Privacy Policy

Last updated: April 9, 2026

This Privacy Policy explains how ZenTech Labs ("DisclosureReview," "we," "us," or "our") collects, uses, stores, and discloses information when you visit disclosurereview.ai, create an account, purchase or use our services, upload disclosure packets or related documents, or otherwise interact with us.

Contact: support@disclosurereview.ai

DisclosureReview is a diligence support tool for real estate disclosures. It is not a law firm, inspection company, brokerage, engineering firm, appraisal firm, insurance advisory service, tax advisory service, or financial advisory service, and our service does not constitute legal, inspection, engineering, appraisal, tax, insurance, financial, brokerage, or other professional advice.

1. Scope

This Privacy Policy applies to information we collect through our website, product, communications, and related services (collectively, the "Services"). It does not apply to third-party websites, products, or services that we do not control, including third-party authentication, payment, hosting, storage, or model providers.

2. Who We Serve

Our Services are intended for users in the United States, including individual consumers and real estate professionals. Our Services are not directed to children, and you may not use the Services if you are under 18.

3. Information We Collect

Depending on how you use the Services, we may collect the following categories of information:

A. Information you provide directly

Name
Email address
Account credentials and authentication-related information
Information you submit through customer support
Information you upload, including PDFs and other disclosure-related materials
Questions, prompts, notes, or other content you submit in connection with a report
Payment-related information necessary to process purchases (typically handled by our payment processor, Stripe)

B. Information collected automatically

We and our service providers may automatically collect certain technical and usage information, such as:

IP address
Device and browser information
Log data
Basic usage and diagnostic information
Cookies or similar technologies that are required for authentication, security, fraud prevention, payment workflows, or core site functionality

Shared-report activity. When someone opens a report via a public share link (/share/{token}), we record activity events so the agent who created the share can understand engagement — for example, how many distinct visitors opened the link, how long they stayed, and which source documents they clicked through to. We store these events with:

a rotating daily hash of the viewer's IP address (the raw IP is never persisted);
a truncated user-agent string (up to 200 characters) and whether it matches a known link-preview or crawler signature;
the hostname of the HTTP referrer, if any (we discard the path and query string);
a first-party session cookie (dr_sid) so repeat visits on the same browser group together.

We retain these share-activity events for up to 90 days, after which they are eligible for deletion. We do not use share-activity events for advertising, and we do not sell them.

C. Information contained in uploaded or imported documents

Disclosure packets and related documents may contain personal information or sensitive information about sellers, properties, or third parties, such as names, signatures, contact information, inspection details, repair history, claims history, and other transaction-related information. Please do not upload or import Social Security numbers, bank account numbers, medical information, or other highly sensitive personal information unless strictly necessary and lawfully authorized.

4. Sources of Information

We collect information:

Directly from you
Automatically from your use of the Services
From documents or materials you upload, import, or cause to be retrieved, including disclosure materials obtained through third-party links or services you direct us to access
From service providers that support authentication, payments, hosting, storage, and infrastructure

5. How We Use Information

We may use information for the following purposes:

To provide, operate, maintain, and improve the Services
To create and manage accounts
To authenticate users and secure the Services
To process payments and transactions
To retrieve, ingest, analyze, summarize, and generate reports from uploaded or imported disclosure materials
To respond to support requests and communicate with you
To monitor performance, troubleshoot errors, detect abuse, and protect against fraud or security incidents
To enforce our Terms of Service and other legal rights
To comply with applicable law, regulation, legal process, or governmental request
To evaluate, defend, or resolve disputes or claims

6. How We Disclose Information

We may disclose information in the following circumstances:

A. Service providers and infrastructure vendors

We may disclose information to vendors that help us operate the Services, including providers for:

Authentication and account management (for example, Clerk)
Payments and transaction processing (for example, Stripe)
Hosting and infrastructure (for example, Railway)
Storage and content delivery (for example, Cloudflare)
Internal software development and code repository operations (for example, GitHub), which may involve limited technical logs, deployment metadata, or support-related information, but not routine customer document processing

B. Third-party model providers

To generate reports and answers, we may disclose uploaded or imported documents, extracted text, prompts, questions, and related inputs to third-party cloud model providers. Those providers process data to help generate outputs for you as part of providing the Services.

C. Legal and business transfers

We may disclose information:

If required by law or legal process
To protect rights, property, safety, or security
In connection with a merger, financing, acquisition, reorganization, sale of assets, or similar transaction

D. With your direction or consent

We may disclose information when you direct us to do so or otherwise consent.

7. No Sale or Advertising Share

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising. We do not currently use your information for targeted advertising.

8. Cookies and Similar Technologies

We may use cookies and similar technologies that are reasonably necessary to operate the Services, such as for login sessions, security, fraud prevention, and payment flows. Third-party providers such as Clerk and Stripe may also use cookies or similar technologies as part of their services. If we later add non-essential analytics or advertising technologies, we may update this Privacy Policy accordingly.

9. Do Not Track

Our Services do not currently respond to browser "Do Not Track" signals. We do not currently allow third-party advertising networks to collect personal information on our site for cross-site behavioral advertising.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain security, comply with law, resolve disputes, and enforce agreements.

In general:

Account information may be retained while your account is active and for a reasonable period thereafter
Uploaded or imported files, extracted content, and generated reports may be retained until deletion request, account deletion, operational need, or legal necessity
Payment and transaction records may be retained as needed for tax, accounting, fraud prevention, and legal compliance purposes
Technical logs and security records may be retained as needed for security, troubleshooting, abuse prevention, and service integrity

You may request deletion of your account or uploaded content by contacting support@disclosurereview.ai, and we will review and process requests in accordance with applicable law and our operational and legal obligations.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

12. Your Choices and Rights

A. Account information

You may be able to access, update, or manage certain account information through your account settings or by contacting us.

B. Deletion requests

You may request deletion of your account or certain personal information by emailing support@disclosurereview.ai. We may retain certain information as permitted or required by law, for security purposes, to complete transactions, or for other legitimate business purposes.

C. California privacy rights

California residents may have rights under California law, including the right to:

Know the categories of personal information collected, used, disclosed, sold, or shared
Request access to specific pieces of personal information, subject to legal limitations
Request deletion, subject to exceptions
Request correction of inaccurate personal information, where applicable
Not be discriminated against for exercising applicable privacy rights

To submit a privacy request, email support@disclosurereview.ai.

We may need to verify your identity before processing certain requests. We will not discriminate against you for exercising applicable privacy rights.

13. Sensitive and Third-Party Information in Uploads

You are responsible for ensuring that you have the legal right and authority to upload, import, submit, or direct us to retrieve documents and information through the Services. You should not provide information that you are not permitted to disclose. If you upload or import personal information about other people, you represent that you have all rights, permissions, and lawful bases needed to do so.

14. Third-Party Services

Our Services may interact with or link to third-party services. Their privacy practices are governed by their own policies, not ours. We encourage you to review those third-party policies, including those of Clerk, Stripe, and any third-party service from which you direct us to import or access documents.

15. International Use

Our Services are intended for use in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may post the updated version on this page and update the "Last updated" date. Your continued use of the Services after changes become effective constitutes your acknowledgment of the updated Privacy Policy.

17. Contact Us

If you have questions about this Privacy Policy or would like to submit a privacy request, contact:

ZenTech Labs
Email: support@disclosurereview.ai