Skip to main content

Privacy Policy

How we protect and handle your personal information

Last Updated: January 26, 2026

NestKeepr ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our homeowner intelligence platform and related services (collectively, the "Services").

By using NestKeepr, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Personal Information

When you create an account or use our Services, we may collect:

  • Name, email address, and phone number
  • Home address and property information
  • Identity verification information (as required by law)
  • Payment information (processed securely through third-party providers)

Property Data

We collect and process property-related information including:

  • Property ownership records (from public sources)
  • Property value estimates and market data
  • Documents you upload (deeds, inspections, warranties, receipts, etc.)
  • Photos of your property and home components
  • Maintenance records and service history
  • Mortgage and insurance information you provide

Automatically Collected Information

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Cookies and similar tracking technologies
  • SMS delivery and interaction data

Cloud Storage Integrations

You may optionally connect your cloud storage accounts to help import property documents. We support the following providers:

  • Google Drive
  • Microsoft OneDrive
  • Dropbox
  • Box

What we access: When you connect a cloud storage account, we request read-only access to scan for property-related documents (deeds, inspections, warranties, mortgage statements, insurance policies, etc.). This includes:

  • File names and folder structure
  • File metadata (size, type, dates)
  • File content (only for documents you choose to import)

What we do NOT do with your cloud storage:

  • We never request write, modify, or delete permissions
  • We cannot change, move, or delete any files in your cloud storage
  • We do not access personal photos, videos, or non-document files
  • We do not store your cloud storage credentials—we use secure OAuth tokens
  • We do not share your cloud storage data with third parties

How it works: Our system scans your connected storage for files that appear to be property documents based on file names, types, and content patterns. We present matching files for your review—you choose which documents to import. Imported documents are copied to your NestKeepr account and processed like any other uploaded document.

Disconnecting: You can disconnect any cloud storage connection at any time from your account settings. When disconnected, we immediately revoke our access token and can no longer access your cloud storage. Previously imported documents remain in your NestKeepr account unless you delete them.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Services
  • Process and extract information from documents using AI
  • Track property values, maintenance schedules, and send you updates
  • Send you SMS notifications, alerts, and weekly updates
  • Verify property ownership and identity
  • Connect you with trusted service providers when relevant
  • Analyze usage patterns to improve user experience
  • Comply with legal obligations and protect against fraud
  • Communicate with you about your account and our Services

How We Share Your Information

Service Providers

We share information with trusted third-party service providers who help us operate our platform:

  • Cloud infrastructure providers (database, storage, hosting)
  • AI and machine learning services (document processing)
  • Property data providers (market values, ownership records)
  • Communication services (SMS, email delivery)
  • Payment processors (if applicable)
  • Cloud storage providers (Google Drive, Microsoft OneDrive, Dropbox, Box)—only when you connect your account, and only with read-only access

Professional Partners

With your consent, we may share relevant property information with:

  • Real estate agents you choose to work with
  • Service providers you request (contractors, plumbers, etc.)
  • Mortgage lenders or financial institutions (only when you initiate contact)

Legal Requirements

We may disclose information in response to valid, legally enforceable subpoenas, court orders, or other legal process. We evaluate each request to ensure it is valid and appropriately scoped before responding. Where permitted by law, we will attempt to notify you before disclosing your information.

We may also disclose information when necessary to protect our rights, property, or safety, or that of our users or the public.

What We Don't Do:

  • We do not sell your personal information to third parties
  • We do not share your data with advertisers
  • We do not use your documents for purposes beyond providing our Services

Data Security

We implement industry-standard security measures to protect your information:

  • Data encryption in transit (TLS/SSL) and at rest
  • Regular security audits and monitoring
  • Access controls and authentication measures
  • Secure cloud infrastructure with enterprise-grade providers
  • Financial data protection following industry best practices

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

Your Privacy Rights

You have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal requirements)
  • Opt-Out: Unsubscribe from marketing communications at any time
  • Data Portability: Request your data in a portable format
  • Restrict Processing: Request that we limit how we use your information

To exercise these rights, contact us at privacy@nestkeepr.com

State-Specific Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Categories of Personal Information Collected

  • Identifiers: Name, email, phone number, address, IP address
  • Financial Information: Mortgage details, insurance policies (from documents you upload)
  • Protected Classifications: Not collected
  • Commercial Information: Property records, transaction history
  • Internet Activity: Usage data, device information, cookies
  • Geolocation: Property location (address-based, not GPS tracking)
  • Professional Information: Professional contacts you add
  • Sensitive Personal Information: SSN/EIN (only when you upload documents containing them - encrypted at rest)

Your CCPA Rights

  • Right to Know: Request what personal information we collect, use, and disclose
  • Right to Delete: Request deletion of your personal information
  • Right to Correct: Request correction of inaccurate information
  • Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising
  • Right to Limit Sensitive Data Use: Request we limit use of sensitive personal information to what is necessary for providing services
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Exercising Your Rights

To submit a verifiable consumer request, email privacy@nestkeepr.com with subject line "CCPA Request". We will respond within 45 days (up to 90 days for complex requests). You may designate an authorized agent to make requests on your behalf.

Global Privacy Control

We honor the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal, we will treat it as an opt-out of the sale or sharing of personal information for that browser/device.

Automated Decision-Making

We use AI to extract information from documents you upload. You have the right to opt-out of automated decision-making that produces legal or similarly significant effects. Our AI extraction is used solely to organize your property information and does not make decisions affecting your rights.

Other State Privacy Laws

If you reside in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MTCDPA), or other states with comprehensive privacy laws, you may have similar rights including access, deletion, correction, portability, and opt-out rights. Contact us at privacy@nestkeepr.com to exercise your rights under applicable state law.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience.

Cookies We Use

NestKeepr uses essential cookies required for security and core functionality, plus optional analytics cookies (with your consent):

  • Authentication Session: Keeps you logged in securely (via Supabase Auth)
  • Security Tokens: CSRF protection to prevent cross-site request forgery attacks
  • User Preferences: Remembers your account type for faster page loads
  • Analytics (with consent): Helps us understand how visitors use our site to improve the experience
Cookie NamePurposeProviderDuration
sb-*-auth-tokenStores authentication session for logged-in usersSupabaseSession / 1 week
sb-*-auth-token-code-verifierPKCE code verifier for secure OAuth flowSupabaseSession
nestkeepr_account_typeRemembers account type (homeowner/professional) for page routingNestKeepr1 year
nestkeepr_csrfCross-site request forgery protection tokenNestKeeprSession
__stripe_midFraud prevention for payment processing (only on checkout pages)Stripe1 year
__stripe_sidStripe session identifier for secure paymentsStripe30 minutes
Analytics Cookies (set only with your consent)
_gaDistinguishes unique visitors for site analyticsGoogle Analytics2 years
_ga_*Maintains session state for analytics reportingGoogle Analytics2 years

* The asterisk in cookie names represents your project-specific identifier.

What We Don't Use:

  • No Advertising Cookies: We don't serve ads or use retargeting pixels
  • No Social Media Trackers: No social media widgets or embedded content that tracks you across sites
  • No Cross-Site Tracking: We don't share your browsing behavior with advertisers

Cookie Consent

When you first visit NestKeepr, you'll see a simple cookie consent banner where you can choose to accept or reject analytics cookies. Your choice is saved and remembered for future visits.

  • Accept All: We'll load Google Analytics to help us improve the site
  • Reject All: Only essential cookies will be used - no analytics tracking
  • Change Your Mind: Click "Cookie Preferences" in the footer anytime to update your choice

Global Privacy Control (GPC)

We honor the Global Privacy Control browser signal. If your browser sends a GPC signal, we automatically block analytics cookies without showing you a consent banner. We also don't engage in data sales or cross-context behavioral advertising, so GPC signals confirm that no opt-out is needed for those practices.

Managing Cookies

You can delete or block cookies through your browser settings. However, blocking essential cookies may prevent you from logging in or using NestKeepr's core features. For instructions on managing cookies, consult your browser's help documentation.

Analytics

With your consent, we use Google Analytics 4 (GA4) to understand how visitors use NestKeepr. This helps us improve the user experience, identify popular features, and fix issues.

What Analytics Collects

  • Pages you visit and features you use
  • How long you spend on different pages
  • Your general geographic region (country/city level)
  • Device type, browser, and operating system
  • How you arrived at our site (referrer)

Privacy Protections

  • IP Anonymization: Your full IP address is never stored
  • No Personal Data: Analytics doesn't collect your name, email, or account details
  • Data Retention: Analytics data is automatically deleted after 14 months
  • No Data Sharing: We don't share analytics with advertisers or sell this data
  • Consent Required: Analytics only loads if you accept cookies

How to Opt Out

You can opt out of analytics by:

Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Data Retention

We retain your information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements.

What Happens When You Cancel Your Account

Immediate (within 30 days): Your personal profile data, preferences, and active session data are deleted.

Within 90 days: Documents you uploaded and AI-extracted data are permanently deleted from our systems and backups.

Retained for legal compliance: Transaction records and billing history may be retained for up to 7 years as required by tax and accounting regulations. This data is anonymized where possible.

Aggregated analytics: De-identified, aggregated usage statistics (e.g., total documents processed) may be retained indefinitely for service improvement but cannot be linked back to you.

To request immediate deletion of all your data (subject to legal retention requirements), contact privacy@nestkeepr.com with subject line "Data Deletion Request".

International Users

Our Services are operated in the United States. If you access our Services from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using our Services, you consent to this transfer.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our Services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: privacy@nestkeepr.com

Mail:
NestKeepr
1309 Coffeen Avenue STE 1200
Sheridan, WY 82801

Want to learn more about how we protect your data?