Privacy Policy

1. Who We Are

This Privacy Policy describes how DebtJockey LLC (“Debt Jockey,” “we,” “us”) collects, uses, and shares information when you use debtjockey.com and related services (the “Service”). Questions: carson@debtjockey.com.

2. Information We Collect

Information you provide:

• Account information — name, email address, password, firm name, billing details.
• Deal and property data — property names, addresses, financial inputs (value, NOI, rents, debt figures), deal notes, contacts, documents, and other content you enter into sizers, the deal pipeline, or other tools (“User Content”).
• Communications — emails or messages you send us, feedback, support requests.

Information collected automatically:

• Usage data — pages viewed, features used, sizings run, timestamps, referring URLs.
• Device data — IP address, browser type, operating system, screen size.
• Cookies and similar technologies — used for authentication, session management, free-tier usage limits, preferences, and analytics. You can control cookies through your browser; some features may not function without them.

Information from third parties:

• Payment information — processed by our PCI-compliant payment processor (Stripe); we receive transaction status and limited billing details but do not store full card numbers.
• Market data — Treasury and SOFR rates from public data sources (e.g., Federal Reserve data services); this is not personal information.

3. How We Use Information

• Provide, operate, and maintain the Service (including running calculations on your inputs);
• Process payments and manage subscriptions;
• Enforce free-tier limits and prevent abuse;
• Communicate with you about the Service, including transactional emails and (with opt-out) product updates;
• Analyze usage to improve features, performance, and user experience;
• Create de-identified, aggregated data (e.g., anonymized market benchmarks) that does not identify you or your deals;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not share deal-level User Content with third parties in identifiable form except as described below (service providers, legal requirements, or at your direction via share links and exports).

4. How We Share Information

• Service providers — vendors that host and operate the Service on our behalf, currently including: our application development and hosting platform (Lovable) and its underlying cloud infrastructure, database, and authentication provider (Supabase); our payment processor (Stripe); and our business email provider (Google Workspace). Each provider is permitted to use information only to provide services to us.
• At your direction — when you generate share links, PDFs, or exports, the recipients you share them with can view that content. Share links are accessible to anyone who possesses the URL until the link expires.
• Legal — if required by law, subpoena, or to protect rights, safety, or the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

5. Data Retention

We retain account information and User Content while your account is active. After account termination, we retain User Content for up to 30 days for export purposes, then delete or de-identify it within a commercially reasonable period, except where retention is required by law (e.g., billing records) or where data has been de-identified and aggregated. Free-tier sizing inputs not associated with an account may be retained in de-identified form.

6. Security

We use commercially reasonable safeguards — including encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No system is perfectly secure; you should not input data you are not authorized to share.

7. Your Privacy Rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

• Know/Access — request the categories and specific pieces of personal information we hold about you;
• Delete — request deletion of your personal information, subject to legal exceptions;
• Correct — request correction of inaccurate personal information;
• Opt out of sale/sharing — we do not sell personal information or share it for cross-context behavioral advertising;
• Non-discrimination — we will not discriminate against you for exercising these rights.

To exercise these rights, email carson@debtjockey.com. We will verify your identity (typically via your account email) and respond within the timeframe required by law. Residents of other states with comprehensive privacy laws may have similar rights and may use the same contact. An authorized agent may submit a request on your behalf with proof of authorization.

8. Children

The Service is for business use by adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

9. Do Not Track

The Service does not currently respond to “Do Not Track” browser signals.

10. Changes to This Policy

We may update this Policy. Material changes will be announced via the Service or email before taking effect. The “Effective Date” above reflects the latest revision.

11. Contact

DebtJockey LLC · Irvine, California · carson@debtjockey.com