Skip to content

Privacy policy.

How Vestora collects, uses, shares, and protects information in the operation of its B2B real estate intelligence platform.

Last updated October 11, 2026

Contents

1. Introduction

Purpose and scope

This Privacy Policy (the “Policy”) describes how Vestora Technologies LLC (“Vestora,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information in connection with the Vestora platform, including the vestoraiq.com website, the Vestora iOS application, and any related services (collectively, the “Platform”). At launch, the Platform provides authenticated Miami-Dade, Broward, Palm Beach, Martin, and St. Lucie public-property discovery, analysis, portfolio tracking, and professional collaboration to investors and verified real-estate professionals. This Policy applies to account information, public property records, user-entered financial information, professional applications, communications, and service-use information.

About Vestora

Vestora Technologies LLC is a Florida limited liability company. Vestora operates a public-record property-analysis platform. The current service does not display or derive customer results from MLS listing data. Dormant sample-feed data and licensed code are kept segregated for testing and cannot enter public-record results. Investor accounts and verified professional accounts may use the Platform.

Key definitions

“Authorized User” means an individual whose account has been provisioned in accordance with Vestora’s account procedures. Professional access additionally requires an applicable active Florida license verified against the Department of Business and Professional Regulation (“DBPR”) and identity verification through Stripe Identity.

“Brokerage Tenant” means a brokerage firm that has executed an agreement with Vestora and the discrete data environment associated with that firm.

“Miami MLS” means the MIAMI Association of REALTORS multiple listing service.

“Miami MLS Data” means listing content, photographs, status history, and related data fields delivered to Vestora through the Trestle Data Feed under Miami MLS rules.

“Personal Information” means information that identifies, relates to, describes, or could reasonably be linked with a particular individual, as further defined under applicable U.S. state privacy laws.

“Sponsoring Broker” means the licensed Florida real estate broker and active Miami MLS participant who authorizes Vestora as a member technology platform under that broker’s MLS membership.

“Trestle Data Feed” means the Miami MLS data distribution feed delivered to Vestora through Trestle (CoreLogic) pursuant to a data distribution agreement held directly by Vestora Technologies LLC.

Acceptance of this Policy

By creating an account, accessing the Platform, or otherwise using Vestora’s services, you acknowledge that you have read and understood this Policy and that your use of the Platform is governed by this Policy together with the applicable Master Services Agreement, Terms of Service, or Brokerage Subscription Agreement in effect between Vestora and your brokerage or you. If you do not agree with this Policy, you must not access or use the Platform.

2. Information we collect

Information you provide to us

In connection with account creation, identity verification, and ongoing use of the Platform, we collect information you submit to us directly, which may include:

  • Identity and contact information, including full legal name, business email address, business phone number, and the brokerage with which you are affiliated.
  • Professional credentials, including your Florida real estate license number, license type, and the issuance and expiration dates of your license, which we use solely to confirm that your license is active and in good standing.
  • Authentication information, including your password (stored only in salted, hashed form), session information, and, when configured, public-key credentials and related metadata used for passkeys or other supported authentication methods.
  • Profile and preference information, including display name, profile photograph (optional), notification preferences, and watchlist or alert configurations.
  • Billing information for individually contracted users, including the name, billing address, and partial payment-card details handled through our third-party payment processor; Vestora itself does not store full payment-card numbers.
  • Communications you send to us, including support requests, feedback, sales inquiries, and other correspondence.
  • Questions, instructions, and notes you type into Vestora’s artificial-intelligence features, the assistant conversations Vestora saves for you, and your choices in their settings, as described in the Artificial intelligence features section.

Information collected automatically

When you access or use the Platform, we and our service providers automatically collect certain information about your device and usage, including:

  • Device and connection information, such as IP address, browser type, operating system, device identifiers, and approximate location derived from IP address.
  • Usage information, such as the pages and features you access, the listings and watchlists you view, the queries you run, the comps you generate, the time and duration of sessions, and the actions you take within the Platform.
  • Authentication and security events, such as login attempts, MFA challenges, new-device sign-ins, password resets, and anomalies suggesting impossible-travel or compromised-credential conditions.
  • Cookies and similar technologies set by Vestora and our service providers for authentication, session continuity, security, and limited analytics purposes, as further described in the Cookies and similar technologies section.

Information from third-party sources

We supplement the information you provide with information obtained from trusted third parties, including:

  • The Florida Department of Business and Professional Regulation’s public license database and official license-data extracts, to verify license type, status, expiration, and applicable brokerage relationships.
  • Your Brokerage Tenant’s administrator, where the brokerage provisions accounts for its agents and provides Vestora with the roster of agents to be enrolled.
  • Our payment, fraud-prevention, error-monitoring, and analytics service providers, in each case acting on Vestora’s behalf and subject to written confidentiality and data-protection obligations.

Miami MLS Data

Vestora receives Miami MLS Data through the Trestle Data Feed pursuant to a data distribution agreement held directly by Vestora Technologies LLC and authorized through the Sponsoring Broker. Miami MLS Data may include information about properties, listing status and history, photographs, listing brokerage and listing agent attribution, and other fields made available by Miami MLS. Some Miami MLS Data fields, such as listing brokerage and listing agent attribution, identify real estate professionals by name. Vestora caches Miami MLS Data locally for performance and refreshes it on a delta-sync schedule from Trestle. Vestora’s access to, storage of, display of, and use of Miami MLS Data is governed at all times by the Miami MLS rules, the Trestle data distribution agreement, and applicable law.

Information we do not collect

Vestora does not collect, store, transmit, or proxy any user’s MLS login credentials. The Platform does not offer a “sign in with your MLS” feature, and there is no MLS credential vault. Vestora also does not knowingly collect Personal Information from individuals under the age of eighteen and does not collect precise geolocation data from your mobile device. Stripe may process a selfie and biometric information for identity verification under its own privacy terms; Vestora does not store biometric templates or identity-document images in its systems.

3. How we use information

Providing and operating the Platform

We use the information described above to operate, maintain, and deliver the Platform to Authorized Users. This includes authenticating users, provisioning Brokerage Tenants, surfacing listings on watchlists and maps, generating comparable-property analyses, calculating analytical insights, sending alerts, and providing customer support. Without the information we collect, the Platform cannot perform its intended functions.

Identity and license verification

We use license, brokerage-affiliation, and contact information to verify that each prospective Authorized User is a properly licensed Florida real estate professional. For a brokerage owner, we also confirm the applicable individual broker and brokerage license records. Verification occurs at signup and is repeated at least annually, including after relevant official-record changes. Accounts that fail re-verification are suspended pending resolution. MLS membership is not part of professional eligibility for the current public-record-only service.

Security, fraud prevention, and compliance

We use authentication data, device data, IP address, and audit logs to protect the Platform and its users against unauthorized access, fraud, abuse, and other security risks. This includes detecting impossible-travel logins, prompting step-up MFA challenges on new devices, sending login notifications, identifying compromised credentials, and investigating suspicious activity. We also process information as needed to comply with our legal obligations, to enforce our agreements with Brokerage Tenants and Authorized Users, and to defend our legal rights.

Product improvement and analytics

We use de-identified or aggregated usage data to understand how Authorized Users interact with the Platform, to identify defects and performance issues, to inform product roadmap decisions, and to improve the analytical models that power features such as Smart Comps. We do not use individual Authorized User behavioral data to make consumer-credit determinations, to perform automated profiling that produces legal or similarly significant effects on any individual, or for advertising to consumers.

Artificial intelligence

Where they are available, Vestora’s artificial-intelligence features use information to explain the figures shown in the Platform, to help with work in the Hub, to run What-if scenarios, to answer questions about your own account in the Vestora Assistant, and to prepare actions that Vestora carries out only when you confirm them. What each feature uses, what is sent to our AI provider, and what Vestora keeps are described in the Artificial intelligence features section of this Policy.

Communications

We use your contact information to send you account-related communications (such as login notifications, security alerts, billing notices, service announcements, and identity re-verification reminders) and, where you have not opted out, occasional product updates and brokerage-relevant content. Account-related communications are necessary for the operation of the Platform and cannot be opted out of without closing your account.

4. Artificial intelligence features

The features

Vestora offers optional features that use artificial intelligence (“AI features”). Each is available only on the screens, plans, and accounts for which Vestora has made it available, and Vestora may switch any of them off at any time. Every other feature of the Platform works without them. Where available, the AI features are:

  • Explanations. On a property, your Portfolio, an analysis tool, or a property report, Vestora can explain the figures shown in plain language and answer questions about them. A professional can also ask for a short draft message to a client based on the same figures.
  • Hub assistance. In the Hub, a professional can ask for a briefing on a client, preparation for an appointment, a reply draft, or a recap of their notes with suggested next steps. An investor can ask for a draft message to their agent, a summary of a conversation, or questions to ask about a property. Professionals may also have the follow-up finder described below.
  • What-if scenarios. You describe a change to your assumptions on a property or tool screen, such as “rent to $2,600,” and see the figures with and without the change, side by side.
  • The Vestora Assistant. One assistant for your own Vestora account. You can open it from any screen, and it opens with that screen’s subject attached, such as the property or client you are viewing; you can remove it before you send your message. In one conversation, a professional can ask about up to four subjects at once: properties and their own clients, appointments, reports, Portfolio, or calendar. Typical requests are a client briefing, a look at the week ahead, a comparison, a draft, or a What-if. The assistant answers only from your account’s data and Vestora’s own calculations, not from general knowledge or the web. It cannot read another professional’s clients, appointments, or reports, including those of other members of your brokerage. It can also prepare actions for you to confirm, and Vestora saves your conversations, as described below.

How the AI features work

The AI does not calculate. Each figure comes from Vestora’s own calculations, county public records, values you entered, values entered by the professional who prepared a report shared with you, or text in your Hub records. Before an AI answer is shown, Vestora checks that every figure in it appears in the information Vestora sent; an answer that fails the check is not shown. In the Vestora Assistant, each figure is checked against the property, client, or other subject it belongs to. In What-if, the AI only identifies the changes your question asks for, and Vestora’s own calculation engine computes every result. AI answers are labelled in the app as written by AI. The AI features run only when you ask, except the follow-up finder. Your device never contacts the AI provider: requests go through Vestora’s servers.

Our AI provider

The AI features use models provided by Anthropic, PBC, which processes the information Vestora sends on Vestora’s behalf under Anthropic’s Commercial Terms of Service, including its Data Processing Addendum. Under those terms, Anthropic does not train its models on that information or on the answers it returns, and it deletes them within 30 days, except where it must keep them longer for safety review or as required by law. Vestora does not use your information, or the AI’s answers, to train any artificial-intelligence model.

What Vestora sends for explanations

When you ask for an explanation on a screen, Vestora sends only the following:

  • fixed instructions written by Vestora;
  • the figures on that screen, as they are displayed, each with its label, its source, and its date;
  • the subject of the screen: the property’s address for a property or a report, the tool’s name for a tool, or “Portfolio”;
  • on the Portfolio screen, the street address and county value of up to 25 of your owned properties;
  • whether your account is an investor or a professional account, and whether it is on a free or a paid plan;
  • the inputs the screen shows as missing, such as “Monthly rent”;
  • the question you typed, if any, up to 300 characters; and
  • if a first answer fails Vestora’s check, a fixed request to try again that lists the reasons it failed.

The figures can include values you entered, such as rent, insurance, HOA dues, or loan details. Other than anything you choose to type into a question, an explanation request never receives your name, email address, phone number, or payment details; notes; chat messages; report titles; the names of property owners; or MLS listing data. Vestora sends a placeholder instead of any account, property, or report identifier. The Vestora Assistant sends more, as described under What Vestora sends for the Vestora Assistant.

What Vestora sends for Hub assistance

Hub assistance works only on your own Hub records: a professional can use it only for their own clients, and an investor only for their own active connection with their agent. Depending on the request, Vestora sends fixed instructions written by Vestora, whether your account is an investor or a professional account and its plan, and the following (each chat message is sent with whether the professional or the client sent it, and when):

  • A client briefing or a notes recap: the client’s status, last contact, and recent activity counts; up to 10 open follow-up titles and 10 open task titles; details of the client’s next appointment; up to three of the client’s saved properties, each with an address and, for some, county facts; the professional’s notes on the client; and up to the 20 most recent chat messages with the client. A recap also sends the notes the professional enters for it, up to 4,000 characters.
  • Appointment preparation: the appointment’s start and end time, title, location, and notes, and any property address typed on it; public-record information about a linked property; and the client’s last contact. For an appointment linked to a listing, it sends only the appointment’s start and end time, the county record’s address of the property where there is one, and the client’s last contact.
  • A reply draft, a conversation summary, or a draft to your agent: up to the 50 most recent chat messages of that conversation, from both sides, and any instruction you type for the draft.
  • Questions about a property: the county record summary of that public property, including its address.

Chat messages are included only as described under Investor messages and your choice. Hub assistance never reads a client’s name, email address, or phone number from the client’s contact details, although messages, notes, and other text people write may contain them. It never sends deleted or hidden messages; attachments or property cards shared in chat; or properties an investor added from their own Portfolio. For a saved property or an appointment linked to an MLS listing, it sends no listing data: at most the county record’s address and the appointment’s time. Apart from what people type or paste into messages, notes, and other text fields, it does not send MLS listing data.

Investor messages and your choice

The AI features read an investor’s conversation with their agent only after the investor has acknowledged Vestora’s notice about AI, which is shown in the Hub or when accepting an invitation, and only while the investor has not turned on “Exclude my messages from AI explanations and drafts” in Settings. This covers the whole conversation, including the professional’s messages in it, and both the professional’s and the investor’s own requests. It also covers the notes, and any property address, an investor wrote in an appointment request. Turning the setting on immediately deletes the follow-up finder items found in that investor’s conversations, and every saved assistant question and reply that used that investor’s connection, their messages, or an appointment confirmed from their request. A professional’s own records about a client, such as their notes on the client, follow-up and task titles, and appointment details, are used for that professional’s requests whatever the investor’s setting, except that the notes and any typed address of an appointment confirmed from an investor’s request are used only as described above.

The follow-up finder

Where it is available for a professional’s account, the follow-up finder runs in the background about every three hours. It sends the AI provider the professional’s own recent messages to clients and their notes on clients, from no more than the last 14 days, so the AI can identify promises the professional made, such as to send comparables. It reads only conversations whose investor has agreed as described above, and it never sends an investor’s messages or appointment notes. Without AI, it also flags clients with no contact in 21 days and follow-ups that are due. Results appear only to the professional, in a “Needs your attention” list that stores codes, dates, and links, never message text. The finder sends nothing to anyone and never creates a follow-up, task, or message on its own. It is on by default where available; turning off “Find follow-ups in my messages and notes” in Settings stops it and removes the open items it found.

What Vestora sends for What-if

When you ask a What-if question, Vestora sends your question, up to 300 characters, and the current value of each assumption the scenario may change, such as monthly rent, with whether it is your saved value or comes from the county tax bill. When you run the scenario, Vestora sends, without your question, the changed values, the screen’s figures with and without the changes as Vestora calculated them, and any missing inputs. Each What-if request also carries fixed instructions written by Vestora and whether your account is an investor or a professional account and its plan. It names the subject only as “This property” or the tool’s name and never sends the property’s address.

The AI’s reply never changes your data. Vestora shows the proposed changes and saves them to your assumptions for that property only when you tap “Apply to my assumptions.” Each time your assumptions for a property are saved, through What-if or otherwise, Vestora keeps the version they replaced, so you can undo one step at a time. Vestora keeps the 20 most recent replaced versions for each property, deletes a version when you undo back to it, and deletes them all with your account.

What Vestora sends for the Vestora Assistant

Each message you send to the Vestora Assistant can involve two requests to the AI provider.

  • Working out what you asked about. Vestora sends fixed instructions written by Vestora, your message, up to three of your earlier messages in the same conversation, and a list of the subjects already in the conversation, each given only as its kind and a letter, such as “Client A.” This request never includes notes, chat messages, or the assistant’s answers. Vestora’s own code then finds the records you meant, only among your own records. When more than one of your clients matches a name, Vestora shows you the matching clients and asks which one you meant; that list is shown only to you and is not sent to the AI provider. Vestora skips this request when you attach the subject and choose the task yourself.
  • Answering. Vestora sends fixed instructions written by Vestora; for each subject in the request, up to four, the information described above for explanations, Hub assistance, and What-if on that kind of subject; your message; earlier questions and verified answers from the same conversation; the conversation’s settings (length, and whether the answer is for you or for your client); whether your account is an investor or a professional account and its plan; and, if a first answer fails Vestora’s check, a fixed request to try again that lists the reasons it failed.

Each subject in the answering request is sent as follows:

  • A property, a report, or your Portfolio: the figures and the subject described under What Vestora sends for explanations, including the property’s address. A What-if asked in the assistant is sent with the property’s address, unlike a What-if on a property or tool screen.
  • A client or an appointment: the information described under What Vestora sends for Hub assistance, which can include your notes on the client, follow-up and task titles, appointment details, and, only as described under Investor messages and your choice, chat messages with the client.

Notes and chat messages are sent only for a client or appointment subject. A property, report, Portfolio, calendar, or client-list subject never carries them. Two kinds of subject are used only by the assistant:

  • Your calendar: for a range of up to seven days, the titles and times of up to 25 appointments, the number of follow-ups due, and the number of items that need your attention. It never includes appointment notes.
  • Your client list: the number of active clients, of clients with no contact in 30 days or more, of follow-ups due, and of invitations pending, and how long ago you last contacted up to 10 of the clients you have contacted least recently.

Vestora never sends your clients’ names from its records, or their email addresses or phone numbers. In the request, each client is named only by a placeholder, such as “Client A,” and the app shows you the name in its place, including in a draft before you review it. What you type, and text people write in messages, notes, appointment titles, and other fields, is sent as written and may contain names. Chat messages with a client are included only as described under Investor messages and your choice. For a draft, chat messages and notes are sent only for the client the draft is for; the request’s other subjects contribute figures and facts only, never their messages or notes. A listing from an MLS feed is never a subject of the assistant. Apart from what people type or paste into messages, notes, and other text fields, the assistant does not send MLS listing data.

Actions you confirm

Where available, the assistant can prepare an action for you: send a message to a client, share a property or a report with a client, create an appointment, add a follow-up, add a task for a client, or apply a What-if to your assumptions. A prepared action appears as a card that shows exactly what will happen, such as the recipient, the full text, and the date and time. You can edit it, confirm it, or cancel it. Nothing is sent, created, or changed until you confirm it, and a card expires after 15 minutes. The recipient or record an action applies to comes from your own records as Vestora found them, never from the AI’s text.

When you confirm, Vestora checks again that the client and the connection are yours and still active, and then does exactly what the app’s own button does for the same action. The result appears where it would if you had done it yourself, such as the message in the client’s chat or the appointment on your calendar, and the outcome is noted in the conversation. You can undo an appointment (including its copy in your device’s calendar, where the app added one), a follow-up, a task, or an applied What-if. A sent message or a share cannot be undone, and the card says so before you confirm.

Saved assistant conversations

Vestora saves your assistant conversations with your account so that you can return to them. For each conversation, Vestora keeps:

  • its title and its settings;
  • your messages;
  • the assistant’s replies that passed Vestora’s check, with their cards, the sources listed under each reply with each figure as it was shown, and the outcome of any action you confirmed; and
  • the time of each message, and internal identifiers of the records each reply used, such as a client, connection, appointment, chat message, or report, so that Vestora can delete the question and reply as described below.

Vestora does not save a reply that failed its check, only that it could not be shown. It does not save the instructions and information it sent to the AI provider.

Only you can see your conversations in the Platform; other members of your brokerage cannot. You can rename a conversation, delete one, or delete all of them. Deleting removes them from Vestora’s database rather than hiding them; copies in Vestora’s encrypted backups are removed as those backups expire. Vestora also deletes them automatically:

  • a conversation, 90 days after its last message;
  • a question and its reply, when one of the following records it used is deleted or changed: a chat message that is edited, deleted, or hidden; a connection with a client that is revoked or deleted; a client who is deleted, whose notes change, or who moves to another professional; an appointment that is deleted or hidden, or whose title, time, time zone, place, notes, client, linked property, or address changes; or a follow-up or a client task that is deleted or edited;
  • the questions and replies that used an investor’s connection, their messages, or an appointment confirmed from their request, when that investor excludes their messages as described under Investor messages and your choice; and
  • all of your conversations, when you delete your account.

When you reopen a conversation, Vestora checks its saved replies against your current records without contacting the AI provider. A reply that relies on records you can no longer access is hidden and marked as no longer available; one that relies on figures your plan no longer includes is marked as needing Pro; and one whose figures have changed is marked as updated, and you can refresh it. Vestora never rewrites a saved reply.

What Vestora keeps

  • Saved explanations and drafts. Vestora saves each verified explanation, and each client draft as the AI wrote it, with your account, so the same request can be answered again without contacting the AI provider. A saved answer is used for up to 30 days. Vestora deletes expired ones the next time it saves one for you, and deletes all of them when you delete your account. Vestora does not save your question, only a one-way keyed fingerprint of it, although an answer may restate what you asked.
  • Assistant conversations. Vestora keeps them as described under Saved assistant conversations: until you delete them or until 90 days after a conversation’s last message, whichever comes first, and for less time when one of the records listed there is deleted or changed.
  • Hub and What-if answers. Outside assistant conversations, Vestora does not save Hub answers or What-if replies. A follow-up a professional creates from a suggestion is saved as their own follow-up, with its title, like one they add themselves.
  • Usage counts and request times. Vestora counts the AI answers you use each month, and keeps the times of your recent requests to limit how fast requests can be made; times more than a day old are deleted as later requests come in. Both are deleted with your account.
  • AI settings. Vestora keeps your AI settings and the time you acknowledged the AI notice, until you delete your account.
  • Follow-up finder items. An item is deleted at once when the message or client note it came from is edited or deleted, when its appointment is deleted or rescheduled, or when its follow-up is deleted, done, or rescheduled. Items found in a conversation are deleted when the connection is ended or the investor excludes their messages. A professional’s items for a client are deleted when the client moves to another professional, and every item is deleted with its client or account. Turning the finder off deletes its open items; items the professional dismissed or marked done stay, with no message text. To avoid reading the same text twice, the finder also keeps, for each professional, the time of the newest message and note it has read and the time it last ran, and a one-way checksum of the last note it sent for each client. These contain no text. The checksums are deleted with the client or the account, and the times with the account.
  • Request records. For most AI requests, and for each professional the follow-up finder visits, Vestora keeps a record of the screen and type of request; where there is one, an internal identifier of each subject, such as a property, client, or appointment; for the assistant, an internal identifier of the message and whether the request was working out the question or answering it; a checksum of what was sent; which figures the answer cited; the model and instruction version used; and the outcome, usage, cost, and time taken. These records never contain your question, the AI’s answer, messages, notes, or an address. Vestora keeps them for security, cost, and accuracy audits, with no set time limit. They are kept after you delete your account, under your former account’s internal identifier.

Plans and limits

Where the AI features are available, paid plans include them at no extra charge, subject to monthly limits. Free accounts may use explanations on some screens, within a smaller monthly limit. Hub assistance, client drafts, and What-if are for paid accounts only, and so are assistant requests about clients, appointments, the calendar, or other Hub records. Each message you send to the Vestora Assistant counts once as one answer when an answer is written, even if that answer then fails Vestora’s check and is not shown. A message does not count when no answer is written: when Vestora asks which client you meant (your choice then continues the same message), finds nothing that matches, cannot use a subject you named, or fails before an answer is written. Refreshing an updated reply counts as one answer.

5. How we share information

Within your Brokerage Tenant

Vestora is a multi-tenant platform organized around Brokerage Tenants. Your activity on the Platform may be visible to other Authorized Users within your Brokerage Tenant in accordance with the role assigned to you and the role-based access controls established by your brokerage administrator. By way of example and not limitation: a managing broker or broker-owner role may have visibility into firm-wide listing activity, agent-level performance dashboards, and audit logs; an agent role typically has access only to that agent’s own watchlists, comps, portfolio, and shared brokerage resources; an agent assistant role inherits a subset of the supervising agent’s permissions. Vestora does not share your activity outside of your Brokerage Tenant except as described in this Policy.

With service providers

We share information with third-party service providers that perform functions on our behalf and under written confidentiality and data-protection obligations. These service providers include, without limitation:

  • Supabase, Inc. — hosted Postgres database, authentication, and storage infrastructure that powers the Platform and enforces row-level security for tenant isolation;
  • Vercel Inc. — application hosting and edge content delivery for the Platform’s web tier;
  • Cloudflare, Inc. — web application firewall, content delivery network, and distributed-denial-of-service protection;
  • CoreLogic Solutions, LLC (Trestle) — Miami MLS data distribution feed under the Trestle Data Agreement;
  • Functional Software, Inc. (Sentry) — application error monitoring and performance telemetry;
  • PostHog, Inc. — product analytics measuring how Authorized Users interact with the Platform;
  • Mailgun (Sinch) — delivery of transactional and account email communications;
  • Mapbox, Inc. — map rendering and geocoding for location search and property mapping;
  • Apple Inc. — in-app subscription purchases and related receipt validation for the iOS application;
  • Florida Department of Business and Professional Regulation — public license status, type, expiration, and brokerage relationship records;
  • Stripe, Inc. — payment processing and Stripe Identity verification; full payment-card numbers, identity-document images, and selfie images are handled by Stripe and are not stored by Vestora;
  • Anthropic, PBC — AI model processing for Vestora’s artificial-intelligence features, where they are available, as described in the Artificial intelligence features section.

Vestora maintains a current list of subprocessors and will provide it to Brokerage Tenants on request.

Professional verification providers

Vestora queries DBPR using the submitted license number and uses official DBPR extracts for corroboration and change detection. Stripe Identity verifies the applicant’s government ID and matching selfie. Stripe handles verification documents and biometric processing under its own privacy terms; Vestora retains only the verification-session reference, status, verified first and last names, and timestamps needed for access control and audit.

Legal disclosures

We may disclose information when we believe in good faith that disclosure is necessary to (i) comply with a subpoena, court order, or other legal process; (ii) respond to a lawful request from a governmental authority; (iii) enforce our agreements; (iv) protect the rights, property, or safety of Vestora, our users, or others; or (v) investigate or prevent fraud, security incidents, or violations of this Policy. Where permitted by law, we will use reasonable efforts to notify the affected Brokerage Tenant or Authorized User before responding to a legal request that targets that party’s data.

Business transfers

If Vestora is involved in a merger, acquisition, financing, reorganization, sale of assets, or other corporate transaction, information held by Vestora may be transferred to a successor or affiliated entity as part of that transaction. We will use reasonable efforts to ensure that any such successor entity is bound by privacy commitments materially consistent with this Policy.

No sale of Personal Information

Vestora does not sell Personal Information for monetary or other valuable consideration, and Vestora does not share Personal Information for cross-context behavioral advertising. We do not display third-party advertising on the Platform, and we do not engage advertising-technology vendors that would receive Authorized User data for advertising purposes.

6. Data security and retention

Security measures

Vestora maintains administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These safeguards include, without limitation:

  • AES-256 encryption of data at rest and TLS 1.3 encryption of data in transit;
  • Storage of application secrets in a managed secrets vault with column-level encryption for sensitive fields;
  • A web application firewall and distributed-denial-of-service protection in front of the Platform;
  • Encrypted automated backups with separate encryption keys;
  • No standing production-database access for engineers; production access is granted on a break-glass basis with audit logging;
  • Anomaly-detection controls including impossible-travel login detection, new-device step-up MFA, and login notifications; and
  • A documented incident-response plan with defined roles, escalation paths, and notification timelines.

Vestora’s compliance roadmap includes a SOC 2 Type I attestation, with SOC 2 Type II observation and reporting thereafter. Until those attestations are issued, the security controls described above operate as Vestora’s contractual and operational commitments.

Authentication and access controls

Authorized User accounts are protected by account credentials, session controls, and additional authentication methods where they are configured or required. Supported controls may include passkeys and risk-based multi-factor challenges. Roles within an authenticated session are encoded in signed JSON Web Token claims and are enforced server-side at Platform endpoints.

Tenant isolation

The Platform is designed so that data belonging to one Brokerage Tenant is not accessible to any other Brokerage Tenant. Tenant isolation is enforced at the database layer through row-level security policies executed by the Postgres engine itself, in addition to application-layer authorization checks. This means that even in the event of an application-tier defect, the database refuses cross-tenant queries. Every query against Miami MLS Data is filtered server-side by tenant context and Authorized User role before any results are returned.

Breach notification

In the event of a confirmed security breach involving Personal Information, Vestora will provide notice to affected Brokerage Tenants and Authorized Users in accordance with applicable law, including Florida’s Information Protection Act of 2014 (Fla. Stat. § 501.171), which requires notification to affected individuals within thirty (30) days of determination of a breach, subject to limited exceptions. Vestora’s incident-response plan is calibrated to meet this timeline and to coordinate any concurrent notifications required by other applicable laws or by the Trestle Data Agreement and Miami MLS rules.

Data retention

Vestora retains information for as long as necessary to provide the Platform, comply with our legal obligations, resolve disputes, enforce our agreements, and maintain audit and security records. Account information is retained for the duration of the underlying Brokerage Subscription Agreement or Individual Subscription Agreement and for a reasonable period thereafter to permit account reinstatement, billing reconciliation, and the satisfaction of legal-hold and audit requirements. Cached Miami MLS Data is retained subject to and refreshed in accordance with the Trestle Data Agreement and applicable Miami MLS rules; Vestora does not retain Miami MLS Data beyond what is permitted by those rules. Authentication and audit logs are retained for a period sufficient to support security investigations and compliance audits, and are then archived or deleted in accordance with Vestora’s data-retention schedule. Information kept by Vestora’s artificial-intelligence features, including saved assistant conversations, saved explanations and drafts, assumption history, and AI request records, is retained as described in the Artificial intelligence features section.

7. Your rights and choices

Account information

You may review and update most of your account information directly within the Platform. For information that cannot be edited from within the Platform, you may contact your brokerage administrator or Vestora at the address set forth in the Contact us section. Where your information is administered by your Brokerage Tenant, Vestora will direct your request to the appropriate brokerage administrator and will assist as reasonably required.

Communications preferences

You may opt out of non-essential product and marketing communications by following the unsubscribe instructions included in those communications or by adjusting your notification preferences within the Platform. You cannot opt out of essential service, security, billing, and identity-verification communications without closing your account, because those communications are necessary for the operation and security of the Platform.

Account deletion

Where your account is provisioned by a Brokerage Tenant, account-deletion requests are handled by your brokerage administrator in coordination with Vestora. Where you are an individually contracted user, you may request deletion of your account by contacting Vestora at the address set forth in the Contact us section. Following a verified deletion request, Vestora will delete or de-identify your Personal Information within a reasonable period, except that Vestora may retain information to the extent necessary to comply with legal obligations, to maintain audit and security logs, to resolve disputes, to enforce our agreements, and as otherwise permitted by applicable law. Deleting your account deletes your saved assistant conversations, the explanations and drafts Vestora’s AI features saved for you, your AI usage counts and recent request times, your AI settings, your assumption history, and any follow-up finder items. The AI request records described in the Artificial intelligence features section are kept as audit records under your former account’s internal identifier and contain no question, answer, message, note, or address.

State-specific rights

Depending on the U.S. state in which you reside, you may have rights under applicable state privacy laws to request access to, correction of, or deletion of Personal Information that Vestora holds about you, and to opt out of certain processing activities. Because Vestora does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising, certain state-law rights related to those activities are not implicated by Vestora’s operations. To exercise any state-specific privacy rights, contact Vestora at the address set forth in the Contact us section; Vestora will respond within the timeframes required by applicable law and may need to verify your identity before fulfilling your request.

Cookies and similar technologies

Vestora and our service providers use cookies, local storage, and similar technologies for purposes including (i) maintaining your authenticated session, (ii) remembering your preferences, (iii) protecting against cross-site request forgery and other security threats, and (iv) measuring Platform usage on an aggregated basis. We do not use cookies for cross-context behavioral advertising. Most browsers allow you to refuse or delete cookies; if you do so, certain features of the Platform may not function correctly. The Platform currently does not respond to browser “Do Not Track” signals, because no industry consensus exists on how such signals should be interpreted; Vestora’s practices regarding sale and sharing of Personal Information are described in the No sale of Personal Information section.

8. Additional terms

Geographic scope

Vestora’s services are offered exclusively within the United States and are not intended for users located outside the United States. Vestora is not subject to the European Union General Data Protection Regulation, the United Kingdom General Data Protection Regulation, or other non-U.S. privacy regimes, and the Platform is not configured for compliance with those regimes. If you access the Platform from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.

Children’s privacy

The Platform serves adult investors and verified real-estate professionals and is not directed to, marketed to, or intended for use by individuals under the age of eighteen. Vestora does not knowingly collect Personal Information from individuals under eighteen. If we become aware that we have inadvertently collected Personal Information from an individual under eighteen, we will delete that information promptly.

Changes to this Policy

Vestora may update this Policy from time to time to reflect changes in our practices, applicable law, or the Platform itself. When we make material changes, we will provide reasonable advance notice through the Platform, by email to the address associated with your account, or by other appropriate means, and we will update the “Effective Date” shown at the top of this Policy. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of that updated Policy.

Governing law

This Policy and any disputes arising out of or relating to it are governed by the laws of the State of Florida, without regard to its conflict-of-laws principles. Any judicial proceeding arising out of or relating to this Policy shall be brought exclusively in the state or federal courts located in Florida, and the parties consent to the personal jurisdiction of those courts. Nothing in this Section limits any rights you may have under mandatory consumer-protection laws of your state of residence.

Contact us

Questions, requests, and notices concerning this Policy may be directed to Vestora’s privacy team at legal@vestoraiq.com.

Privacy questions?

For privacy matters, reach legal@vestoraiq.com.