Privacy Policy - TruReport

Effective Date: April 8, 2026

Disclaimer: This document is for informational purposes only and does not constitute legal advice. You should consult with a legal professional to ensure compliance with all applicable laws.

1. Introduction

This Privacy Policy explains how Goals and Gambles LLC, which operates Remote Prop View and its TruReport feature (collectively "Remote Prop View," "we," "our," or "us"), collects, uses, discloses, stores, and protects information when you use our website, applications, APIs, and related services (collectively, the "Service").

This policy is meant to describe our current product behavior as implemented in the codebase as of April 8, 2026. It applies together with our Terms of Use.

2. Information We Collect

Depending on how you use the Service, we may collect the following categories of information:

• Account information: Name, email address, password, role, plan selection, email-verification status, referral or UTM fields, and related account settings.
• Subscription and billing information: Stripe customer identifiers, subscription status, plan selections, billing-cycle metadata, and limited payment-related information needed to manage subscriptions. Payment card details are handled by Stripe and are not stored by us.
• Session, device, and security information: IP address, user agent, device information, session identifiers, login activity, and abuse-prevention or fraud-monitoring data.
• Search and saved-content information: Property searches, filters, saved searches, saved properties, notes, tags, ratings, visit dates, and similar content you choose to save in the Service.
• Location information (Spot It): If you use the Apartment Spotter ("Spot It") feature on a mobile device and grant permission, we access your device's location, including in the background while spotting is active (shown by an ongoing notification), and send your coordinates to our servers to find apartments near you as you move. We use them only to return nearby listings and do not retain or store your location history. You can turn this off anytime by stopping Spot It or in your device settings.
• Usage and diagnostics information: Page visits, feature usage, API request metadata, request timing, error information, and similar operational analytics.
• Browser storage and cookie preference information: Session cookies, consent preferences, and client-side cache or storage entries used to improve performance and preserve your experience.
• Communications: Information you send to us when requesting help, submitting support tickets, or communicating with our team.

3. How We Use Your Information

We may use the information above to:

• Create, authenticate, maintain, and secure your account and sessions.
• Provide property search, saved-property, reporting, subscription, and customer-support functionality.
• Process payments, manage subscriptions, prevent fraud, and resolve billing disputes.
• Improve performance, reliability, and search quality, including through caching and operational monitoring.
• Enforce plan limits, guest-search limits, anti-bot rules, and other platform safeguards.
• Respond to support requests, service notices, product updates, legal requests, and abuse investigations.
• Measure product usage, attribution, and feature effectiveness where permitted by your settings and applicable law.

4. Sources of Data

We collect information directly from you, automatically from your use of the Service, and from service providers or data vendors that help us operate the platform. Property, neighborhood, valuation, and insight data may also come from third-party providers, public sources, and AI-assisted processing tools.

5. How We Share or Disclose Information

We may disclose information to service providers, infrastructure partners, and data vendors as needed to operate the Service. Examples include:

We may also disclose information when required by law, to respond to valid legal process, to investigate fraud or abuse, to protect rights and safety, or in connection with a merger, financing, asset sale, or similar transaction.

6. Public Reports and Shared Links

If you create a share link for a saved property report, that link may allow anyone with the URL to view the associated report data. Shared reports can include saved property details and the notes or fields you chose to store, such as notes, pros, cons, ratings, visit dates, and your display name where available.

You should only generate share links when you intend to make that content available to the recipient. Shared links should be treated like public links.

7. Cookies, Browser Storage, and Similar Technologies

We use cookies and similar browser technologies, including local browser storage, for session management, security, consent handling, performance optimization, and limited analytics or marketing preferences where enabled. Some client-side caches also store recent search or property results on your device to reduce repeat fetching and improve page performance.

You can manage browser cookies through your browser settings. Some privacy choices are also stored locally in your browser so your selections can be remembered on future visits.

8. Data Retention

We retain data for different periods depending on its purpose, technical design, and legal obligations. Examples from the current platform include:

• Active sessions: Session validation currently uses a 30-minute idle timeout and a 7-day maximum session lifetime.
• Operational cache entries: API and browser caches may be retained for minutes, hours, days, or longer depending on the underlying cache type and TTL.
• Guest search tracking: Guest search counters are tracked on a monthly basis for abuse prevention and plan enforcement.
• Account, billing, security, and support records: Retained for as long as reasonably necessary to provide the Service, comply with law, resolve disputes, enforce agreements, and protect the platform.

We may retain limited information longer where needed for security, fraud prevention, recordkeeping, legal compliance, backup integrity, or dispute resolution.

9. Your Privacy Rights

Depending on where you live and applicable law, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about how your personal information is used and disclosed. California residents may also have rights related to knowing, deleting, correcting, opting out of certain data-sharing practices, and limiting use of certain sensitive personal information, subject to legal exceptions.

If GDPR or similar laws apply, we generally process information under one or more of the following legal bases: performance of a contract, legitimate interests, consent, and compliance with legal obligations.

To make a privacy request, contact us at [email protected] or [email protected], or use our Help page. We may need to verify your identity before completing certain requests.

10. International Users

TruReport is operated from the United States. If you access the Service from another jurisdiction, your information may be processed in the United States or in other countries where our service providers operate, subject to applicable safeguards required by law.

11. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your information. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information.

12. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at [email protected], [email protected], or through our Help page.