Privacy Policy

1 Information We Collect

Information You Provide Directly

• Account registration information (name, email address, company name, job title)
• Property and portfolio data you enter into our products
• Documents and files you upload for processing or audit
• Social media content you create or publish through PostFolio.ai
• Communications with our support team, including chat and email
• Payment and billing information (processed by our payment provider)
• Survey responses and feedback you voluntarily provide

Information Collected Automatically

• Device information (browser type, operating system, device identifiers)
• IP address and approximate geographic location
• Usage data, including pages visited, features used, and interaction patterns
• Log data such as access times, error logs, and referring URLs
• Cookies and similar tracking technologies (see Section 6)

Information from Third Parties

• Single sign-on (SSO) providers such as Microsoft Azure AD
• Social media platforms when you connect accounts through PostFolio.ai
• Property data providers and public records, where applicable
• University enrollment and IPEDS data used within CampusIQ for market intelligence

2 How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve our products and Services
• Process transactions and send related billing and account information
• Authenticate users and manage account access through SSO
• Send product updates, technical notices, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage trends to improve user experience and product performance
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity
• Generate aggregated, anonymized analytics for product development
• Comply with legal obligations and enforce our terms

3 Data Sharing

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: Third parties who assist in operating our Services, including cloud hosting (Supabase), payment processing, email delivery, and analytics
• Social Media Platforms: When you publish content through PostFolio.ai, your content is shared with the connected platforms (e.g., Meta/Facebook, Instagram) per your instructions
• Professional Advisors: Lawyers, accountants, and auditors as necessary for business operations
• Legal Requirements: When required by law, court order, or governmental regulation, or to protect our rights, property, or safety
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity
• With Your Consent: When you explicitly authorize us to share information with a third party

4 AI & Data Processing

Several of our products incorporate artificial intelligence and machine learning features:

How AI Processes Your Data

• PostFolio.ai uses AI to generate social media content based on your property data and preferences. Content generation requests are processed in real-time and are not stored by the AI provider beyond the immediate request
• Tidua uses AI for document classification and audit analysis. Documents are processed for classification purposes only; the AI does not retain or learn from your specific documents
• TransitionTrack may use AI to assist with task recommendations and workflow optimization
• CampusIQ uses AI to extract and analyze market signals from enrollment trends, news sources, and IPEDS data. Signal extraction is processed in real-time and your queries are not used to train AI models
• Quorum aggregates and presents executive-level portfolio metrics; no AI processing of your personally identifiable information occurs within this application

AI Data Safeguards

• AI processes data in real-time but does not store conversation history or document contents beyond the immediate processing session
• API keys for third-party AI services (e.g., OpenAI, Anthropic) are user-provided and stored securely with encryption. UnitStacks does not share your API keys with any third party
• Your data is not used to train or fine-tune AI models
• AI-generated outputs are provided as suggestions; you retain full control over what is published or used

5 Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access controls (RBAC) with row-level security (RLS) at the database level
• Microsoft SSO authentication with domain-restricted access
• Rate limiting on all API endpoints to prevent abuse
• Security headers (HSTS, CSP, X-Frame-Options) on all applications
• Regular security audits and dependency vulnerability scanning
• Organization-level data isolation ensuring tenants cannot access each other's data

While we strive to use commercially acceptable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6 Cookies

We use cookies and similar technologies to enhance your experience:

Essential Cookies

Required for authentication, security, and core functionality. These cannot be disabled without affecting service operation.

Analytics Cookies

Help us understand how users interact with our Services so we can improve them. These collect aggregated, anonymized usage data.

Preference Cookies

Remember your settings, preferences, and customizations across sessions.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit functionality of the Services.

7 Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@unitstacks.com. We will respond to your request within 30 days.

8 Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@unitstacks.com.

9 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on our website with a revised "Last updated" date
• Notify you via email or in-product notification for significant changes
• Provide a summary of key changes where appropriate

Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.

10 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, we encourage you to reach out.