them, and nothing is loaded before you do.

We do not use advertising or marketing cookies, and we do not use cookies to track you across other websites.

You are asked for a choice the first time you visit, and you can change it at any time under Settings → Privacy. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as a refusal and do not ask. For the full list of individual cookies, see our Cookie Policy.

Property and Investment Data

When you use our platform to analyze properties, we collect:

• Property details (location, type, size, etc.)
• Financial information related to properties
• Investment criteria and preferences
• Analysis results and reports

Property and investment data may include information obtained from third-party sources, such as multiple listing services (MLS), public records, or market analytics providers. We rely on these sources' compliance with applicable laws but do not independently verify their accuracy.

Information About Other People in Documents You Upload

Underwriting documents sometimes describe people who have no relationship with UWmatic and who never gave us their information directly. Offering memoranda and operating statements commonly carry broker, seller, property manager, and lender contact details.

What we do not collect. UWmatic does not currently accept rent rolls or lot rolls, so the platform does not ingest unit-level tenant records — tenant or resident names, contact details, payment and delinquency status, or lease assignments. If we enable that capability in future, this policy and our Subprocessor list will be updated before it goes live.

Where a document does contain third-party information.We extract it only so the platform can produce your analysis, and we store it in your account as part of that deal. To perform the extraction, the document contents are sent to the AI providers listed in our Subprocessor list. We do not use it to contact anyone, we do not build profiles of individuals, and we do not sell or share it for anyone else's purposes.

How long we keep it. For as long as the associated property record exists in your account, and then under the retention periods described in section 5. Deleting a property or your account removes it.

Your responsibility as the uploader.You are the party who holds the relationship with these individuals, and you are responsible for ensuring you have the right to share their information with us and that doing so is consistent with your own obligations — including any lease terms, non-disclosure agreements, or state law that applies to you. If personal information is not needed for your analysis, redact it before uploading; UWmatic's calculations depend on rents, charges, and occupancy, not on identities.

If you are an individual whose information you believe is held in UWmatic by one of our customers, contact us at support@uwmatic.com and we will work with the relevant customer to address your request. In most cases our customer, not UWmatic, is the party that determines how that information is used.

We use your information for the following purposes:

Providing and Improving Our Services

• Delivering the UWmatic platform functionality
• Managing your account and providing customer support
• Processing transactions and subscriptions
• Personalizing your experience based on preferences
• Improving and developing new features

Communication

• Sending important notices and updates about your account
• Providing information about new features or products
• Responding to your inquiries and requests
• Sending promotional emails (with your consent)

Security and Compliance

• Monitoring and preventing fraud or abuse
• Ensuring compliance with our terms of service
• Protecting against unauthorized access
• Maintaining platform security and integrity

Automated Decision-Making and Profiling

We use automated decision-making or profiling to generate property analyses, investment recommendations, or personalized content based on your data. These processes help optimize your experience but do not produce legal or similarly significant effects. You may request human review of automated decisions by contacting support@uwmatic.com.

We may share your information with:

Service Providers

We work with trusted third-party providers who help us operate our business and deliver services to you. These providers have limited access to your information to perform specific tasks on our behalf and are obligated to protect your information.

We maintain a complete, current list of these providers — what each one receives and why — on our Subprocessors page. It covers our hosting and database provider, payment processor, email provider, the AI providers used for document parsing and chat, the property data services used for enrichment, and the analytics and security tools that run in your browser. That page is the authoritative list; we keep it separate so it stays current.

One point worth stating here rather than only on that page: our document parsing uses AI providers in both the United States and the European Union, and documents you upload are transmitted to them in full. These providers are contractually obligated to protect your data, to process it only on our instructions, and not to use it to train their models.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request. We may also disclose information to protect the rights, property, or safety of UWmatic, our users, or others, or to enforce our terms of service.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or part of our business, your information may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

With Your Consent

We may share your information with third parties when you have given us your consent to do so.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Google advertising signals and ad personalization are disabled on our analytics property.

We implement appropriate technical, administrative, and physical measures to protect your personal information against unauthorized access, theft, and loss. Our security measures include:

• Encryption of sensitive data both in transit and at rest
• Automated security scanning in our deployment pipeline, and dependency vulnerability monitoring
• Access controls and authentication procedures
• Infrastructure operated by Vercel and Supabase in US regions, with encryption at rest and in transit
• Access to production systems limited to personnel who require it, under individual credentials with multi-factor authentication

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Breach Notification

If we determine that unauthorized access to or acquisition of your personal information has occurred, we will notify you without unreasonable delay and within the timeframes required by the law of your state, and will notify state authorities where required. Notice will describe what happened, what information was involved, and what steps we are taking. Notifications will be sent to the email address associated with your account or via a prominent notice on our website.

Depending on your location, you may have certain rights regarding your personal information:

Access and Update

You can access and update your personal information through your account settings on the UWmatic platform.

Data Deletion

You can permanently delete your account and all associated data at any time from Settings → Privacy. Deletion is immediate and removes your profile, properties, financial analyses, uploaded documents, and chat history. Some records are retained where law requires — see Data Retention below. If you prefer, you may instead email support@uwmatic.com and we will action the request within 30 days.

Marketing Communications

You can opt out of marketing communications by clicking the "unsubscribe" link in our emails or by updating your communication preferences in your account settings. Note that you cannot opt out of essential communications, such as account updates, transaction confirmations, or notices about changes to our Terms or Privacy Policy, as these are necessary to provide the Service.

Data Portability

You can download a complete copy of your data at any time from Settings → Privacy, in a structured, machine-readable format. This is available to all users, not only those in jurisdictions that require it.

Data Retention

We retain your account and property data for as long as your account is active and until you delete it. Deleting a property removes it and its associated documents; deleting your account removes everything associated with it. There is no fixed expiry — your data stays available to you until you choose otherwise.

Backups. Deleted data may persist in encrypted infrastructure backups for up to 30 days after deletion, after which those backups expire. We do not restore deleted data from backups except to recover from a system failure.

Operational records. Separately from your account data, we keep limited operational records for security and billing integrity: sign-in attempts, security event logs, and AI usage accounting. These are retained on their own schedules — none longer than 24 months — and are not deleted by an account deletion request, because they exist to protect the platform and to satisfy billing and audit obligations.

US State Privacy Rights

Depending on where you live, you may have some or all of the following rights:

• Know what personal information we hold about you and how we use it
• Access a portable copy of it
• Correct inaccurate information
• Delete it
• Opt out of sale, sharing for targeted advertising, or profiling that produces legal or similarly significant effects

We do not sell personal information, do not share it for targeted advertising, and do not conduct profiling that produces legal or similarly significant effects — so those opt-outs have nothing to act on. The access, correction, portability, and deletion rights are available to every user, regardless of state, through Settings → Privacy.

These rights are recognized in varying forms under the laws of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states. We extend them to all US users rather than gating them by residency.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. Email support@uwmatic.com with written permission signed by you; we may ask you to verify the request directly.

Appeals.If we decline a request, you may appeal by replying to our decision or emailing support@uwmatic.com with "Privacy Appeal" in the subject. We will respond within 45 days with our decision and the reasons for it.

Nevada residents. Nevada law gives you the right to direct us not to sell covered information. We do not sell it. To submit a request anyway, email support@uwmatic.com; we respond within 60 days.

Do Not Track and Global Privacy Control

We honor both. If your browser or an extension sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, we treat it as a refusal of analytics cookies: no analytics provider is loaded, you are not shown a consent prompt, and a signal takes precedence over any earlier choice you made on this device.

Essential cookies are unaffected, as they are strictly necessary to sign you in and keep your session secure.

UWmatic is based in the United States and the Service is offered solely to residents of the United States. We process and store information on servers located in the United States. Some of the subprocessors we rely on are established outside the United States — see our Subprocessor list for each vendor and the region it operates in.

The UWmatic platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@uwmatic.com, and we will delete such information from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. We encourage you to review this Privacy Policy periodically for any changes.

This Privacy Policy is effective as of July 26, 2026. Previous versions are available upon request by contacting support@uwmatic.com.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: support@uwmatic.com

Mailing Address:
P.O Box 823
Belle Mead, NJ 08502
United States

We will respond to your request within 30 days.